
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: RfB+ob8ZgiibPZF5EcjeDSfZ/enrdzwIhJTbNWDP64c=
Subject key identifier: BF:8C:B9:75:EF:F8:D8:31:D6:2F:A3:32:B7:04:B6:78:66:64:92:AD
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 0221
Signing time: Mon 31 Aug 2026 03:13:44 +0000
Manifest this update: Mon 31 Aug 2026 03:13:44 +0000
Manifest next update: Mon 07 Sep 2026 03:13:44 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: eVHfYvTFrsOH7e7L7s4vSA7LGjf+1cKG+hAGbPVImC8=)
2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 03:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Aug 31 03:13:44 2026 GMT
Not After : Sep 7 03:13:44 2026 GMT
Subject: CN=6a94f168-e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:65:a8:ef:01:2f:bb:f8:3c:bb:d4:f5:7c:
59:4a:b8:8c:d5:82:b2:3f:d7:4d:da:4a:1a:6b:5b:
9a:58:30:79:06:7e:35:32:28:8b:19:57:2f:1c:95:
1b:72:2c:fa:99:a3:a9:dd:86:52:de:fd:2d:08:b1:
a0:db:1c:05:28:b4:7c:a8:22:6e:cd:b7:e5:d3:d4:
6d:a6:18:d7:66:b4:26:ff:33:7d:ec:31:55:7f:a6:
ca:3d:8a:36:2f:8d:8b:2f:13:04:10:05:76:34:2c:
b4:8e:38:b4:99:f8:40:0b:34:de:e5:de:cd:f9:d2:
82:46:7c:d0:de:f0:19:9e:15:d5:1c:9b:7b:c0:b3:
5b:5d:0f:53:8f:0a:b0:a4:66:20:d4:82:3d:3f:a6:
ce:0b:67:76:c0:28:89:13:ce:95:3c:37:c3:28:6a:
a7:30:6b:74:d6:5b:bb:f4:0b:d2:c1:3e:3e:d4:84:
e4:3d:21:83:4a:7d:b9:73:0e:74:28:6c:3f:fe:e4:
1e:02:50:5d:91:c9:91:5a:bb:f4:30:6c:24:74:5e:
b9:18:51:cb:c6:7f:3b:25:bc:d3:90:0b:e2:b5:ad:
4a:fc:3c:a4:6d:82:a4:77:d7:da:ea:c5:8b:28:2a:
8a:86:50:4a:9d:5d:7d:0f:ba:19:ff:00:82:a3:90:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:B9:75:EF:F8:D8:31:D6:2F:A3:32:B7:04:B6:78:66:64:92:AD
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:97:9b:2d:e1:f6:3f:13:7f:1a:5d:7c:19:e9:c2:d6:b2:f5:
f1:53:5b:36:0a:99:d2:bf:bc:c5:29:4b:ac:4d:6a:9a:c2:fb:
81:9d:f6:04:cd:f9:5f:ce:3d:92:4e:0a:f7:d1:13:97:0f:0b:
7f:be:28:4c:cf:f2:23:1f:ae:b7:1a:77:24:e1:b3:39:f7:01:
a5:53:6e:f2:7d:9d:52:71:f0:86:99:a8:44:91:25:c0:38:ba:
fe:2f:87:c0:f7:ab:4b:47:a6:cc:42:51:64:c3:c4:c7:49:1f:
71:c0:30:fe:54:20:07:a4:9b:77:83:99:50:19:81:b6:b5:fc:
22:ad:79:d1:30:b4:19:a2:82:20:c2:b3:74:fd:76:de:bc:c6:
f0:6d:ae:bc:ed:68:09:64:93:40:82:d7:e6:3b:83:ee:da:8f:
51:99:f5:2f:a7:3f:aa:4b:f0:ca:a9:08:98:ef:0c:38:b9:9d:
30:51:fa:f3:61:3a:5c:61:96:15:c1:40:93:ee:3d:e6:3b:13:
31:33:01:cd:e7:ae:a0:91:02:6d:2f:f9:48:5f:30:5c:5e:f1:
da:f8:dd:d7:9e:24:2f:ed:1e:6f:8b:95:2e:c9:50:50:5a:b0:
21:d5:e4:0e:c3:34:3a:ef:a6:2b:f6:20:93:93:84:4f:ff:ce:
74:0c:c4:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjYwODMxMDMxMzQ0WhcNMjYwOTA3MDMxMzQ0WjAYMRYwFAYD
VQQDEw02YTk0ZjE2OC1lMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBNlqO8BL7v4PLvU9XxZSriM1YKyP9dN2koaa1uaWDB5Bn41MiiLGVcvHJUb
ciz6maOp3YZS3v0tCLGg2xwFKLR8qCJuzbfl09RtphjXZrQm/zN97DFVf6bKPYo2
L42LLxMEEAV2NCy0jji0mfhACzTe5d7N+dKCRnzQ3vAZnhXVHJt7wLNbXQ9Tjwqw
pGYg1II9P6bOC2d2wCiJE86VPDfDKGqnMGt01lu79AvSwT4+1ITkPSGDSn25cw50
KGw//uQeAlBdkcmRWrv0MGwkdF65GFHLxn87JbzTkAvita1K/DykbYKkd9fa6sWL
KCqKhlBKnV19D7oZ/wCCo5CmrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+MuXXv
+Ngx1i+jMrcEtnhmZJKtMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu
NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpebLeH2PxN/Gl18GenC1rL18VNbNgqZ0r+8xSlLrE1qmsL7gZ32BM35X849
kk4K99ETlw8Lf74oTM/yIx+utxp3JOGzOfcBpVNu8n2dUnHwhpmoRJElwDi6/i+H
wPerS0emzEJRZMPEx0kfccAw/lQgB6Sbd4OZUBmBtrX8Iq150TC0GaKCIMKzdP12
3rzG8G2uvO1oCWSTQILX5juD7tqPUZn1L6c/qkvwyqkImO8MOLmdMFH682E6XGGW
FcFAk+495jsTMTMBzeeuoJECbS/5SF8wXF7x2vjd154kL+0eb4uVLslQUFqwIdXk
DsM0Ou+mK/Ygk5OET//OdAzEHw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:47:48 2026 by rpki-client