
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier: EyNyGbfi2K+3MChaOIKVv+C4RykfYatqeRKvAmPbzJQ=
Subject key identifier: AE:81:F1:CD:A0:A0:3D:7C:A0:B3:10:36:A3:89:C6:89:5B:67:D9:50
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number: 96
Signing time: Wed 19 Aug 2026 08:05:10 +0000
Manifest this update: Wed 19 Aug 2026 08:05:09 +0000
Manifest next update: Wed 26 Aug 2026 08:05:09 +0000
Files and hashes: 1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: +OZVhRSB9cLG6ZnG+e4A+S5ehLcsFY2oqxVHeEOUJoQ=)
2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: SUT7Sext2CBmlq2r+uIBNlenhXwwgBzoi2hOww2+R8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Validity
Not Before: Aug 19 08:05:09 2026 GMT
Not After : Aug 26 08:05:09 2026 GMT
Subject: CN=6a8563b6-0c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:73:4c:9c:d2:05:03:e8:84:24:28:3e:6c:
92:db:92:d8:ba:d8:18:87:ed:8a:d2:3e:89:62:f5:
37:46:97:40:40:39:64:41:2f:ea:58:d4:e9:86:a0:
fc:36:ff:35:98:3c:69:ab:69:58:11:17:3f:be:a9:
01:56:a4:4a:49:13:53:07:71:4e:b8:4d:4d:cd:e5:
40:1b:bb:6a:ca:ff:a6:8f:77:0d:72:44:ce:72:e7:
2c:60:03:f5:54:07:00:32:1b:b3:8a:a3:c8:02:3f:
c8:33:c3:77:0c:20:c6:c9:7f:7f:27:99:af:26:0c:
c1:c0:db:e3:e1:66:d0:8c:9a:a6:4c:fa:5e:43:fa:
2c:ce:4b:fc:3e:eb:21:98:92:ce:b3:b8:e4:4d:7d:
5e:b7:d2:f0:30:40:d0:fc:4c:52:75:8c:8a:c9:c8:
1b:f5:b1:63:69:71:18:f8:59:44:de:c4:cc:29:d1:
22:bf:25:28:ef:4b:2a:b9:87:69:5a:df:7a:67:ad:
aa:4d:9d:43:ea:f0:5d:a3:19:c2:b2:e7:61:cc:36:
db:15:2d:81:18:10:a4:ca:25:78:b2:94:11:a5:37:
50:30:7e:8f:13:70:5c:3e:60:f1:8e:c3:c2:ac:35:
9c:77:ac:ac:b7:f7:93:6d:d2:50:6f:f1:a8:bf:e3:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:F1:CD:A0:A0:3D:7C:A0:B3:10:36:A3:89:C6:89:5B:67:D9:50
X509v3 Authority Key Identifier:
keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:fb:84:b3:66:8d:6a:47:fe:d0:4a:60:a3:1e:e4:a2:07:
cf:79:29:85:3c:bd:e5:83:8a:5f:9f:ef:21:72:a5:2d:3c:14:
bf:60:c0:f0:19:a1:cf:bc:75:c0:2f:bc:04:4d:d6:90:40:e4:
aa:66:f4:bf:31:98:68:ae:c0:75:2c:69:d0:2e:37:ce:a5:8e:
4d:d7:1b:24:86:3f:c1:0b:4c:78:e6:b4:8a:b7:c5:e0:88:b6:
e8:a8:0d:b7:35:3a:b9:9a:48:ea:98:31:80:3f:c1:31:b1:29:
2b:04:f9:c4:40:17:04:93:aa:53:cf:d1:a8:74:77:e7:9f:12:
db:1f:01:5c:56:58:31:7d:65:24:55:99:cf:33:b9:dd:d8:4e:
ae:bf:19:ba:95:c1:26:93:71:ca:17:ce:86:d3:e1:9b:27:be:
c7:dd:c8:fa:cc:70:f3:f8:b5:ff:67:47:59:18:c3:99:76:04:
c6:1f:16:ce:81:be:5e:68:79:e2:84:d3:01:dc:e6:a8:93:b7:
73:56:54:db:14:6d:aa:29:9f:68:b3:3f:09:e2:55:23:e4:28:
c2:3c:0a:71:2e:29:8c:16:b9:c3:a4:b5:27:b3:82:c4:f0:7b:
59:39:a6:da:40:18:e8:ff:75:c5:5e:9c:b3:5b:13:ae:c1:70:
89:25:da:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI2NjcxMTAvBgNVBAUTKEQwRjYzOEM1Qjk4QUU4QUZDRDZDRUUwNTAzODI0MTk3
NDA5QzNFOTMwHhcNMjYwODE5MDgwNTA5WhcNMjYwODI2MDgwNTA5WjAYMRYwFAYD
VQQDEw02YTg1NjNiNi0wYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArORzTJzSBQPohCQoPmyS25LYutgYh+2K0j6JYvU3RpdAQDlkQS/qWNTphqD8
Nv81mDxpq2lYERc/vqkBVqRKSRNTB3FOuE1NzeVAG7tqyv+mj3cNckTOcucsYAP1
VAcAMhuziqPIAj/IM8N3DCDGyX9/J5mvJgzBwNvj4WbQjJqmTPpeQ/oszkv8Push
mJLOs7jkTX1et9LwMEDQ/ExSdYyKycgb9bFjaXEY+FlE3sTMKdEivyUo70squYdp
Wt96Z62qTZ1D6vBdoxnCsudhzDbbFS2BGBCkyiV4spQRpTdQMH6PE3BcPmDxjsPC
rDWcd6yst/eTbdJQb/Gov+PA/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6B8c2g
oD18oLMQNqOJxolbZ9lQMB8GA1UdIwQYMBaAFND2OMW5iuivzWzuBQOCQZdAnD6T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjY2Ny85MTU5MkI0QUJC
OUMxMUYwQTVBM0Q4MTVDNEY5QUUwMi8wUFk0eGJtSzZLX05iTzRGQTRKQmwwQ2NQ
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1BwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjY2Ny85MTU5MkI0QUJCOUMxMUYwQTVBM0Q4MTVDNEY5QUUwMi8wUFk0eGJtSzZL
X05iTzRGQTRKQmwwQ2NQcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATyP7hLNmjWpH/tBKYKMe5KIHz3kphTy95YOKX5/vIXKlLTwUv2DA8Bmhz7x1
wC+8BE3WkEDkqmb0vzGYaK7AdSxp0C43zqWOTdcbJIY/wQtMeOa0irfF4Ii26KgN
tzU6uZpI6pgxgD/BMbEpKwT5xEAXBJOqU8/RqHR3558S2x8BXFZYMX1lJFWZzzO5
3dhOrr8ZupXBJpNxyhfOhtPhmye+x93I+sxw8/i1/2dHWRjDmXYExh8WzoG+Xmh5
4oTTAdzmqJO3c1ZU2xRtqimfaLM/CeJVI+QowjwKcS4pjBa5w6S1J7OCxPB7WTmm
2kAY6P91xV6cs1sTrsFwiSXaKA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:50 2026 by rpki-client