$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft File: MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft (raw, json) Hash identifier: eZTjF/PDUIHxw6NOdFv3gO2RP/MEA025nV4JExJ8VrQ= Subject key identifier: B7:70:1E:0A:F3:DF:E8:08:EE:E1:58:7D:C7:B0:23:29:72:BF:03:4A Authority key identifier: 32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 Certificate issuer: /CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Certificate serial: 3567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft Manifest number: 3567 Signing time: Tue 18 Aug 2026 15:05:32 +0000 Manifest this update: Tue 18 Aug 2026 15:05:31 +0000 Manifest next update: Tue 25 Aug 2026 15:05:31 +0000 Files and hashes: 1: MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl (hash: DpfQZWLbjg9yuheqS/+j2svXpM2Q/PVhA7pxoLNA59s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13671 (0x3567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA023, serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Validity Not Before: Aug 18 15:05:31 2026 GMT Not After : Aug 25 15:05:31 2026 GMT Subject: CN=6a8474bc-92ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:73:1f:bc:1e:33:57:58:01:34:fa:0f:74: 36:80:10:e4:ae:5e:05:05:7a:4e:e4:63:2d:3b:65: 38:dd:09:8e:9b:4f:51:7b:1d:b5:16:0b:0a:42:2b: 46:8d:f5:20:f8:f5:bd:b5:8e:81:b9:44:67:58:92: 18:1c:06:b5:b3:e2:46:e3:f3:8c:fb:f0:ae:a8:ba: 86:82:58:4a:b3:a5:2b:db:92:9e:c7:49:8a:50:60: bb:15:b8:61:f9:f8:63:4a:4b:11:bc:40:d1:9b:25: 9b:39:b7:c5:0f:cc:60:26:b2:c9:45:6e:38:16:97: 96:8f:17:5b:f0:f1:71:f9:52:e1:df:8c:96:9a:36: 38:44:d7:1b:19:11:db:68:ab:b8:27:f3:11:0a:cf: 51:6b:15:a9:26:0a:c7:f0:76:c2:cc:33:97:5e:fc: 7c:0d:48:c4:9b:7b:a3:31:5c:09:d4:25:12:11:0d: 6d:65:f6:da:ea:45:07:37:03:f0:de:f2:30:20:82: 8e:0f:6f:c0:46:52:a5:ee:a6:5f:e5:cc:3a:3b:db: ad:16:15:2d:c6:8a:dd:fa:10:47:29:fc:87:4b:1e: b0:d6:3a:ea:99:71:65:07:4d:b1:84:cd:5d:81:ab: 0a:93:e6:2f:49:7d:df:e5:d5:cf:fe:d7:87:c2:55: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:1E:0A:F3:DF:E8:08:EE:E1:58:7D:C7:B0:23:29:72:BF:03:4A X509v3 Authority Key Identifier: keyid:32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c4:2a:44:97:9c:f6:1c:cf:59:94:22:b3:76:e9:d8:56:28: 48:06:36:69:e5:82:d7:09:4d:a2:07:50:27:7e:52:5c:79:11: 95:da:56:f8:40:1f:81:06:b8:c0:34:29:d0:12:2f:a0:58:92: 98:2f:56:22:33:95:da:9c:eb:f9:d9:02:47:ba:50:85:9d:c0: e6:65:71:39:8d:59:a2:94:5d:43:ae:dd:0e:59:96:61:3d:a7: db:f1:74:78:90:67:1b:e1:6d:28:64:27:14:ff:35:84:2f:a8: 9d:ea:8c:b1:82:9b:01:4a:83:e9:7d:dd:3b:a2:40:11:99:a8: 0e:e2:64:cf:a5:9d:e0:20:ea:8d:a5:c6:db:a8:3c:45:72:a3: ae:ba:44:1b:9c:7f:54:0b:01:f2:09:20:f9:dd:0e:9c:e3:56: d7:12:dd:ad:9f:91:37:e8:2b:1e:37:c7:1b:14:15:5a:32:f8: 7d:73:fc:f4:cf:30:13:ba:f6:ce:2d:f9:47:79:bf:9c:46:44: bf:08:b5:81:af:c2:1e:e5:77:c7:4d:9a:fc:2b:67:15:17:7f: 8d:eb:a9:da:67:1d:df:2a:30:97:f6:db:26:83:a4:c2:42:24: 2a:46:5b:cf:ea:53:cb:07:c4:e8:1a:4a:2b:f5:9d:c1:ab:9f: 66:c7:7e:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjMxMTAvBgNVBAUTKDMyNzBGM0FDRDk3MUVFREY4NDYxNzU0OEY3MkU1MUUy MkE1MDNDRjgwHhcNMjYwODE4MTUwNTMxWhcNMjYwODI1MTUwNTMxWjAYMRYwFAYD VQQDEw02YTg0NzRiYy05MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuZzH7weM1dYATT6D3Q2gBDkrl4FBXpO5GMtO2U43QmOm09Rex21FgsKQitG jfUg+PW9tY6BuURnWJIYHAa1s+JG4/OM+/CuqLqGglhKs6Ur25Kex0mKUGC7Fbhh +fhjSksRvEDRmyWbObfFD8xgJrLJRW44FpeWjxdb8PFx+VLh34yWmjY4RNcbGRHb aKu4J/MRCs9RaxWpJgrH8HbCzDOXXvx8DUjEm3ujMVwJ1CUSEQ1tZfba6kUHNwPw 3vIwIIKOD2/ARlKl7qZf5cw6O9utFhUtxord+hBHKfyHSx6w1jrqmXFlB02xhM1d gasKk+YvSX3f5dXP/teHwlVIjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdwHgrz 3+gI7uFYfcewIylyvwNKMB8GA1UdIwQYMBaAFDJw86zZce7fhGF1SPcuUeIqUDz4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMy82RjE3MkRGMDFE QTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0LUVZWFZJOXk1UjRpcFFQ UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uRHpyTmx4N3QtRVlYVkk5eTVSNGlwUVBQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMy82RjE3MkRGMDFEQTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0 LUVZWFZJOXk1UjRpcFFQUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsQqRJec9hzPWZQis3bp2FYoSAY2aeWC1wlNogdQJ35SXHkRldpW+EAfgQa4 wDQp0BIvoFiSmC9WIjOV2pzr+dkCR7pQhZ3A5mVxOY1ZopRdQ67dDlmWYT2n2/F0 eJBnG+FtKGQnFP81hC+oneqMsYKbAUqD6X3dO6JAEZmoDuJkz6Wd4CDqjaXG26g8 RXKjrrpEG5x/VAsB8gkg+d0OnONW1xLdrZ+RN+grHjfHGxQVWjL4fXP89M8wE7r2 zi35R3m/nEZEvwi1ga/CHuV3x02a/CtnFRd/jeup2mcd3yowl/bbJoOkwkIkKkZb z+pTywfE6BpKK/WdwaufZsd+UQ== -----END CERTIFICATE-----Generated at Wed Aug 19 14:31:43 2026 by rpki-client