$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json) Hash identifier: TKc/Owd0kboBDDbBA4AsocsxM/8natOA/ZPYB8MNHMc= Subject key identifier: 9E:B9:AD:55:E6:1E:26:E2:9C:62:26:45:A7:13:71:E0:86:0B:BA:C2 Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft Manifest number: 43 Signing time: Tue 21 Jul 2026 10:18:37 +0000 Manifest this update: Tue 21 Jul 2026 10:18:37 +0000 Manifest next update: Tue 28 Jul 2026 10:18:37 +0000 Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: vluB4tlpWrsEedKyr63rXdZKRn87216XRJjpXQMvY0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Validity Not Before: Jul 21 10:18:37 2026 GMT Not After : Jul 28 10:18:37 2026 GMT Subject: CN=6a5f477d-f563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ae:36:01:61:19:82:56:16:66:89:88:51:a6: e4:1a:18:21:2b:99:59:a6:c3:1c:0c:47:9b:c5:24: e5:5b:4b:84:39:8a:6d:a4:38:15:10:94:7a:80:e9: 9a:4f:41:f6:80:44:3d:44:33:c9:a2:b3:c3:7e:2c: d2:f4:86:a1:70:58:e8:bb:4c:65:6d:3e:6f:ac:66: 07:08:b4:08:48:1b:77:c6:a8:7a:74:b7:23:fb:16: e1:a1:88:80:8b:c8:f4:6b:82:7d:67:2f:f2:d2:c6: 3e:d3:af:a6:74:95:76:2f:3c:b2:ba:2c:90:27:05: c8:d3:8e:53:f3:e5:48:ec:a3:ed:0a:0e:bd:9d:de: 27:18:96:59:81:91:42:59:58:f7:ae:56:ce:50:75: 95:e8:8c:e7:26:a3:7f:ad:3c:76:08:7f:f5:db:7b: 81:26:1f:89:14:77:ae:40:47:0e:51:b3:12:eb:92: bf:af:1d:ba:5e:d3:69:71:36:c9:af:ef:16:94:6a: d1:67:91:34:e0:f9:65:96:8d:d3:a4:09:8b:5b:e1: 38:8f:8a:b0:57:ba:05:5e:66:d6:15:f0:7b:93:48: 21:2b:b1:70:a1:35:f8:e0:48:a1:1e:d6:22:7a:8b: 3a:f3:28:d1:e6:d4:3e:a8:c2:77:7b:a7:c0:63:51: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:AD:55:E6:1E:26:E2:9C:62:26:45:A7:13:71:E0:86:0B:BA:C2 X509v3 Authority Key Identifier: keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8c:27:3d:33:21:a5:b1:6b:c1:35:25:ab:39:35:75:0e:34: ce:7a:e9:45:f7:23:e2:22:63:ba:17:83:94:c9:80:63:38:d8: 29:c4:3b:ca:72:fd:66:26:8d:90:e4:aa:94:76:8c:2b:b3:27: 7a:04:fd:88:cc:13:4f:e0:02:10:25:4a:76:fb:79:dc:4a:c4: 6a:7b:77:4b:5b:c9:7d:02:d6:ef:0d:bf:ef:d7:bb:e5:88:28: 09:c9:30:56:b7:54:24:a5:fe:b9:f7:d5:a9:db:c5:0d:1a:70: 28:88:75:75:44:bc:3c:32:3a:1e:3f:a4:df:d8:0d:d2:bd:69: 03:bd:0e:41:dc:ef:ae:33:5a:4a:a4:db:cb:ad:1a:de:e0:f5: 68:47:42:4c:f6:fc:e9:06:2f:b7:fe:dd:b4:9a:9a:09:d2:81: 6a:29:2c:cf:16:52:17:1d:30:99:44:ca:d7:e5:bf:66:19:a9: 9f:f1:45:d6:9b:c8:fd:61:0a:de:b9:1e:a4:f7:1e:c2:d9:31: ff:77:a3:ee:d5:38:12:de:22:d9:7d:e8:d2:36:aa:a8:e2:7b: 0c:2d:14:93:d5:b7:ad:2b:25:b9:e6:5e:a6:38:96:2f:38:bc: 39:a1:9c:33:32:6e:23:35:cf:ff:a2:77:3b:6b:e0:98:66:52: da:77:a4:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2 QTRBMzZCQTAeFw0yNjA3MjExMDE4MzdaFw0yNjA3MjgxMDE4MzdaMBgxFjAUBgNV BAMTDTZhNWY0NzdkLWY1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2rjYBYRmCVhZmiYhRpuQaGCErmVmmwxwMR5vFJOVbS4Q5im2kOBUQlHqA6ZpP QfaARD1EM8mis8N+LNL0hqFwWOi7TGVtPm+sZgcItAhIG3fGqHp0tyP7FuGhiICL yPRrgn1nL/LSxj7Tr6Z0lXYvPLK6LJAnBcjTjlPz5Ujso+0KDr2d3icYllmBkUJZ WPeuVs5QdZXojOcmo3+tPHYIf/Xbe4EmH4kUd65ARw5RsxLrkr+vHbpe02lxNsmv 7xaUatFnkTTg+WWWjdOkCYtb4TiPirBXugVeZtYV8HuTSCErsXChNfjgSKEe1iJ6 izrzKNHm1D6ownd7p8BjUWmbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnrmtVeYe JuKcYiZFpxNx4IYLusIwHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3 ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRjCc9MyGlsWvBNSWrOTV1DjTOeulF9yPiImO6F4OUyYBjONgpxDvKcv1mJo2Q 5KqUdowrsyd6BP2IzBNP4AIQJUp2+3ncSsRqe3dLW8l9AtbvDb/v17vliCgJyTBW t1Qkpf6599Wp28UNGnAoiHV1RLw8MjoeP6Tf2A3SvWkDvQ5B3O+uM1pKpNvLrRre 4PVoR0JM9vzpBi+3/t20mpoJ0oFqKSzPFlIXHTCZRMrX5b9mGamf8UXWm8j9YQre uR6k9x7C2TH/d6Pu1TgS3iLZfejSNqqo4nsMLRST1betKyW55l6mOJYvOLw5oZwz Mm4jNc//onc7a+CYZlLad6Rv -----END CERTIFICATE-----Generated at Tue Jul 21 17:58:46 2026 by rpki-client