
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier: sh4WpipbxVZ0DWnvvfWOy++B/zlHL6GPMIUc5HBHryI=
Subject key identifier: 47:EB:F1:A3:F4:F9:63:5D:63:0F:CD:62:54:F5:39:B2:78:96:99:83
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number: F5
Signing time: Wed 19 Aug 2026 07:00:49 +0000
Manifest this update: Wed 19 Aug 2026 07:00:48 +0000
Manifest next update: Wed 26 Aug 2026 07:00:48 +0000
Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: +Swsv/ynC18l7MlEbIiQUKLY1Q2pcpFRvbkjeG4xf9s=)
2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Validity
Not Before: Aug 19 07:00:48 2026 GMT
Not After : Aug 26 07:00:48 2026 GMT
Subject: CN=6a8554a0-a1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:c2:0d:e2:f3:fc:e2:8c:b0:8f:de:1c:a2:
90:5d:82:0e:a3:3b:39:31:35:b6:5b:88:fe:4f:97:
dd:12:4f:e4:27:3a:45:84:39:4b:04:5b:28:35:fe:
14:c3:3c:50:2f:9c:82:a7:51:3a:d6:84:70:43:01:
b9:9f:a5:ec:0b:ba:a4:7e:74:82:5c:fd:90:69:be:
25:e4:4b:d8:34:7f:57:ed:2b:8f:7d:ea:95:16:3d:
2a:7b:31:6c:17:e2:e6:47:ba:91:fe:96:2c:39:4c:
c0:b6:79:2f:13:8e:b6:37:f7:9f:24:fc:55:50:c5:
33:96:0f:dc:87:07:e9:65:46:94:27:15:ab:c5:c8:
24:d9:52:c1:86:d1:5c:1a:21:9e:04:99:ca:fb:73:
a4:1f:e8:38:aa:b6:69:eb:ce:ba:02:b0:67:9d:af:
12:07:05:77:8b:43:64:f8:d3:e9:e6:f8:23:63:fc:
5a:8c:0b:1f:03:d1:e9:b8:80:dd:af:8f:48:38:71:
91:e5:bb:72:42:6e:f1:dd:7d:26:e2:9b:f2:0f:bd:
8b:f2:0c:d9:b8:1d:39:80:fb:ae:74:94:7d:bc:58:
5e:02:ce:ae:9d:0c:09:36:81:76:1e:89:b9:86:d9:
6d:31:fc:2d:ef:80:77:22:c0:00:6d:9e:65:b5:a5:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:F1:A3:F4:F9:63:5D:63:0F:CD:62:54:F5:39:B2:78:96:99:83
X509v3 Authority Key Identifier:
keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fe:69:c4:9c:d2:ae:92:51:ba:41:14:da:78:35:f6:6a:8d:
e3:49:58:a9:4c:02:74:e8:14:86:11:b9:44:4e:ee:8c:6a:16:
9d:31:38:b4:ce:ed:c3:31:f3:f4:49:b3:d6:37:d5:d0:53:7d:
dc:46:d5:62:d0:2b:6d:c4:11:4d:f5:0a:ee:54:91:08:f3:e2:
6e:ee:06:4b:b9:26:09:8d:b2:95:77:24:65:3e:79:13:67:d9:
fe:88:5a:d7:45:81:70:11:37:c9:40:2a:20:3e:fe:f4:20:61:
a6:ac:7b:2b:98:68:51:63:e9:18:2a:11:e4:75:47:30:63:4c:
a2:3e:ab:26:62:ad:ca:23:66:9d:fe:2b:4c:ec:83:d9:79:6b:
5b:0e:5a:db:61:bc:bd:42:5c:ce:bf:ed:06:8f:b3:38:f2:b0:
ce:f2:16:87:2d:c3:93:eb:48:1e:50:a7:67:28:fa:5a:c2:cb:
bf:0f:05:0d:bb:ff:0e:3b:21:eb:62:a7:50:ad:5c:e7:d6:db:
6e:64:db:31:72:20:06:19:58:3e:fd:e0:c6:b0:06:cb:87:3a:
ec:2d:c0:90:4c:3c:d8:f6:e9:99:d2:9e:ca:e0:a9:10:ec:b2:
7c:09:8e:5e:fb:85:87:a3:8c:e5:05:03:42:5d:9e:94:78:8c:
cc:10:f0:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFBMjQxMTAvBgNVBAUTKEVENzJDNzE2QkMwQUY1OUQ0MzA2MzIzRkJBQTQ3NEJE
NEI0REU3MUMwHhcNMjYwODE5MDcwMDQ4WhcNMjYwODI2MDcwMDQ4WjAYMRYwFAYD
VQQDEw02YTg1NTRhMC1hMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlzCDeLz/OKMsI/eHKKQXYIOozs5MTW2W4j+T5fdEk/kJzpFhDlLBFsoNf4U
wzxQL5yCp1E61oRwQwG5n6XsC7qkfnSCXP2Qab4l5EvYNH9X7SuPfeqVFj0qezFs
F+LmR7qR/pYsOUzAtnkvE462N/efJPxVUMUzlg/chwfpZUaUJxWrxcgk2VLBhtFc
GiGeBJnK+3OkH+g4qrZp6866ArBnna8SBwV3i0Nk+NPp5vgjY/xajAsfA9HpuIDd
r49IOHGR5btyQm7x3X0m4pvyD72L8gzZuB05gPuudJR9vFheAs6unQwJNoF2Hom5
htltMfwt74B3IsAAbZ5ltaU5WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfr8aP0
+WNdYw/NYlT1ObJ4lpmDMB8GA1UdIwQYMBaAFO1yxxa8CvWdQwYyP7qkdL1LTecc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUEyNC8xNzM5QzM1QTJC
QzkxMUYwQjhCRTNGM0JDNEY5QUUwMi83WExIRnJ3SzlaMURCaklfdXFSMHZVdE41
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdYTEhGcndLOVoxREJqSV91cVIwdlV0TjV4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUEyNC8xNzM5QzM1QTJCQzkxMUYwQjhCRTNGM0JDNEY5QUUwMi83WExIRnJ3Szla
MURCaklfdXFSMHZVdE41eHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfv5pxJzSrpJRukEU2ng19mqN40lYqUwCdOgUhhG5RE7ujGoWnTE4tM7twzHz
9Emz1jfV0FN93EbVYtArbcQRTfUK7lSRCPPibu4GS7kmCY2ylXckZT55E2fZ/oha
10WBcBE3yUAqID7+9CBhpqx7K5hoUWPpGCoR5HVHMGNMoj6rJmKtyiNmnf4rTOyD
2XlrWw5a22G8vUJczr/tBo+zOPKwzvIWhy3Dk+tIHlCnZyj6WsLLvw8FDbv/Djsh
62KnUK1c59bbbmTbMXIgBhlYPv3gxrAGy4c67C3AkEw82PbpmdKeyuCpEOyyfAmO
XvuFh6OM5QUDQl2elHiMzBDwJw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:31 2026 by rpki-client