$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft File: MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft (raw, json) Hash identifier: Xb+d/9y59cDYExQYm/AJws4zMHcgf9PemY+Cjiqs8wk= Subject key identifier: 67:61:1A:C6:0E:A5:01:C5:50:8B:D5:03:58:F6:16:7C:FD:D8:65:5C Authority key identifier: 32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 Certificate issuer: /CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Certificate serial: 357F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft Manifest number: 357F Signing time: Fri 02 Oct 2026 15:05:18 +0000 Manifest this update: Fri 02 Oct 2026 15:05:17 +0000 Manifest next update: Fri 09 Oct 2026 15:05:17 +0000 Files and hashes: 1: MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl (hash: WgYXPDBEeDoGpAaPGj0DE7UHu2d2Mq8GLA6zIOBEfP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13695 (0x357f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA023, serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8 Validity Not Before: Oct 2 15:05:17 2026 GMT Not After : Oct 9 15:05:17 2026 GMT Subject: CN=6abfc82e-63a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:86:0f:05:58:50:41:d9:c8:5f:cb:dd:14: 13:26:9c:ff:4e:12:7e:97:15:7e:da:da:54:6d:52: 40:82:82:0a:15:1c:92:09:22:b1:df:eb:2c:80:a9: 76:ea:b6:9e:f8:dd:60:3d:5a:7b:4b:e3:69:1d:11: 70:94:08:18:e5:19:4a:ca:f8:6d:d5:e7:84:5a:d0: ee:e4:65:41:ed:b4:c0:f0:7f:45:ad:82:21:ca:e6: a8:8c:83:c0:d9:a8:18:80:06:25:15:bb:25:a2:ed: e8:f7:a4:2e:9c:a6:34:05:3b:10:6b:02:77:cd:35: 99:94:c5:c1:4c:a2:54:23:fa:99:a8:a0:59:a0:bb: f2:ce:20:5e:2b:e2:0d:3d:e8:03:a3:08:8d:53:2e: 65:34:cf:ff:d8:17:8f:2d:07:0c:56:f2:b1:19:0d: 13:58:56:4d:18:8d:ed:75:8a:87:58:e9:c5:7c:e0: f7:e7:45:4b:cf:11:bd:2c:58:fd:75:b3:22:11:f9: b6:a4:04:83:36:d0:a2:6f:56:35:da:cf:74:3b:1b: e6:29:05:7a:6c:41:49:ae:21:7e:07:d0:ee:2d:7b: fb:37:41:a9:30:3f:05:83:2a:8c:33:28:78:7b:55: 8a:98:8e:69:9d:61:99:ff:ba:c3:33:8e:fc:9b:bb: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:61:1A:C6:0E:A5:01:C5:50:8B:D5:03:58:F6:16:7C:FD:D8:65:5C X509v3 Authority Key Identifier: keyid:32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:29:79:86:4c:58:bb:d7:9b:99:2e:9b:e5:a2:72:8d:d1: 05:51:c5:af:3f:0e:16:09:df:66:09:2c:f2:5b:64:6d:cd:a9: ff:c4:04:84:0b:bb:56:28:a2:91:ab:8a:09:00:06:ab:87:f6: 67:ee:53:49:5d:a7:7d:1a:cb:7f:c8:f1:f5:f4:54:1d:d3:14: db:05:66:b5:d6:40:61:46:b6:c3:f2:3e:37:46:d1:e8:53:63: 4d:97:37:99:5b:4f:22:42:0f:62:ee:e3:90:00:73:f3:63:ae: 55:fd:b3:f4:e5:38:b3:69:b2:58:b5:34:9f:13:71:db:f2:83: 6b:82:71:a2:f6:f4:d9:ac:b6:ee:b6:16:73:23:bc:a2:9a:fd: fb:a9:33:5b:ba:f6:d4:90:f7:c0:16:2e:e4:d0:e8:ca:e5:c8: 8b:a7:8b:ae:02:c1:b1:88:e1:ed:b2:06:6e:bd:1c:76:6c:98: e7:11:8c:de:d7:a1:6d:b2:20:e8:be:1c:20:39:e9:f4:90:da: d3:9c:97:0e:d9:4e:b6:39:38:75:ad:cb:95:8c:e5:60:28:3d: 91:c1:0b:bf:52:f9:66:68:4f:ee:75:23:f9:7b:ba:67:fa:2f: 83:ec:c2:24:41:df:c7:28:78:86:90:70:1e:34:47:da:2e:3c: 71:d2:c9:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjMxMTAvBgNVBAUTKDMyNzBGM0FDRDk3MUVFREY4NDYxNzU0OEY3MkU1MUUy MkE1MDNDRjgwHhcNMjYxMDAyMTUwNTE3WhcNMjYxMDA5MTUwNTE3WjAYMRYwFAYD VQQDEw02YWJmYzgyZS02M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hOGDwVYUEHZyF/L3RQTJpz/ThJ+lxV+2tpUbVJAgoIKFRySCSKx3+ssgKl2 6rae+N1gPVp7S+NpHRFwlAgY5RlKyvht1eeEWtDu5GVB7bTA8H9FrYIhyuaojIPA 2agYgAYlFbslou3o96QunKY0BTsQawJ3zTWZlMXBTKJUI/qZqKBZoLvyziBeK+IN PegDowiNUy5lNM//2BePLQcMVvKxGQ0TWFZNGI3tdYqHWOnFfOD350VLzxG9LFj9 dbMiEfm2pASDNtCib1Y12s90OxvmKQV6bEFJriF+B9DuLXv7N0GpMD8FgyqMMyh4 e1WKmI5pnWGZ/7rDM478m7tWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdhGsYO pQHFUIvVA1j2Fnz92GVcMB8GA1UdIwQYMBaAFDJw86zZce7fhGF1SPcuUeIqUDz4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMy82RjE3MkRGMDFE QTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0LUVZWFZJOXk1UjRpcFFQ UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uRHpyTmx4N3QtRVlYVkk5eTVSNGlwUVBQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMy82RjE3MkRGMDFEQTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0 LUVZWFZJOXk1UjRpcFFQUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgncpeYZMWLvXm5kum+Wico3RBVHFrz8OFgnfZgks8ltkbc2p/8QEhAu7Viii kauKCQAGq4f2Z+5TSV2nfRrLf8jx9fRUHdMU2wVmtdZAYUa2w/I+N0bR6FNjTZc3 mVtPIkIPYu7jkABz82OuVf2z9OU4s2myWLU0nxNx2/KDa4Jxovb02ay27rYWcyO8 opr9+6kzW7r21JD3wBYu5NDoyuXIi6eLrgLBsYjh7bIGbr0cdmyY5xGM3tehbbIg 6L4cIDnp9JDa05yXDtlOtjk4da3LlYzlYCg9kcELv1L5ZmhP7nUj+Xu6Z/ovg+zC JEHfxyh4hpBwHjRH2i48cdLJMg== -----END CERTIFICATE-----Generated at Sat Oct 3 13:18:37 2026 by rpki-client