
$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier: DsuuR7uZ7kMTTFiJy9MF0NDResRrgK57OihCojB4sHI=
Subject key identifier: C5:0E:1B:35:60:4A:D7:92:D3:1D:35:94:EE:78:B7:A5:6E:B3:F4:CE
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial: 0612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number: 060B
Signing time: Tue 18 Aug 2026 23:13:18 +0000
Manifest this update: Tue 18 Aug 2026 23:13:18 +0000
Manifest next update: Tue 25 Aug 2026 23:13:18 +0000
Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: Fe0J7kZxZHzwc9Ldkn8SCSpW9NlKG0Wov8RsRepJ79w=)
2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Validity
Not Before: Aug 18 23:13:18 2026 GMT
Not After : Aug 25 23:13:18 2026 GMT
Subject: CN=6a84e70e-eefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:a0:ae:35:34:b6:72:4d:b2:01:17:6c:4d:
6c:8d:f6:43:69:ed:84:2f:b2:c3:de:6f:4f:5a:a3:
9d:76:13:cc:ee:d9:25:37:6d:1b:ff:fd:59:b1:a7:
0b:66:ab:dc:3f:a1:f1:73:07:ea:34:a0:9e:bb:ad:
48:a6:30:e0:08:be:28:26:20:58:36:2c:24:ae:0d:
21:40:53:ee:d4:91:28:32:7a:33:0b:b4:8c:f6:e8:
cb:10:ea:97:48:04:32:42:1a:91:d3:25:35:3f:32:
de:ae:67:ba:4a:9b:cd:c8:86:9a:c3:df:a4:60:bd:
b4:9b:eb:b6:a9:0a:16:6d:7b:15:df:c4:fb:dc:87:
bc:40:84:c3:8b:3e:1d:8b:ee:26:5e:9d:10:3e:c7:
04:36:a1:ec:fc:a0:69:98:aa:fd:0e:a6:58:d7:4e:
ff:89:31:ec:61:73:68:3d:7a:eb:6b:43:21:b8:28:
81:bf:9f:88:96:02:13:a4:5b:67:27:c9:c5:fd:99:
f1:5e:17:8a:48:18:a8:e6:95:b7:7f:e0:54:0b:f5:
05:65:ff:41:ac:50:b0:70:09:16:ed:d6:34:77:1e:
45:de:16:cb:bc:f8:40:ef:b6:6d:a8:82:ea:f4:84:
6c:04:6a:ee:81:f6:65:88:62:a0:34:e3:0b:fb:82:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:1B:35:60:4A:D7:92:D3:1D:35:94:EE:78:B7:A5:6E:B3:F4:CE
X509v3 Authority Key Identifier:
keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:51:af:8e:7b:87:52:f2:f1:26:fc:3f:67:7c:74:e1:a1:96:
82:95:ec:83:d3:04:bc:78:1e:2d:46:3f:a8:02:8c:ec:53:65:
9b:53:da:52:86:4a:30:f5:8c:3d:09:9c:5a:82:50:7f:d3:d3:
a0:8d:10:4f:0d:5f:77:9c:2e:64:90:12:97:dc:e4:82:0c:51:
00:fb:cb:70:e0:d9:8b:8c:a6:a3:12:46:70:32:a0:47:9c:12:
ac:71:8e:48:2f:63:2f:f8:77:06:ed:20:14:69:b4:a2:83:87:
12:13:4e:2e:7d:23:5c:a1:49:12:18:32:c7:09:17:e9:55:75:
b1:83:a0:e8:80:ce:a5:2a:3b:b9:69:61:f8:3b:b6:0c:c6:89:
14:8f:b9:0d:d6:59:10:4c:f2:34:fd:57:a7:d1:70:25:d6:64:
8f:5e:22:e1:c8:ba:b2:3c:e1:f4:f8:9f:65:a1:83:a4:42:3e:
1f:e6:13:ed:76:5f:b5:0b:1c:0d:6e:38:72:dd:85:d1:88:ce:
aa:6b:7b:80:4a:08:58:f4:e3:1e:41:d6:49:b7:cd:de:ff:8e:
64:68:1a:6f:82:72:a3:a1:9d:f0:ed:6f:af:23:94:27:a9:06:
e5:b8:e0:0e:5c:16:70:11:d8:09:65:fc:03:14:cc:d1:83:c1:
1c:a0:4a:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF
NDdDNkI4RkUwHhcNMjYwODE4MjMxMzE4WhcNMjYwODI1MjMxMzE4WjAYMRYwFAYD
VQQDEw02YTg0ZTcwZS1lZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvCgrjU0tnJNsgEXbE1sjfZDae2EL7LD3m9PWqOddhPM7tklN20b//1ZsacL
ZqvcP6HxcwfqNKCeu61IpjDgCL4oJiBYNiwkrg0hQFPu1JEoMnozC7SM9ujLEOqX
SAQyQhqR0yU1PzLerme6SpvNyIaaw9+kYL20m+u2qQoWbXsV38T73Ie8QITDiz4d
i+4mXp0QPscENqHs/KBpmKr9DqZY107/iTHsYXNoPXrra0MhuCiBv5+IlgITpFtn
J8nF/ZnxXheKSBio5pW3f+BUC/UFZf9BrFCwcAkW7dY0dx5F3hbLvPhA77ZtqILq
9IRsBGrugfZliGKgNOML+4L9NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUOGzVg
SteS0x01lO54t6Vus/TOMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG
QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM
OHZaamwzaHFiQWprZkd1UDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAslGvjnuHUvLxJvw/Z3x04aGWgpXsg9MEvHgeLUY/qAKM7FNlm1PaUoZKMPWM
PQmcWoJQf9PToI0QTw1fd5wuZJASl9zkggxRAPvLcODZi4ymoxJGcDKgR5wSrHGO
SC9jL/h3Bu0gFGm0ooOHEhNOLn0jXKFJEhgyxwkX6VV1sYOg6IDOpSo7uWlh+Du2
DMaJFI+5DdZZEEzyNP1Xp9FwJdZkj14i4ci6sjzh9PifZaGDpEI+H+YT7XZftQsc
DW44ct2F0YjOqmt7gEoIWPTjHkHWSbfN3v+OZGgab4Jyo6Gd8O1vryOUJ6kG5bjg
DlwWcBHYCWX8AxTM0YPBHKBKfw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:23 2026 by rpki-client