
$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier: zsY1b6vaDiZqySwjwxFwGzCdA5H8oTsbEbVKeid7UPs=
Subject key identifier: D6:B3:0B:7A:E4:54:50:89:59:54:76:78:9D:D3:6F:16:33:42:5A:C3
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number: 026E
Signing time: Tue 21 Jul 2026 03:18:35 +0000
Manifest this update: Tue 21 Jul 2026 03:18:34 +0000
Manifest next update: Tue 28 Jul 2026 03:18:34 +0000
Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: 5IifABxAogb6Csyet88eu86PgITKYl68Wh6Lq7yYiJU=)
2: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
3: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Validity
Not Before: Jul 21 03:18:34 2026 GMT
Not After : Jul 28 03:18:34 2026 GMT
Subject: CN=6a5ee50b-b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:2a:62:56:e6:44:1f:3a:33:dd:47:c8:a5:
20:05:e9:ec:16:57:1a:bd:49:10:9e:db:3e:ba:f6:
95:59:df:02:96:96:ca:80:0b:65:a3:e1:b0:12:e7:
4b:c4:a7:fd:4b:10:0d:16:2f:37:2b:12:ee:81:d3:
81:38:4b:04:8e:f4:11:8b:ac:f3:41:c4:c9:ca:83:
03:5b:1b:3b:50:5c:c2:b4:05:17:81:57:05:32:d4:
9d:ae:09:2c:c6:46:67:d7:4a:49:1b:3c:43:0c:f7:
40:cf:ab:e1:be:f9:d3:49:3c:58:77:86:f6:07:09:
8e:20:c7:f7:c0:01:a2:3a:59:90:54:99:a4:cb:a5:
ca:01:00:06:e1:11:80:0f:f8:7e:99:0c:6b:87:d1:
ad:b3:3e:71:89:25:25:d3:e4:cc:80:94:fc:65:4e:
bc:62:9e:c1:90:66:0f:a5:a3:4e:97:55:43:65:00:
5a:f0:d6:cd:96:7d:b0:b7:1a:34:3b:35:81:b3:7d:
b0:c3:61:d5:d6:a0:73:7f:95:dd:c1:4a:b5:d9:05:
87:fe:b9:1d:77:1e:35:6e:f6:29:c6:2e:50:c1:f5:
0a:b5:2e:33:8c:25:72:8a:9e:97:66:97:97:58:dc:
97:05:bb:f1:e3:24:65:9a:d7:1d:88:ff:a0:09:3c:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:0B:7A:E4:54:50:89:59:54:76:78:9D:D3:6F:16:33:42:5A:C3
X509v3 Authority Key Identifier:
keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a3:a3:16:db:85:08:ba:b6:78:2c:d4:48:c9:25:b8:4e:e9:
88:17:be:f8:59:54:22:a7:32:1f:97:58:19:66:a2:b5:b2:1f:
1e:9a:6d:b0:a6:d7:ce:ba:17:2b:bc:5d:25:77:ac:da:23:a0:
5d:73:03:ec:3b:5f:52:43:4b:c2:73:ec:73:9a:50:cd:c0:b6:
b2:9d:2e:db:d1:2b:1e:01:7d:22:5c:b4:fd:a2:7d:4d:5b:5f:
11:81:b3:48:3a:38:76:71:dc:8e:c9:f0:f8:d8:bf:37:41:15:
e3:19:96:33:93:8d:7b:74:f5:48:c5:2a:fb:bc:99:50:1d:d0:
9d:47:fe:3e:b2:69:1d:8a:bf:6e:3a:24:7c:f5:75:e6:75:07:
a6:ce:1f:72:f8:e8:ba:14:f6:86:25:83:ba:78:ea:d3:00:79:
e3:de:60:7c:17:90:8d:16:ec:67:06:c3:8b:bf:f6:c4:3a:60:
8d:67:5e:a8:ca:26:75:a4:24:12:c1:92:3c:62:17:9a:2b:0b:
18:9b:d7:11:24:59:62:2f:bd:5a:7f:02:53:79:cb:6d:8b:20:
b8:19:be:7f:2a:32:59:e6:86:af:3f:5b:b9:92:4a:cc:81:4b:
a3:7f:00:02:7f:fd:48:c3:cf:fd:ae:89:e9:26:52:f6:92:01:
6f:7b:05:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx
RkMwMUYyNTYwHhcNMjYwNzIxMDMxODM0WhcNMjYwNzI4MDMxODM0WjAYMRYwFAYD
VQQDEw02YTVlZTUwYi1iNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh7sqYlbmRB86M91HyKUgBensFlcavUkQnts+uvaVWd8ClpbKgAtlo+GwEudL
xKf9SxANFi83KxLugdOBOEsEjvQRi6zzQcTJyoMDWxs7UFzCtAUXgVcFMtSdrgks
xkZn10pJGzxDDPdAz6vhvvnTSTxYd4b2BwmOIMf3wAGiOlmQVJmky6XKAQAG4RGA
D/h+mQxrh9Gtsz5xiSUl0+TMgJT8ZU68Yp7BkGYPpaNOl1VDZQBa8NbNln2wtxo0
OzWBs32ww2HV1qBzf5XdwUq12QWH/rkddx41bvYpxi5QwfUKtS4zjCVyip6XZpeX
WNyXBbvx4yRlmtcdiP+gCTywOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNazC3rk
VFCJWVR2eJ3TbxYzQlrDMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4
RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT
M3N3WXFQVUVsTElmd0I4bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt6OjFtuFCLq2eCzUSMkluE7piBe++FlUIqcyH5dYGWaitbIfHpptsKbXzroX
K7xdJXes2iOgXXMD7DtfUkNLwnPsc5pQzcC2sp0u29ErHgF9Ily0/aJ9TVtfEYGz
SDo4dnHcjsnw+Ni/N0EV4xmWM5ONe3T1SMUq+7yZUB3QnUf+PrJpHYq/bjokfPV1
5nUHps4fcvjouhT2hiWDunjq0wB5495gfBeQjRbsZwbDi7/2xDpgjWdeqMomdaQk
EsGSPGIXmisLGJvXESRZYi+9Wn8CU3nLbYsguBm+fyoyWeaGrz9buZJKzIFLo38A
An/9SMPP/a6J6SZS9pIBb3sFtQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 06:06:03 2026 by rpki-client