
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: F+65XQW+hHENCgGHm8gTVb7t71RW3lUBXspwZx3Ru+M=
Subject key identifier: D4:28:43:AD:84:9C:64:95:C6:19:7C:CB:F3:E0:04:29:6B:FA:49:99
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 0220
Signing time: Wed 19 Aug 2026 03:52:42 +0000
Manifest this update: Wed 19 Aug 2026 03:52:41 +0000
Manifest next update: Wed 26 Aug 2026 03:52:41 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: hU/8ykIsOJdJRLD9NGM1UM9AR93mikEEVrbVz0bYtKk=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: UKDPjI9WdhK3TxDp03my1LqNHeP49K9ROo6jRcr9k9A=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: c2JKhfp9s44ucWPUaCMBJfqkty8QtrYxSxQneezFfq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: Aug 19 03:52:41 2026 GMT
Not After : Aug 26 03:52:41 2026 GMT
Subject: CN=6a85288a-bce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:92:51:4d:22:76:eb:ad:f7:c7:5b:05:57:
a9:2c:0b:82:04:4b:93:6a:5b:5d:2b:f0:89:10:fa:
89:8d:78:4b:8d:7c:54:25:82:9a:60:f9:db:83:ea:
11:8d:2e:27:fb:12:06:1e:23:48:bf:8d:15:88:bb:
b2:74:5b:89:d8:8c:b5:f5:cc:ff:0c:37:92:17:40:
5e:27:fa:e4:be:c5:42:24:ee:9d:91:a1:5c:81:68:
92:ae:c8:ff:85:20:83:33:ef:d0:52:ef:bc:46:8e:
70:af:7b:c1:0b:7b:94:42:c9:f3:74:71:d8:77:68:
be:1e:bf:11:fb:97:19:b5:ce:bb:0a:85:9d:b0:70:
9b:b2:ea:34:a5:40:b5:47:25:c4:52:2e:2b:bc:92:
84:ca:dd:38:57:24:05:35:cc:6c:74:90:55:db:35:
6a:98:b7:da:a3:a8:fe:3b:19:71:86:0d:eb:5c:86:
87:be:96:e8:c3:bc:2b:b0:70:03:ae:6a:e7:65:48:
bc:db:0f:05:a1:f7:4d:97:ac:dd:d0:46:dc:19:8f:
92:f7:19:d1:ce:77:bc:87:ee:2a:22:7a:b7:3c:fd:
bb:bb:34:4f:0f:86:fb:c0:72:93:26:1d:af:ee:10:
ba:a2:fd:58:ec:2a:3e:da:73:80:87:c8:7b:7a:24:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:43:AD:84:9C:64:95:C6:19:7C:CB:F3:E0:04:29:6B:FA:49:99
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:f0:f7:21:8d:fc:9a:7d:17:9e:6b:35:fd:ac:09:c0:47:
96:e9:73:61:60:8d:2e:80:ce:c0:84:96:67:13:c9:1f:0c:5e:
1d:f0:b9:d7:8f:77:94:3b:61:84:24:e7:3a:63:04:4c:aa:f1:
ea:7a:4a:ad:5c:f4:ba:16:8d:78:fb:9d:85:60:dd:4a:88:72:
ac:61:ce:f5:1f:18:25:f7:67:83:df:9e:2c:d3:ff:31:07:cf:
6e:56:5b:9d:58:c1:b0:1e:80:79:79:1b:14:a3:61:c3:6d:0a:
fd:5f:b3:f4:e9:ca:f6:db:00:3b:63:df:c0:b1:88:6a:29:c8:
73:a1:12:a0:a5:e3:21:c8:f5:19:b7:8a:a6:68:12:8f:0a:3d:
83:01:e8:a5:da:40:34:54:45:87:31:9c:26:12:01:97:ed:00:
4d:82:52:69:fa:20:8e:ed:0a:43:03:97:df:68:c9:c3:a1:b1:
08:b0:87:dd:5c:66:5f:e4:89:74:eb:04:87:9c:c3:73:5f:81:
e2:a0:f6:e0:fd:80:eb:87:f9:85:56:4f:52:d7:75:20:8d:b0:
aa:b2:ae:2a:86:df:b0:49:07:d8:92:f9:44:30:94:0b:c1:ae:
fb:73:2e:d3:08:ee:98:c6:79:70:b3:26:e6:c0:7e:d4:d0:03:
05:1d:c6:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0
NTAwOEVDMzkwHhcNMjYwODE5MDM1MjQxWhcNMjYwODI2MDM1MjQxWjAYMRYwFAYD
VQQDEw02YTg1Mjg4YS1iY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnWiSUU0iduut98dbBVepLAuCBEuTaltdK/CJEPqJjXhLjXxUJYKaYPnbg+oR
jS4n+xIGHiNIv40ViLuydFuJ2Iy19cz/DDeSF0BeJ/rkvsVCJO6dkaFcgWiSrsj/
hSCDM+/QUu+8Ro5wr3vBC3uUQsnzdHHYd2i+Hr8R+5cZtc67CoWdsHCbsuo0pUC1
RyXEUi4rvJKEyt04VyQFNcxsdJBV2zVqmLfao6j+Oxlxhg3rXIaHvpbow7wrsHAD
rmrnZUi82w8FofdNl6zd0EbcGY+S9xnRzne8h+4qInq3PP27uzRPD4b7wHKTJh2v
7hC6ov1Y7Co+2nOAh8h7eiS1/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQoQ62E
nGSVxhl8y/PgBClr+kmZMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4
QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1
QVpLV01naDA0N1JGQUk3RGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo6Xw9yGN/Jp9F55rNf2sCcBHlulzYWCNLoDOwISWZxPJHwxeHfC51493lDth
hCTnOmMETKrx6npKrVz0uhaNePudhWDdSohyrGHO9R8YJfdng9+eLNP/MQfPblZb
nVjBsB6AeXkbFKNhw20K/V+z9OnK9tsAO2PfwLGIainIc6ESoKXjIcj1GbeKpmgS
jwo9gwHopdpANFRFhzGcJhIBl+0ATYJSafogju0KQwOX32jJw6GxCLCH3VxmX+SJ
dOsEh5zDc1+B4qD24P2A64f5hVZPUtd1II2wqrKuKobfsEkH2JL5RDCUC8Gu+3Mu
0wjumMZ5cLMm5sB+1NADBR3GUQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:44 2026 by rpki-client