
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft (raw, json)
Hash identifier: /d8II4e485QzSvD1O0AgUN9Gc3FcRSqbSQ3NrrF5imI=
Subject key identifier: E3:40:E6:C0:58:8A:24:F0:82:4E:CF:44:14:05:2D:B0:51:74:2C:2B
Authority key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE
Certificate issuer: /CN=A91B40B2/serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
Manifest number: 7F
Signing time: Wed 19 Aug 2026 08:23:45 +0000
Manifest this update: Wed 19 Aug 2026 08:23:45 +0000
Manifest next update: Wed 26 Aug 2026 08:23:45 +0000
Files and hashes: 1: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl (hash: O8Klh0nrIMI35LOhhqca/8YXRtHGLtaj6ChDWEhKI2s=)
2: 78A0CEEADA3811F080F82F148DD3641D.roa (hash: eOwaT1T8Z8VCMGhXjw1If947zmL/1K+4PuT9NJbQ77g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl
rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE
Validity
Not Before: Aug 19 08:23:45 2026 GMT
Not After : Aug 26 08:23:45 2026 GMT
Subject: CN=6a856811-6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:cb:f3:a3:6a:da:c8:3d:9c:76:13:a0:f2:
9f:2b:52:ff:4a:bc:cf:ea:27:30:19:f2:98:ae:80:
80:20:d1:74:03:57:42:ff:ba:d2:38:bd:e7:65:c3:
54:3e:da:2d:79:21:52:e7:47:0a:22:84:6e:95:4c:
d6:33:82:50:bf:92:78:65:60:bb:54:ad:5e:04:2a:
f1:46:b8:81:b2:91:44:44:2d:42:22:41:b9:e4:36:
41:4d:11:94:93:31:46:d8:77:91:f8:82:f7:2c:64:
f6:0e:6c:74:4f:b5:74:ad:47:e7:3d:e0:d9:8e:d1:
2d:ee:f0:ac:c5:2d:1f:13:4f:bc:83:da:3d:96:fe:
f4:77:69:a3:69:c4:88:79:fb:bb:57:2a:34:5c:a3:
a3:cc:de:35:02:bb:ef:17:a5:1b:74:74:22:da:41:
7e:ba:ee:b5:c5:21:d8:ed:35:bf:c3:86:6f:89:05:
27:80:a1:dd:74:46:c9:b5:94:61:9a:38:39:1c:db:
bf:4f:99:82:a5:c7:53:32:7d:fd:95:6a:0b:40:b9:
88:9b:28:a1:18:4e:05:63:e9:1d:24:46:7f:ad:b3:
e1:50:a3:d1:49:e6:95:e5:c5:24:2c:58:b3:39:4a:
85:38:9b:9c:ba:ce:e5:31:ab:bc:34:6f:7f:ec:94:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:E6:C0:58:8A:24:F0:82:4E:CF:44:14:05:2D:B0:51:74:2C:2B
X509v3 Authority Key Identifier:
keyid:03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ae:21:03:ab:bf:1a:9f:4b:2b:ef:0e:3c:bd:2a:a9:ff:a2:
bb:28:a7:e7:29:fb:05:2b:50:fa:9c:e9:26:fe:e6:db:28:f8:
23:11:69:08:4c:b1:ba:d6:dd:f3:bc:b3:05:46:65:d6:68:58:
a7:75:32:2c:21:eb:a0:ca:39:da:92:fc:c2:18:87:37:46:6d:
c3:ea:5f:27:05:9c:da:e9:4f:28:71:14:65:95:e1:d5:a4:49:
83:80:05:41:06:fd:30:23:bf:02:27:42:05:43:17:90:03:cb:
68:63:ec:5d:2a:a0:d4:22:d6:6b:8a:f2:9a:07:d6:d5:b2:94:
f8:fc:e9:29:00:b7:7d:76:51:15:68:34:05:6a:a3:10:f8:59:
39:72:27:b9:58:8f:17:b9:35:ea:2b:ed:9b:8c:dc:45:07:99:
b6:95:9e:98:ff:ea:98:78:f1:c3:0a:a3:5c:c9:73:d5:d2:a6:
8e:22:1d:b0:08:62:b9:d2:1e:5d:87:e2:14:1b:58:c2:fd:6e:
98:60:38:16:ef:52:03:d2:ae:0c:26:cb:44:27:dc:3f:aa:f9:
18:b6:eb:c4:9a:9f:fe:2e:ef:0f:7f:aa:58:06:d4:69:a3:20:
8b:cf:ed:79:31:86:d3:a0:dc:13:6f:bc:4e:27:89:55:b4:15:
ea:c3:26:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQwQjIxMTAvBgNVBAUTKDAzOTI4NDI3RDJGNTNDOEZCQTk3RkNGRTNGQzY1M0E1
MEYxNjU5RkUwHhcNMjYwODE5MDgyMzQ1WhcNMjYwODI2MDgyMzQ1WjAYMRYwFAYD
VQQDEw02YTg1NjgxMS02YjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiV7L86Nq2sg9nHYToPKfK1L/SrzP6icwGfKYroCAINF0A1dC/7rSOL3nZcNU
PtoteSFS50cKIoRulUzWM4JQv5J4ZWC7VK1eBCrxRriBspFERC1CIkG55DZBTRGU
kzFG2HeR+IL3LGT2Dmx0T7V0rUfnPeDZjtEt7vCsxS0fE0+8g9o9lv70d2mjacSI
efu7Vyo0XKOjzN41ArvvF6UbdHQi2kF+uu61xSHY7TW/w4ZviQUngKHddEbJtZRh
mjg5HNu/T5mCpcdTMn39lWoLQLmImyihGE4FY+kdJEZ/rbPhUKPRSeaV5cUkLFiz
OUqFOJucus7lMau8NG9/7JSgOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONA5sBY
iiTwgk7PRBQFLbBRdCwrMB8GA1UdIwQYMBaAFAOShCfS9TyPupf8/j/GU6UPFln+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDBCMi9EQUQwMUQzNERB
MzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9BNUtFSjlMMVBJLTZsX3otUDhaVHBROFdX
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E1S0VKOUwxUEktNmxfei1QOFpUcFE4V1dmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDBCMi9EQUQwMUQzNERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9BNUtFSjlMMVBJ
LTZsX3otUDhaVHBROFdXZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaa4hA6u/Gp9LK+8OPL0qqf+iuyin5yn7BStQ+pzpJv7m2yj4IxFpCEyxutbd
87yzBUZl1mhYp3UyLCHroMo52pL8whiHN0Ztw+pfJwWc2ulPKHEUZZXh1aRJg4AF
QQb9MCO/AidCBUMXkAPLaGPsXSqg1CLWa4rymgfW1bKU+PzpKQC3fXZRFWg0BWqj
EPhZOXInuViPF7k16ivtm4zcRQeZtpWemP/qmHjxwwqjXMlz1dKmjiIdsAhiudIe
XYfiFBtYwv1umGA4Fu9SA9KuDCbLRCfcP6r5GLbrxJqf/i7vD3+qWAbUaaMgi8/t
eTGG06DcE2+8TieJVbQV6sMmKw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:40 2026 by rpki-client