
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: VCXbYG1ouQiSJ7x0zDhEGn33LbPdCaN+J58xyPwhAqE=
Subject key identifier: 25:1C:98:6D:18:BB:6D:0A:91:D0:ED:F2:66:2C:93:4F:A0:9B:ED:D5
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1B37
Signing time: Sun 26 Jul 2026 16:23:39 +0000
Manifest this update: Sun 26 Jul 2026 16:23:39 +0000
Manifest next update: Sun 02 Aug 2026 16:23:39 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: wiVY6Brn9gBxoUKb1Qiq7e5L6v4YvAR5+9RS4dn7EeI=)
2: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=)
3: EF9C17344E9611F1BFD1AE0BBC833773.roa (hash: gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=)
4: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=)
5: A704B6CA4E9611F1B39189EDBB833773.roa (hash: E4Gh/Hv+zCrfZWmDryHxww+Tu0R+4hjamnHpY0bEw4U=)
6: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=)
7: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7056 (0x1b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Jul 26 16:23:39 2026 GMT
Not After : Aug 2 16:23:39 2026 GMT
Subject: CN=6a66348b-4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:01:a7:18:8e:a4:02:81:d3:cf:20:dd:cf:
1a:5c:7d:13:9c:59:74:c2:99:b5:16:04:8c:a7:06:
2a:7a:8c:06:f8:73:f2:19:76:c0:4c:38:b6:bc:8b:
40:53:3c:53:7f:90:25:af:e7:1b:d0:38:4b:10:0e:
f0:f7:04:4f:fc:0a:88:2d:96:01:76:cd:ae:28:e3:
b7:24:65:04:4b:11:b1:1e:56:79:79:af:c0:72:c5:
28:94:f6:2d:2c:01:47:07:f7:46:0f:e6:43:ce:34:
22:f1:47:34:93:15:0e:d1:63:b5:3a:93:4d:da:51:
73:49:6c:ed:5a:5a:8a:fb:98:af:37:8c:63:a5:b1:
41:83:47:53:ea:91:eb:86:3d:e2:90:d6:ca:cd:14:
80:c4:50:53:ef:61:7d:13:98:79:9f:cf:87:2d:0c:
af:8f:42:8a:c9:80:87:09:2c:48:68:d6:24:ee:c8:
3d:92:13:be:67:f5:08:f1:fe:0b:8b:96:9b:c4:0d:
bc:36:e5:ac:96:c2:b1:68:d0:0f:16:d8:2e:cc:86:
bd:4b:a5:1a:c0:d3:0e:42:73:0d:1e:5a:71:d4:c0:
cd:7f:7b:b8:19:a4:42:f0:c3:f4:2a:24:20:f3:bf:
86:87:4b:ac:83:49:ec:59:d8:d7:bb:1a:e8:5b:35:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:98:6D:18:BB:6D:0A:91:D0:ED:F2:66:2C:93:4F:A0:9B:ED:D5
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:af:46:6c:40:b9:25:c0:4c:c8:4e:ed:f8:7f:67:bd:2f:bc:
4d:76:6e:c9:92:12:a1:da:f2:cb:23:e2:3c:53:de:23:4d:3d:
b9:c3:48:3a:df:03:e2:77:90:ad:ba:de:98:2a:0a:ed:a4:0a:
e5:ba:54:c0:38:de:b0:f7:6a:fb:36:b0:79:da:19:75:6c:cb:
2c:10:7f:b3:c1:2e:b3:01:43:be:9f:49:72:73:93:70:7f:cd:
5c:81:e8:13:b5:34:bc:10:f8:4d:e0:12:1c:a8:34:f5:a3:db:
fd:38:84:01:0b:c6:84:91:6c:41:3b:89:9d:03:36:06:04:f1:
04:40:ee:87:10:7d:5a:fe:b0:c2:19:db:72:94:3c:9c:88:ea:
e3:0d:55:ed:e8:c5:00:be:42:ee:ee:45:21:62:b8:e4:d4:21:
92:38:41:1b:d7:e4:47:f1:21:74:9b:cf:f4:cb:36:84:06:85:
be:3e:70:65:fc:03:18:6f:70:ab:e4:e5:e6:5c:f6:68:25:7f:
4a:15:21:0f:38:ff:ee:f7:8f:52:a2:57:fa:04:e3:c0:60:30:
a0:d5:1f:a0:5d:4f:ff:66:df:ce:d7:a3:9d:3e:1a:e0:5e:98:
52:54:a2:9a:ee:58:24:f4:f5:c0:d6:2b:be:42:3c:9f:c4:13:
a8:9d:24:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG
ODhFMzlFRUYwHhcNMjYwNzI2MTYyMzM5WhcNMjYwODAyMTYyMzM5WjAYMRYwFAYD
VQQDEw02YTY2MzQ4Yi00MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5EIBpxiOpAKB088g3c8aXH0TnFl0wpm1FgSMpwYqeowG+HPyGXbATDi2vItA
UzxTf5Alr+cb0DhLEA7w9wRP/AqILZYBds2uKOO3JGUESxGxHlZ5ea/AcsUolPYt
LAFHB/dGD+ZDzjQi8Uc0kxUO0WO1OpNN2lFzSWztWlqK+5ivN4xjpbFBg0dT6pHr
hj3ikNbKzRSAxFBT72F9E5h5n8+HLQyvj0KKyYCHCSxIaNYk7sg9khO+Z/UI8f4L
i5abxA28NuWslsKxaNAPFtguzIa9S6UawNMOQnMNHlpx1MDNf3u4GaRC8MP0KiQg
87+Gh0usg0nsWdjXuxroWzWmTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUcmG0Y
u20KkdDt8mYsk0+gm+3VMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5
Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1
X0RZMXpVNDFCSXI0ampudTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGa9GbEC5JcBMyE7t+H9nvS+8TXZuyZISodryyyPiPFPeI009ucNIOt8D4neQ
rbremCoK7aQK5bpUwDjesPdq+zawedoZdWzLLBB/s8EuswFDvp9JcnOTcH/NXIHo
E7U0vBD4TeASHKg09aPb/TiEAQvGhJFsQTuJnQM2BgTxBEDuhxB9Wv6wwhnbcpQ8
nIjq4w1V7ejFAL5C7u5FIWK45NQhkjhBG9fkR/EhdJvP9Ms2hAaFvj5wZfwDGG9w
q+Tl5lz2aCV/ShUhDzj/7vePUqJX+gTjwGAwoNUfoF1P/2bfztejnT4a4F6YUlSi
mu5YJPT1wNYrvkI8n8QTqJ0k/w==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:52 2026 by rpki-client