
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
File: rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft (raw, json)
Hash identifier: 1GCYn5o6d9MfjLapVAAVGQ1/Pqdp/bFviZ2Vb9AAxGk=
Subject key identifier: 9D:97:AA:45:F2:24:F5:84:59:8D:0A:6F:40:31:BA:F4:4A:BB:30:03
Authority key identifier: AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
Certificate issuer: /CN=A91A799E/serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Certificate serial: 0716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
Manifest number: 0708
Signing time: Sat 04 Apr 2026 21:44:33 +0000
Manifest this update: Sat 04 Apr 2026 21:44:33 +0000
Manifest next update: Sat 11 Apr 2026 21:44:33 +0000
Files and hashes: 1: rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl (hash: jB/22H2YMPgZRAO6fmBR34mu1sTZxGZMAzxvm80NBwI=)
2: 6AC62B967FD711EBA2ECB43BC4F9AE02.roa (hash: F/n1fw5Wh9KTj/6W2CMzWHfj5GcUWPdwePPGd5S/6ss=)
3: 517F49AA822611EB8990276EC4F9AE02.roa (hash: AiOBrVM7jcIowiVFU6dduzLILwALxoJy2D7zLUEvCBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A799E, serialNumber=AC55FB75BFE343E49487D851C0139C1364CAE9CE
Validity
Not Before: Apr 4 21:44:33 2026 GMT
Not After : Apr 11 21:44:33 2026 GMT
Subject: CN=69d18641-76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:07:f4:6e:c3:ec:af:f4:7e:e2:0e:6e:4e:
f2:a1:3e:fe:71:5a:d9:5e:5b:ad:4a:59:89:77:e7:
ee:0a:fd:ee:98:31:b8:1e:8f:e3:36:98:79:5a:31:
dc:4b:3b:e5:e2:cd:c8:4c:fc:d9:aa:9a:44:ae:71:
5a:b9:6b:8d:0e:26:9e:e4:ca:79:85:ed:04:2b:b0:
1d:72:a8:67:f7:ec:90:05:b3:20:f9:c8:56:23:a9:
f3:fe:10:44:99:83:aa:81:45:3a:87:2f:2e:c5:a5:
fc:60:06:68:56:20:a2:9d:e8:1b:51:8c:ad:bc:dd:
f5:bd:24:9a:1c:c0:e9:19:5e:d2:95:9f:7f:84:ea:
19:74:3e:d4:11:a7:6b:ca:ca:fe:f9:0c:15:8c:79:
e4:b3:09:1f:e0:17:03:e7:b0:f6:d4:82:1a:85:b4:
8c:ff:d0:e4:63:4b:34:ec:8e:3c:8e:b1:5e:76:84:
49:4b:82:dd:ba:f6:2e:05:6d:c3:a1:3c:07:61:d8:
99:36:b9:a0:09:84:2f:7d:df:26:2b:79:1c:8e:cc:
7a:bc:e4:eb:5f:4b:45:fd:ed:9a:dd:0b:3c:bb:1e:
41:3a:fd:3a:e5:4b:b1:ae:17:67:ac:ef:9c:84:0a:
63:51:76:6a:cb:ac:87:b3:91:ad:40:a2:01:1d:50:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:AA:45:F2:24:F5:84:59:8D:0A:6F:40:31:BA:F4:4A:BB:30:03
X509v3 Authority Key Identifier:
keyid:AC:55:FB:75:BF:E3:43:E4:94:87:D8:51:C0:13:9C:13:64:CA:E9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFX7db_jQ-SUh9hRwBOcE2TK6c4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A799E/255CE8347FD611EB9FD1233BC4F9AE02/rFX7db_jQ-SUh9hRwBOcE2TK6c4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0b:ae:57:bc:c3:6c:30:c2:d2:75:88:0f:83:2a:68:0c:f8:
b5:25:59:c9:6e:c3:7f:09:cd:7a:13:f1:65:21:e1:40:de:dd:
2d:c1:f0:cd:e2:2e:06:ef:e6:54:94:4c:bb:6e:10:ec:fe:7e:
0c:0e:b0:89:fa:77:73:5e:dc:88:56:ab:de:2f:f0:be:94:8c:
d0:17:6f:df:4c:66:4f:22:c1:09:06:0c:96:80:1c:9a:eb:70:
8d:8f:fb:43:11:d6:d0:fd:99:15:73:34:b6:b4:94:22:23:d8:
be:0e:d5:08:b4:8a:ca:f9:0a:c8:9b:84:4e:20:a6:c2:7f:3e:
47:07:55:08:fd:7f:26:9a:a0:a5:c6:4d:f8:3c:6a:b4:18:e7:
f2:4b:70:bc:e7:6c:cf:23:14:fe:36:19:9b:ac:88:a5:92:68:
53:65:14:dc:e1:d6:76:b2:1a:68:9c:d7:eb:78:ab:d3:a3:2c:
fa:2f:8a:7b:07:4d:ea:ab:e0:12:71:94:02:c9:88:9e:b5:e2:
00:cf:7c:b4:fd:60:1d:f6:ed:f4:2e:43:68:85:02:47:44:78:
11:3e:43:da:0c:66:c8:df:67:de:4c:9a:c0:e7:ea:64:81:e1:
32:a0:56:7c:8e:4a:58:97:fe:91:a1:fd:11:0b:10:ae:18:41:
b9:d2:8f:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5OUUxMTAvBgNVBAUTKEFDNTVGQjc1QkZFMzQzRTQ5NDg3RDg1MUMwMTM5QzEz
NjRDQUU5Q0UwHhcNMjYwNDA0MjE0NDMzWhcNMjYwNDExMjE0NDMzWjAYMRYwFAYD
VQQDEw02OWQxODY0MS03NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3S8H9G7D7K/0fuIObk7yoT7+cVrZXlutSlmJd+fuCv3umDG4Ho/jNph5WjHc
Szvl4s3ITPzZqppErnFauWuNDiae5Mp5he0EK7Adcqhn9+yQBbMg+chWI6nz/hBE
mYOqgUU6hy8uxaX8YAZoViCinegbUYytvN31vSSaHMDpGV7SlZ9/hOoZdD7UEadr
ysr++QwVjHnkswkf4BcD57D21IIahbSM/9DkY0s07I48jrFedoRJS4LduvYuBW3D
oTwHYdiZNrmgCYQvfd8mK3kcjsx6vOTrX0tF/e2a3Qs8ux5BOv065UuxrhdnrO+c
hApjUXZqy6yHs5GtQKIBHVAjrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2XqkXy
JPWEWY0Kb0AxuvRKuzADMB8GA1UdIwQYMBaAFKxV+3W/40PklIfYUcATnBNkyunO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk5RS8yNTVDRTgzNDdG
RDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEtU1VoOWhSd0JPY0UyVEs2
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JGWDdkYl9qUS1TVWg5aFJ3Qk9jRTJUSzZjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzk5RS8yNTVDRTgzNDdGRDYxMUVCOUZEMTIzM0JDNEY5QUUwMi9yRlg3ZGJfalEt
U1VoOWhSd0JPY0UyVEs2YzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjguuV7zDbDDC0nWID4MqaAz4tSVZyW7DfwnNehPxZSHhQN7dLcHwzeIuBu/m
VJRMu24Q7P5+DA6wifp3c17ciFar3i/wvpSM0Bdv30xmTyLBCQYMloAcmutwjY/7
QxHW0P2ZFXM0trSUIiPYvg7VCLSKyvkKyJuETiCmwn8+RwdVCP1/JpqgpcZN+Dxq
tBjn8ktwvOdszyMU/jYZm6yIpZJoU2UU3OHWdrIaaJzX63ir06Ms+i+KewdN6qvg
EnGUAsmInrXiAM98tP1gHfbt9C5DaIUCR0R4ET5D2gxmyN9n3kyawOfqZIHhMqBW
fI5KWJf+kaH9EQsQrhhBudKPrw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:57 2026 by rpki-client