
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier: kfcoET+kMZqvuoM/o+pYYQZBKWKosweTg4OnpSN7dzM=
Subject key identifier: 41:2F:A2:3E:3C:14:8A:16:2B:8D:E4:0C:B8:DE:A8:00:F0:D2:F5:5A
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial: 104F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number: 103B
Signing time: Tue 18 Aug 2026 17:37:42 +0000
Manifest this update: Tue 18 Aug 2026 17:37:41 +0000
Manifest next update: Tue 25 Aug 2026 17:37:41 +0000
Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: bBCuKsSiaGsEO+FWYG/aV22k8g85YfV5dlWMBUiDAUg=)
2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: bVRUHoyN7g0/Ud6S1Lfm+QQ0GqpNveNCn0i1VnMWX7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4175 (0x104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Validity
Not Before: Aug 18 17:37:41 2026 GMT
Not After : Aug 25 17:37:41 2026 GMT
Subject: CN=6a849866-b233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:f2:bc:89:9d:97:68:cd:be:c4:50:16:34:
44:69:2d:fd:c4:3d:98:61:8f:f9:4b:f0:b4:0d:31:
1b:ae:a1:38:fa:8a:49:66:9f:4e:db:97:b0:a7:c2:
62:57:44:20:90:3d:9e:99:96:1b:a4:f4:1a:20:3a:
1d:92:f2:5d:87:ec:7a:32:be:fc:1b:81:b9:23:11:
1e:8d:e1:e5:4c:c6:8e:3d:01:c9:4d:a5:11:bf:79:
34:32:17:6a:b7:97:fa:26:68:33:e2:43:dd:d8:7d:
b1:10:c1:33:3f:23:7c:19:e2:48:1e:95:1e:48:60:
98:1c:33:c9:9e:df:f3:dc:34:4c:b1:48:4d:da:59:
83:e5:b7:ed:f1:69:6a:32:4a:e9:41:e7:3e:a5:01:
58:63:80:f9:48:58:ce:ed:33:af:af:09:ba:5f:1a:
b5:99:a6:bc:ae:00:c5:e9:3f:ed:d2:b8:80:00:6d:
e6:6b:b1:30:35:1a:f2:6a:1a:d6:d3:de:55:df:82:
42:27:21:73:8b:ae:1d:43:ea:13:37:05:6f:29:f3:
8b:98:53:3b:af:19:2c:f6:c2:9c:62:1f:e2:c8:72:
c0:c0:a1:cc:0d:9f:fe:db:9e:ee:3d:3f:e0:bf:42:
3b:78:f7:1b:c5:4e:ca:51:3b:dd:53:d7:61:98:1d:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:A2:3E:3C:14:8A:16:2B:8D:E4:0C:B8:DE:A8:00:F0:D2:F5:5A
X509v3 Authority Key Identifier:
keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:63:a5:0e:03:ad:d8:e6:12:87:d6:99:8b:4e:01:1f:d1:
ec:42:03:62:c4:c1:38:ad:e9:da:8c:41:fb:f7:4d:87:83:41:
ca:f6:71:f1:aa:50:00:82:6f:53:bb:fc:fa:4b:d5:4a:2e:2d:
93:c7:a5:81:69:79:7b:92:d8:2c:56:1f:93:e0:31:da:2f:20:
eb:05:e3:f9:3f:a7:dd:67:1b:82:04:8c:b7:bf:7c:be:de:af:
05:22:de:6f:21:5a:92:82:97:99:f9:b6:f9:c9:50:b4:1d:70:
69:e7:21:e9:9d:6d:96:9f:9b:56:0d:ac:86:1a:60:c3:0c:31:
51:fc:e0:a4:46:4c:f2:ad:3d:8c:ab:9b:a0:11:b3:88:6f:10:
0c:3c:24:f4:7c:d4:f9:ba:e5:4d:07:c7:fb:63:88:cd:02:d2:
ac:00:a1:88:c3:3a:c0:17:fd:a0:02:74:af:28:41:49:1c:df:
c3:84:47:10:2f:70:db:74:68:ee:1f:b2:a8:59:28:b7:0f:20:
14:a7:df:dc:0a:72:54:a2:65:cf:c0:4c:a4:57:9e:14:85:ea:
a6:b1:b0:e5:21:46:67:22:98:70:fe:eb:13:14:e5:9b:7d:eb:
24:36:8f:42:06:16:b5:c9:b7:12:42:fe:48:f0:f9:0c:88:64:
b1:26:6b:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz
MTkxQTcxOUIwHhcNMjYwODE4MTczNzQxWhcNMjYwODI1MTczNzQxWjAYMRYwFAYD
VQQDEw02YTg0OTg2Ni1iMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA46fyvImdl2jNvsRQFjREaS39xD2YYY/5S/C0DTEbrqE4+opJZp9O25ewp8Ji
V0QgkD2emZYbpPQaIDodkvJdh+x6Mr78G4G5IxEejeHlTMaOPQHJTaURv3k0Mhdq
t5f6Jmgz4kPd2H2xEMEzPyN8GeJIHpUeSGCYHDPJnt/z3DRMsUhN2lmD5bft8Wlq
MkrpQec+pQFYY4D5SFjO7TOvrwm6Xxq1maa8rgDF6T/t0riAAG3ma7EwNRryahrW
095V34JCJyFzi64dQ+oTNwVvKfOLmFM7rxks9sKcYh/iyHLAwKHMDZ/+257uPT/g
v0I7ePcbxU7KUTvdU9dhmB3OHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEvoj48
FIoWK43kDLjeqADw0vVaMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF
NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz
Q0x6TllOeUNYbXd4a2FjWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaKljpQ4DrdjmEofWmYtOAR/R7EIDYsTBOK3p2oxB+/dNh4NByvZx8apQAIJv
U7v8+kvVSi4tk8elgWl5e5LYLFYfk+Ax2i8g6wXj+T+n3WcbggSMt798vt6vBSLe
byFakoKXmfm2+clQtB1waech6Z1tlp+bVg2shhpgwwwxUfzgpEZM8q09jKuboBGz
iG8QDDwk9HzU+brlTQfH+2OIzQLSrAChiMM6wBf9oAJ0ryhBSRzfw4RHEC9w23Ro
7h+yqFkotw8gFKff3ApyVKJlz8BMpFeeFIXqprGw5SFGZyKYcP7rExTlm33rJDaP
QgYWtcm3EkL+SPD5DIhksSZrQA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:38 2026 by rpki-client