
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier: lYb7KO2hYkHGMI+AOuQ8IM+1FOfp2te4Q44HJnEKFuo=
Subject key identifier: 3C:E3:BB:B1:E0:9E:75:89:09:E8:BF:78:7D:9E:78:89:8A:51:00:7E
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number: 060F
Signing time: Tue 18 Aug 2026 23:18:21 +0000
Manifest this update: Tue 18 Aug 2026 23:18:21 +0000
Manifest next update: Tue 25 Aug 2026 23:18:21 +0000
Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: /qxPmdq0Xqnq3QdMO64VLBO6C1FJS1/tImIrqabauGo=)
2: 6DD2A340714011F191B402BC77A30FBC.roa (hash: a48AG/pGOmK4TOseQPCOrM/Wg8LOw5p4urOR/siiycQ=)
3: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=)
4: A486779E6FED11F1B401E8288CA30FBC.roa (hash: ZNuiSSyrHubK4AwyZlfjhIr65U0V5dbY5FcmNw+d+MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Aug 18 23:18:21 2026 GMT
Not After : Aug 25 23:18:21 2026 GMT
Subject: CN=6a84e83d-e98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:56:21:d3:f9:e9:c2:2c:19:eb:a6:c6:9b:
d1:69:1f:7d:0f:1a:d5:d0:be:7f:23:d4:e4:bd:44:
29:90:e2:9d:8c:9b:54:44:19:28:c8:88:41:cd:7f:
15:f6:e0:54:8e:60:f1:82:c8:81:6b:f0:c4:fa:a3:
69:5a:40:f2:25:e6:1b:85:02:16:74:28:cd:50:ad:
64:51:e4:5e:7f:53:06:6b:19:28:6e:75:0e:e1:a8:
34:14:c9:6e:00:8b:f6:5d:87:cf:1f:68:81:7f:1c:
1c:59:a3:9a:cc:7a:fa:d8:0a:57:4a:b6:1b:7b:eb:
ef:cc:a5:3d:62:c5:25:9c:dc:04:0d:1e:72:19:1e:
29:e8:45:9d:52:f7:87:dc:98:7c:f9:49:97:4d:2f:
d2:b6:a6:69:10:be:07:03:36:73:04:02:bb:cc:6b:
aa:2a:2d:f3:b4:2c:28:2d:2e:71:d7:ce:c4:c8:aa:
22:6a:0e:4b:14:d2:f3:7a:d1:ee:d7:69:bf:a2:ce:
40:63:8c:33:87:24:6c:e8:53:c6:8d:66:7e:99:d8:
bb:35:de:90:7c:db:2f:6b:a9:4d:54:ec:7f:cd:10:
c2:b7:75:b4:eb:da:1f:60:1e:64:5f:6b:58:a4:37:
9b:d9:6c:1b:be:c7:39:c9:b6:4d:23:68:48:54:04:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:BB:B1:E0:9E:75:89:09:E8:BF:78:7D:9E:78:89:8A:51:00:7E
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:f8:73:e9:53:ab:7e:b8:d8:ea:07:0f:61:2f:89:5d:1b:
c0:e7:46:cb:fc:cf:5c:f8:a5:f2:76:2d:d4:80:9f:13:3b:a4:
4d:27:72:5e:48:20:57:2a:d0:c6:66:a5:b1:5d:99:83:92:36:
a1:9d:a7:4d:9a:6e:99:df:38:54:b1:f3:3e:5d:5c:63:6b:59:
d8:8f:ef:ee:c6:aa:24:20:44:83:fb:1f:e0:3b:e2:7f:85:de:
fa:a0:af:23:c4:43:d2:57:5b:46:14:45:b7:29:0a:36:04:35:
9c:09:30:99:41:b2:39:dc:9a:0f:87:78:e3:70:e4:4f:30:42:
ca:ab:21:1a:f7:2e:d0:af:bb:68:37:fd:b8:fe:03:e3:ef:c3:
00:45:a7:b0:42:95:9a:36:4e:fb:0a:4f:ba:52:ea:98:03:e8:
bc:fa:b1:2d:b8:f4:01:29:44:23:ea:59:b4:98:0c:2b:48:49:
70:8a:0f:bb:64:26:ea:86:c7:70:4f:e4:0d:f0:bf:ed:14:40:
d0:36:a1:45:4e:1d:f9:50:6c:09:f2:26:78:f4:16:31:33:84:
91:71:1a:af:59:f4:41:9c:d9:60:61:9b:17:14:fd:5e:a9:f6:
6b:ab:9e:6d:3d:b8:72:61:34:76:d8:13:65:e3:c3:07:63:4f:
dd:f9:7a:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD
Njg0NjNFQTcwHhcNMjYwODE4MjMxODIxWhcNMjYwODI1MjMxODIxWjAYMRYwFAYD
VQQDEw02YTg0ZTgzZC1lOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvdWIdP56cIsGeumxpvRaR99DxrV0L5/I9TkvUQpkOKdjJtURBkoyIhBzX8V
9uBUjmDxgsiBa/DE+qNpWkDyJeYbhQIWdCjNUK1kUeRef1MGaxkobnUO4ag0FMlu
AIv2XYfPH2iBfxwcWaOazHr62ApXSrYbe+vvzKU9YsUlnNwEDR5yGR4p6EWdUveH
3Jh8+UmXTS/StqZpEL4HAzZzBAK7zGuqKi3ztCwoLS5x187EyKoiag5LFNLzetHu
12m/os5AY4wzhyRs6FPGjWZ+mdi7Nd6QfNsva6lNVOx/zRDCt3W069ofYB5kX2tY
pDeb2Wwbvsc5ybZNI2hIVAQ8AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzju7Hg
nnWJCei/eH2eeImKUQB+MB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB
REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP
aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADLb4c+lTq3642OoHD2EviV0bwOdGy/zPXPil8nYt1ICfEzukTSdyXkggVyrQ
xmalsV2Zg5I2oZ2nTZpumd84VLHzPl1cY2tZ2I/v7saqJCBEg/sf4Dvif4Xe+qCv
I8RD0ldbRhRFtykKNgQ1nAkwmUGyOdyaD4d443DkTzBCyqshGvcu0K+7aDf9uP4D
4+/DAEWnsEKVmjZO+wpPulLqmAPovPqxLbj0ASlEI+pZtJgMK0hJcIoPu2Qm6obH
cE/kDfC/7RRA0DahRU4d+VBsCfImePQWMTOEkXEar1n0QZzZYGGbFxT9Xqn2a6ue
bT24cmE0dtgTZePDB2NP3fl6mA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:06 2026 by rpki-client