
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json)
Hash identifier: Xyg4FQEZE1a/Zz1o9V1p2mbZdXUT5ax6dg+P1o/irzs=
Subject key identifier: 42:37:32:04:49:60:B8:3F:18:8E:C6:99:CC:1C:03:5B:19:C7:F6:3F
Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
Manifest number: 7F
Signing time: Wed 19 Aug 2026 08:23:48 +0000
Manifest this update: Wed 19 Aug 2026 08:23:48 +0000
Manifest next update: Wed 26 Aug 2026 08:23:48 +0000
Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: aNpFYqCNpY+p0iFImGfgJQxBJeD7TfTs+VXMbE694GU=)
2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Validity
Not Before: Aug 19 08:23:48 2026 GMT
Not After : Aug 26 08:23:48 2026 GMT
Subject: CN=6a856814-a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:b3:52:09:07:31:30:8b:b1:6c:35:54:55:
4c:d6:07:0d:10:56:5e:4f:53:2a:68:63:ed:34:aa:
10:ce:de:4c:31:de:3a:c2:66:c8:fe:6f:f9:e3:c9:
50:c6:0f:ee:fe:0d:8b:f4:26:63:cb:f1:e8:df:9a:
be:8c:cd:b6:ff:26:ce:77:f3:d7:db:54:61:22:fb:
f3:81:db:4e:9b:c2:1d:bb:ff:a9:cc:06:ed:2f:37:
ea:17:0f:f0:1b:5e:3b:56:f1:7d:31:69:e7:a0:5e:
2d:d3:c3:28:a1:b7:52:73:3d:43:d1:d3:f8:33:fa:
d2:65:95:d2:4b:82:a3:47:c3:25:7a:3c:75:c0:1d:
da:6c:84:59:44:d0:be:a9:f8:6d:2d:86:f3:0f:cd:
2a:c9:d7:64:6b:22:b0:0b:ab:60:2e:f8:31:f3:ad:
28:c8:f0:a7:54:05:af:b8:ca:f9:fd:ed:4c:17:1a:
9f:77:c4:0e:ed:ed:58:d3:86:23:74:0d:55:f5:45:
40:de:1d:a5:db:b2:dc:0b:c8:a6:17:ce:fa:88:c7:
32:17:bc:da:1f:a5:f3:17:0a:f8:56:83:86:01:d9:
b8:f4:e0:63:c5:61:2f:65:e1:4f:e9:27:06:5b:37:
21:ed:61:39:3d:71:8b:f1:fd:08:e3:0a:8e:b6:7a:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:32:04:49:60:B8:3F:18:8E:C6:99:CC:1C:03:5B:19:C7:F6:3F
X509v3 Authority Key Identifier:
keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:12:a6:67:03:1c:b0:d2:ba:e3:fb:5f:c0:bd:a9:80:51:
4d:ff:68:8c:c2:12:b8:8f:6b:2e:2b:62:6c:a6:30:7a:7b:23:
4d:96:29:0f:9e:b1:62:5f:a9:73:9e:e8:34:a1:3a:f0:b0:91:
dc:8c:47:6e:51:77:9b:8d:4b:b9:0c:e2:45:6e:82:fe:86:e7:
36:98:9d:b2:74:ed:9f:02:21:09:34:c7:27:6a:f9:83:b0:f8:
20:0d:3a:1f:e0:9f:c6:12:c0:72:53:ba:3c:bc:5a:1b:ca:85:
59:f0:fe:7a:2d:55:11:a0:83:b2:a6:41:cb:45:a7:25:d4:9f:
d6:8e:b4:43:aa:75:14:f5:d5:f2:6d:68:d7:34:73:9e:1c:59:
d2:52:6d:e8:27:0b:93:96:b2:70:a2:e7:50:d5:2b:fd:ce:14:
d5:be:ce:f5:74:ca:bd:2d:3c:f5:e8:11:99:09:bf:c7:99:95:
a8:34:2f:4a:bf:3c:5f:2c:a1:d0:af:10:21:c9:96:f4:3e:da:
3c:df:64:97:62:70:a8:23:86:9d:30:72:d1:df:6c:9d:67:fa:
b1:43:52:0f:db:0c:5f:76:58:83:4c:5f:ba:d7:34:57:c6:54:
10:b6:40:d9:3b:16:3d:d3:ca:b7:b5:27:73:7e:9a:b8:4e:b3:
c7:41:55:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQwQjIxMTAvBgNVBAUTKDIwRjNCQkQ0OThGNDNDOTc5MTNFRTFCOTk0MjlEQjg5
MEI0NzYyQjAwHhcNMjYwODE5MDgyMzQ4WhcNMjYwODI2MDgyMzQ4WjAYMRYwFAYD
VQQDEw02YTg1NjgxNC1hMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsWzUgkHMTCLsWw1VFVM1gcNEFZeT1MqaGPtNKoQzt5MMd46wmbI/m/548lQ
xg/u/g2L9CZjy/Ho35q+jM22/ybOd/PX21RhIvvzgdtOm8Idu/+pzAbtLzfqFw/w
G147VvF9MWnnoF4t08MoobdScz1D0dP4M/rSZZXSS4KjR8Mlejx1wB3abIRZRNC+
qfhtLYbzD80qyddkayKwC6tgLvgx860oyPCnVAWvuMr5/e1MFxqfd8QO7e1Y04Yj
dA1V9UVA3h2l27LcC8imF876iMcyF7zaH6XzFwr4VoOGAdm49OBjxWEvZeFP6ScG
Wzch7WE5PXGL8f0I4wqOtnqyNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEI3MgRJ
YLg/GI7GmcwcA1sZx/Y/MB8GA1UdIwQYMBaAFCDzu9SY9DyXkT7huZQp24kLR2Kw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDBCMi9EMTQ2RTRGMERB
MzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBKZVJQdUc1bENuYmlRdEhZ
ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFlyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDBCMi9EMTQ2RTRGMERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9JUE83MUpqMFBK
ZVJQdUc1bENuYmlRdEhZckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbssSpmcDHLDSuuP7X8C9qYBRTf9ojMISuI9rLitibKYwensjTZYpD56xYl+p
c57oNKE68LCR3IxHblF3m41LuQziRW6C/obnNpidsnTtnwIhCTTHJ2r5g7D4IA06
H+CfxhLAclO6PLxaG8qFWfD+ei1VEaCDsqZBy0WnJdSf1o60Q6p1FPXV8m1o1zRz
nhxZ0lJt6CcLk5aycKLnUNUr/c4U1b7O9XTKvS089egRmQm/x5mVqDQvSr88Xyyh
0K8QIcmW9D7aPN9kl2JwqCOGnTBy0d9snWf6sUNSD9sMX3ZYg0xfutc0V8ZUELZA
2TsWPdPKt7Unc36auE6zx0FVDQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:00:31 2026 by rpki-client