
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: kzPafhzZ12SsBLSjpeGpLzZsItALpIoPooZTNEelee8=
Subject key identifier: 7D:C1:3C:13:E1:24:B6:EE:80:FF:B6:C2:5E:CC:64:FA:E2:44:82:13
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 01B8
Signing time: Wed 19 Aug 2026 04:36:23 +0000
Manifest this update: Wed 19 Aug 2026 04:36:23 +0000
Manifest next update: Wed 26 Aug 2026 04:36:23 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: HgAgv+C7SlWceNQ85tQBVbdJhIsAHWmB/y0ztcy5cQ0=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Aug 19 04:36:23 2026 GMT
Not After : Aug 26 04:36:23 2026 GMT
Subject: CN=6a8532c7-3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:95:ab:bd:cc:a8:ee:0e:4a:f4:43:fb:96:
44:d5:56:13:b7:df:c7:81:6f:3f:aa:89:eb:9d:48:
72:af:33:e6:02:52:d0:b3:06:be:88:2d:cc:2e:a7:
62:67:04:e7:ab:14:a0:50:e8:82:f5:d7:da:7f:76:
c9:3e:56:88:15:56:0e:51:7e:f5:02:a9:f6:a0:ab:
9d:aa:eb:15:eb:12:2c:a0:04:18:b7:51:b3:02:d3:
6a:f5:16:00:df:dd:8b:2c:4b:33:3d:09:85:39:98:
f1:22:f1:2f:05:ac:f0:d8:8b:91:e3:f4:aa:35:b6:
c3:21:f6:7d:db:17:59:19:f6:16:da:d4:29:5c:7e:
29:87:e3:2c:f0:11:3b:3d:57:58:80:41:5c:86:c3:
9d:07:05:00:4a:2f:c1:69:b8:5c:ed:ea:0e:cb:35:
0e:cd:46:1a:16:91:38:8b:f5:50:cc:1f:42:81:47:
5a:4e:80:29:e7:1b:f1:ad:ed:c3:1c:89:6e:f4:fb:
45:aa:f5:be:89:7a:d3:c9:cc:eb:5b:29:1d:10:9e:
f6:36:28:92:f3:c1:b5:fc:0a:db:f3:6a:64:a2:db:
ae:b5:c9:15:c8:af:6a:13:9e:53:3c:a3:63:91:cd:
85:52:4d:9e:e5:0c:db:68:5e:de:8c:8f:16:2e:d2:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:3C:13:E1:24:B6:EE:80:FF:B6:C2:5E:CC:64:FA:E2:44:82:13
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:0d:b7:5e:62:f2:65:88:18:1b:9c:ba:51:95:10:e1:81:
46:1d:f7:dd:f4:c3:40:be:41:7d:48:13:ee:b6:33:d2:31:4a:
79:50:f1:c2:16:13:f2:d1:17:b4:30:6c:1f:a5:aa:3a:47:d4:
b2:18:99:2e:71:eb:23:97:e1:4b:8e:60:ac:ef:7b:a7:02:06:
dc:02:82:5e:c0:e6:58:92:a9:79:57:93:bb:2e:d9:41:f4:4e:
bd:d1:d9:e8:bf:82:83:29:2c:f7:05:ee:58:92:3f:08:f2:ae:
cb:00:21:ad:3c:e5:f2:17:3d:3d:82:ab:ec:e6:27:a0:bd:cb:
6b:de:cb:66:80:6d:28:23:98:41:09:05:21:b1:63:8d:93:5e:
ee:1c:83:92:94:d9:eb:82:a1:4f:07:78:07:61:ba:94:77:7e:
cc:0e:7e:2c:03:44:cf:a2:d1:d9:ba:37:07:e1:89:d0:db:51:
41:36:a0:8f:1d:10:3e:d2:11:0d:13:c5:12:f8:7d:16:82:67:
fd:2d:1e:ba:0b:41:6a:12:46:14:d4:5a:b3:46:dc:30:8d:ca:
2d:f4:94:a1:c5:f6:89:6c:d4:b4:12:0a:91:a9:c7:dc:99:5f:
49:54:e2:5b:13:f2:a4:5a:b5:4e:45:b1:ea:26:e5:83:1e:8e:
ba:00:8b:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw
MzE0NUE0QTAwHhcNMjYwODE5MDQzNjIzWhcNMjYwODI2MDQzNjIzWjAYMRYwFAYD
VQQDEw02YTg1MzJjNy0zNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiYOVq73MqO4OSvRD+5ZE1VYTt9/HgW8/qonrnUhyrzPmAlLQswa+iC3MLqdi
ZwTnqxSgUOiC9dfaf3bJPlaIFVYOUX71Aqn2oKudqusV6xIsoAQYt1GzAtNq9RYA
392LLEszPQmFOZjxIvEvBazw2IuR4/SqNbbDIfZ92xdZGfYW2tQpXH4ph+Ms8BE7
PVdYgEFchsOdBwUASi/Babhc7eoOyzUOzUYaFpE4i/VQzB9CgUdaToAp5xvxre3D
HIlu9PtFqvW+iXrTyczrWykdEJ72NiiS88G1/Arb82pkotuutckVyK9qE55TPKNj
kc2FUk2e5QzbaF7ejI8WLtLOnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3BPBPh
JLbugP+2wl7MZPriRIITMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw
M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx
blVBdmlFX05xWDRERkZwS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnCANt15i8mWIGBuculGVEOGBRh333fTDQL5BfUgT7rYz0jFKeVDxwhYT8tEX
tDBsH6WqOkfUshiZLnHrI5fhS45grO97pwIG3AKCXsDmWJKpeVeTuy7ZQfROvdHZ
6L+Cgyks9wXuWJI/CPKuywAhrTzl8hc9PYKr7OYnoL3La97LZoBtKCOYQQkFIbFj
jZNe7hyDkpTZ64KhTwd4B2G6lHd+zA5+LANEz6LR2bo3B+GJ0NtRQTagjx0QPtIR
DRPFEvh9FoJn/S0eugtBahJGFNRas0bcMI3KLfSUocX2iWzUtBIKkanH3JlfSVTi
WxPypFq1TkWx6iblgx6OugCL/A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:42:08 2026 by rpki-client