
$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json)
Hash identifier: ZYCNYeIycDdsa4Q4zRR4V5o/UpOJE8OtyT2MVnEvgr8=
Subject key identifier: C1:63:D6:11:67:1F:67:47:C4:E6:6B:1C:7A:36:F5:64:78:D4:F5:5C
Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
Manifest number: 0292
Signing time: Wed 05 Aug 2026 02:47:38 +0000
Manifest this update: Wed 05 Aug 2026 02:47:38 +0000
Manifest next update: Wed 12 Aug 2026 02:47:38 +0000
Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: UJUXFYvVsAVv1ZI8x5bZHfbrzT6HLN0WQdDEdGcCNwY=)
2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: IKCcqa9PRpmxLis3qIFeDEu3OJpDaH1bF5IhwAN/3Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 02:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20
Validity
Not Before: Aug 5 02:47:38 2026 GMT
Not After : Aug 12 02:47:38 2026 GMT
Subject: CN=6a72a44a-6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:3f:2b:e0:7e:da:32:6a:09:71:70:53:ad:
df:ef:5e:f9:9d:18:75:b5:67:b4:a3:c9:4a:ca:16:
29:02:40:eb:0e:96:4d:2e:70:2f:48:10:a9:6c:6d:
9e:65:2b:96:1b:af:25:aa:d7:c5:07:3e:08:10:34:
f8:48:53:17:a1:a3:3a:2e:25:2a:07:f1:ee:c4:5e:
3d:3e:c5:82:7e:21:23:30:e2:99:e1:73:dc:5e:a1:
f6:13:4d:8b:12:c1:a5:62:ec:9c:66:83:27:84:47:
2e:cf:9b:c0:b8:37:9e:11:35:71:83:91:1f:16:ce:
e7:97:ae:7e:1f:69:71:1a:26:f1:4d:fa:66:01:0d:
03:3c:45:be:bd:d0:1f:19:0c:62:73:d5:a0:c2:60:
53:d6:0b:0b:52:3b:c4:bb:92:ec:87:e6:7b:a9:0c:
fc:21:21:9e:e0:b0:39:bf:6b:e2:ef:76:16:66:f7:
f7:f8:78:88:f4:bb:93:20:ac:53:1c:71:fd:03:58:
6f:c0:6e:65:3e:e7:1c:d5:98:d8:6d:4d:92:e3:e6:
6f:35:9f:3e:40:41:d7:38:3f:c8:be:d7:37:22:b9:
c0:82:4a:0b:e0:d9:9d:ad:d5:0d:76:ae:97:83:a8:
67:80:d2:19:02:e6:cf:d6:27:88:41:20:0d:8d:47:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:D6:11:67:1F:67:47:C4:E6:6B:1C:7A:36:F5:64:78:D4:F5:5C
X509v3 Authority Key Identifier:
keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ee:e2:41:6e:5f:ee:eb:93:2e:75:54:cf:af:23:89:4a:fe:
f7:a7:3b:6e:16:1d:82:94:18:77:5d:3a:e9:42:87:f8:31:cc:
7c:41:ea:45:5d:2e:43:ec:20:9e:17:a5:a9:11:3e:7c:f3:01:
85:74:97:0a:1c:75:84:54:de:a3:fe:37:e7:63:9c:27:67:56:
7b:86:83:71:1c:b5:b7:ae:65:95:72:45:99:2f:72:4e:a9:59:
a1:15:0f:a0:69:86:d9:fa:d3:e8:73:cc:31:25:29:ac:d5:41:
46:ce:54:2d:56:b5:8f:71:db:cb:ec:4f:fd:1b:13:62:b0:ea:
2a:25:46:03:b8:24:a0:ef:9f:3e:21:ab:09:22:2a:a6:a4:3d:
f0:78:8a:a9:fd:c2:5b:2e:2f:d5:5c:7a:0e:fe:a2:d7:60:4d:
a3:31:69:35:0b:cd:6f:41:ff:e6:82:cb:6c:9f:61:9f:fb:48:
bb:af:7b:fd:de:d9:26:5c:0c:0c:00:f3:d7:f6:98:49:33:68:
6d:10:1a:04:63:9d:8d:14:ee:5a:bf:87:58:f4:e9:7b:b8:d1:
ad:25:bb:e1:b9:44:fd:69:95:58:b2:cd:15:ca:9d:e9:4e:b3:
0b:5d:21:87:2d:09:ff:45:a9:80:ee:70:b6:91:65:18:cd:73:
06:c3:e7:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG
M0YwNzRGMjAwHhcNMjYwODA1MDI0NzM4WhcNMjYwODEyMDI0NzM4WjAYMRYwFAYD
VQQDEw02YTcyYTQ0YS02YzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYw/K+B+2jJqCXFwU63f7175nRh1tWe0o8lKyhYpAkDrDpZNLnAvSBCpbG2e
ZSuWG68lqtfFBz4IEDT4SFMXoaM6LiUqB/HuxF49PsWCfiEjMOKZ4XPcXqH2E02L
EsGlYuycZoMnhEcuz5vAuDeeETVxg5EfFs7nl65+H2lxGibxTfpmAQ0DPEW+vdAf
GQxic9WgwmBT1gsLUjvEu5Lsh+Z7qQz8ISGe4LA5v2vi73YWZvf3+HiI9LuTIKxT
HHH9A1hvwG5lPucc1ZjYbU2S4+ZvNZ8+QEHXOD/Ivtc3IrnAgkoL4NmdrdUNdq6X
g6hngNIZAubP1ieIQSANjUc9rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFj1hFn
H2dHxOZrHHo29WR41PVcMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx
NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjVBOS8yNjE4ODQwRUIxNDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQx
T1B3Wi1ZclltTUR6OEhUeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJO7iQW5f7uuTLnVUz68jiUr+96c7bhYdgpQYd1066UKH+DHMfEHqRV0uQ+wg
nhelqRE+fPMBhXSXChx1hFTeo/4352OcJ2dWe4aDcRy1t65llXJFmS9yTqlZoRUP
oGmG2frT6HPMMSUprNVBRs5ULVa1j3Hby+xP/RsTYrDqKiVGA7gkoO+fPiGrCSIq
pqQ98HiKqf3CWy4v1Vx6Dv6i12BNozFpNQvNb0H/5oLLbJ9hn/tIu697/d7ZJlwM
DADz1/aYSTNobRAaBGOdjRTuWr+HWPTpe7jRrSW74blE/WmVWLLNFcqd6U6zC10h
hy0J/0WpgO5wtpFlGM1zBsPnsA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 14:39:03 2026 by rpki-client