
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier: 1Ztx8RaYz8uJe7QQtpJu5d0Re2eOrVYZbbNc6YCkXnQ=
Subject key identifier: 94:3A:A4:F3:7F:7A:0D:9B:75:F7:0F:7C:CE:F7:98:EB:03:07:B7:CB
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number: 03DD
Signing time: Tue 21 Jul 2026 01:26:19 +0000
Manifest this update: Tue 21 Jul 2026 01:26:18 +0000
Manifest next update: Tue 28 Jul 2026 01:26:18 +0000
Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: htdF/c2JtolucEUIt6lvn1cMmhhEou29i48x1pvJY+M=)
2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Validity
Not Before: Jul 21 01:26:18 2026 GMT
Not After : Jul 28 01:26:18 2026 GMT
Subject: CN=6a5ecabb-8c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:dc:81:1b:e3:4f:be:90:2a:62:fe:0a:ac:
d4:be:5d:97:d6:14:49:e3:6b:76:8f:e3:88:f8:aa:
b1:5f:af:7b:dd:58:d0:4a:be:0a:9f:76:5c:4e:04:
7f:a7:29:bc:4d:db:01:6f:a2:36:a2:0b:10:5b:1d:
e8:87:01:0a:f3:40:05:84:90:33:81:a7:84:e7:df:
1f:be:63:a6:a9:3c:39:43:8a:21:c7:e4:c5:78:62:
bc:eb:16:ce:6a:bd:0a:db:4b:35:45:47:ab:55:38:
ca:d4:92:7f:13:91:c3:45:e0:f1:67:84:08:82:27:
89:c6:b5:1a:c3:5c:97:14:b5:85:6a:82:c5:26:04:
fb:7a:d8:30:c1:ce:9e:ff:81:b3:ef:6e:f7:bb:3d:
fe:0a:27:b9:62:b1:ea:bb:58:08:1d:8f:6c:61:d5:
a4:87:7f:97:e6:9c:0a:18:dd:1a:f2:b2:19:f4:83:
34:e3:51:03:4d:ae:c3:93:4f:2b:41:32:1c:70:f6:
81:e7:c1:68:94:9a:ba:7c:ef:6f:b4:ca:2c:15:71:
34:ee:39:c9:61:c1:43:e2:fb:34:9d:a6:c8:b0:fe:
80:0d:49:c3:95:94:98:50:80:36:9d:70:75:c2:47:
b1:ca:0f:90:d6:cf:83:bc:4c:39:90:f5:b5:f0:a1:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:A4:F3:7F:7A:0D:9B:75:F7:0F:7C:CE:F7:98:EB:03:07:B7:CB
X509v3 Authority Key Identifier:
keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:c6:f7:d1:16:db:98:23:bb:37:55:0b:e8:a4:da:f7:b3:
c7:75:59:33:70:e8:dd:2c:ce:61:26:00:32:e5:91:50:81:e3:
1e:c7:00:d9:77:28:f7:3e:67:49:d0:55:e9:22:80:35:c3:89:
d1:ba:ef:6b:e7:10:0b:11:db:11:a1:94:49:54:6a:a7:72:49:
f1:db:8a:29:1d:52:47:25:b1:46:89:7a:0f:cf:bb:99:31:fb:
55:14:11:f0:e5:76:63:a2:8c:1f:d2:aa:3e:b5:16:2a:46:09:
34:23:18:06:8f:d0:c0:88:7c:30:f4:76:03:a6:a0:48:55:a2:
38:5f:b2:4a:f7:71:37:da:ba:96:84:32:24:51:20:3a:f5:1c:
02:3a:b1:9f:54:2a:ae:b9:f7:ee:c8:d4:3d:a1:55:6d:2a:0c:
69:2d:4d:0f:12:5b:07:9f:3a:b7:c5:1a:b0:70:a3:85:81:7d:
98:25:a1:4d:8a:5e:df:58:30:8c:42:20:62:f1:82:5c:0c:48:
02:74:fb:3d:55:e7:53:4b:34:23:17:f0:61:46:0f:9a:33:71:
4b:d9:b2:0d:e6:a2:ca:f1:f1:ab:de:06:c7:19:bf:c4:fb:86:
6f:b1:9d:30:e5:83:cf:47:6a:60:47:d8:c6:99:a7:e8:37:1d:
3b:32:65:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5
QThGMTUzNUQwHhcNMjYwNzIxMDEyNjE4WhcNMjYwNzI4MDEyNjE4WjAYMRYwFAYD
VQQDEw02YTVlY2FiYi04YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6vDcgRvjT76QKmL+CqzUvl2X1hRJ42t2j+OI+KqxX6973VjQSr4Kn3ZcTgR/
pym8TdsBb6I2ogsQWx3ohwEK80AFhJAzgaeE598fvmOmqTw5Q4ohx+TFeGK86xbO
ar0K20s1RUerVTjK1JJ/E5HDReDxZ4QIgieJxrUaw1yXFLWFaoLFJgT7etgwwc6e
/4Gz7273uz3+Cie5YrHqu1gIHY9sYdWkh3+X5pwKGN0a8rIZ9IM041EDTa7Dk08r
QTIccPaB58FolJq6fO9vtMosFXE07jnJYcFD4vs0nabIsP6ADUnDlZSYUIA2nXB1
wkexyg+Q1s+DvEw5kPW18KGsqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQ6pPN/
eg2bdfcPfM73mOsDB7fLMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1
QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w
Z2tDai02T3Z2WlNhanhVMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFXPG99EW25gjuzdVC+ik2vezx3VZM3Do3SzOYSYAMuWRUIHjHscA2Xco9z5n
SdBV6SKANcOJ0brva+cQCxHbEaGUSVRqp3JJ8duKKR1SRyWxRol6D8+7mTH7VRQR
8OV2Y6KMH9KqPrUWKkYJNCMYBo/QwIh8MPR2A6agSFWiOF+ySvdxN9q6loQyJFEg
OvUcAjqxn1Qqrrn37sjUPaFVbSoMaS1NDxJbB586t8UasHCjhYF9mCWhTYpe31gw
jEIgYvGCXAxIAnT7PVXnU0s0IxfwYUYPmjNxS9myDeaiyvHxq94Gxxm/xPuGb7Gd
MOWDz0dqYEfYxpmn6DcdOzJlIA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:31 2026 by rpki-client