$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: pn4M02y93Fm5VroQMyksDZaJrC7r1MDaJouzZI+gTuA= Subject key identifier: B2:33:DF:B8:EC:2A:36:8A:42:07:5C:52:21:CE:CA:9F:E8:2B:EB:1C Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 53 Signing time: Thu 23 Jul 2026 10:16:01 +0000 Manifest this update: Thu 23 Jul 2026 10:16:00 +0000 Manifest next update: Thu 30 Jul 2026 10:16:00 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: 2d6lSZeTPsf14KZnbtilowioNYQfQKkaLAW+P+ptUnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Jul 23 10:16:00 2026 GMT Not After : Jul 30 10:16:00 2026 GMT Subject: CN=6a61e9e0-23ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:29:ed:50:fb:2a:40:e7:6e:e0:87:77:bb:37: 31:5f:fc:8f:65:bf:62:90:28:b6:fd:df:cb:2e:a8: b5:ab:9b:38:06:d0:cb:81:27:a6:f7:58:34:e5:f6: 3f:75:3d:7d:92:8b:13:7a:51:00:13:aa:f2:7b:9d: a5:d3:32:ca:8c:42:4b:fa:7a:af:81:57:c7:ed:ca: 6f:08:35:c4:91:85:4c:8f:07:f1:90:0c:51:9b:57: 13:ce:93:1d:c1:92:1f:56:67:9a:39:ed:ce:db:fe: 8f:90:24:00:91:88:c0:87:a7:a6:e3:3e:84:b5:5d: 0a:ff:86:8e:e2:9d:35:3f:3a:3f:de:06:ae:f4:55: 65:2e:ea:b7:04:ee:60:57:ad:48:1d:a9:5e:ce:2d: e6:48:53:4a:cb:b9:40:92:8c:47:d3:40:fa:f3:ec: 38:e6:a1:a8:22:8e:51:7f:64:d6:d1:df:d7:f6:8f: fa:5a:19:3b:f3:73:dd:3c:6f:e0:97:15:e1:9b:f4: 14:e4:a5:7e:7f:26:bb:36:16:35:3c:7c:3b:b1:8c: a5:42:1c:32:58:e9:5e:46:c8:ed:e9:bc:d1:ea:85: c4:0d:b5:c6:76:e5:4d:b7:72:ec:ab:14:b1:f7:e8: f1:60:33:96:ab:9b:6c:57:01:0b:c9:82:03:cd:9b: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:33:DF:B8:EC:2A:36:8A:42:07:5C:52:21:CE:CA:9F:E8:2B:EB:1C X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3d:af:9a:d3:c0:c4:d8:6d:65:04:41:12:e6:ab:69:3a:aa: fc:d5:95:45:f7:37:77:1f:26:db:83:35:63:d7:26:ec:b8:47: bd:d3:92:7d:02:d3:c2:5a:3b:b6:5f:bf:29:fe:8f:2b:16:8d: c1:d3:06:c1:08:a4:84:ca:9b:d2:32:3f:64:80:81:f5:06:7b: 03:b1:c5:7d:e0:14:19:cb:52:ab:a3:f4:7b:80:01:70:3e:dc: 92:84:f5:59:b4:bf:3c:05:7c:8d:c1:94:ea:6c:10:38:e5:2c: e0:eb:43:ab:b6:33:3b:29:b6:e5:a1:f4:76:63:5a:63:56:31: 60:28:f5:27:cd:b8:5a:a7:db:1e:40:42:f0:68:80:aa:9b:d4: b4:10:81:8a:92:4b:d1:1e:71:86:c1:21:35:65:ab:6b:35:ae: 0e:a9:cb:fd:39:0d:11:33:97:b0:39:2b:c6:f1:91:30:ee:71: 78:e5:16:ad:f1:66:d5:26:13:00:ca:bb:b9:80:0d:b8:b6:77: fa:fc:c2:39:ec:0d:a6:75:7a:f3:44:17:41:d7:9c:38:b9:61: ca:34:b6:94:18:d8:29:cb:0b:58:c6:c0:bc:d9:18:4a:13:20: bf:d8:17:42:0f:16:b7:fe:f7:02:3f:00:10:8b:f2:08:9c:21: 1b:1d:21:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjA3MjMxMDE2MDBaFw0yNjA3MzAxMDE2MDBaMBgxFjAUBgNV BAMTDTZhNjFlOWUwLTIzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoKe1Q+ypA527gh3e7NzFf/I9lv2KQKLb938suqLWrmzgG0MuBJ6b3WDTl9j91 PX2SixN6UQATqvJ7naXTMsqMQkv6eq+BV8ftym8INcSRhUyPB/GQDFGbVxPOkx3B kh9WZ5o57c7b/o+QJACRiMCHp6bjPoS1XQr/ho7inTU/Oj/eBq70VWUu6rcE7mBX rUgdqV7OLeZIU0rLuUCSjEfTQPrz7DjmoagijlF/ZNbR39f2j/paGTvzc908b+CX FeGb9BTkpX5/Jrs2FjU8fDuxjKVCHDJY6V5GyO3pvNHqhcQNtcZ25U23cuyrFLH3 6PFgM5arm2xXAQvJggPNm5MvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsjPfuOwq NopCB1xSIc7Kn+gr6xwwHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASPa+a08DE2G1lBEES5qtpOqr81ZVF9zd3HybbgzVj1ybsuEe905J9AtPCWju2 X78p/o8rFo3B0wbBCKSEypvSMj9kgIH1BnsDscV94BQZy1Kro/R7gAFwPtyShPVZ tL88BXyNwZTqbBA45Szg60OrtjM7KbblofR2Y1pjVjFgKPUnzbhap9seQELwaICq m9S0EIGKkkvRHnGGwSE1ZatrNa4Oqcv9OQ0RM5ewOSvG8ZEw7nF45Rat8WbVJhMA yru5gA24tnf6/MI57A2mdXrzRBdB15w4uWHKNLaUGNgpywtYxsC82RhKEyC/2BdC Dxa3/vcCPwAQi/IInCEbHSFs -----END CERTIFICATE-----Generated at Fri Jul 24 17:13:23 2026 by rpki-client