
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: rcv3MgavzEOtf9G64WPTjinLSRKvtoxlR7SH5qtQvUs=
Subject key identifier: 34:B0:35:08:FB:29:F6:22:77:79:1D:F4:36:8C:BD:06:75:62:3A:D4
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 0222
Signing time: Wed 19 Aug 2026 03:23:53 +0000
Manifest this update: Wed 19 Aug 2026 03:23:52 +0000
Manifest next update: Wed 26 Aug 2026 03:23:52 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: x9PVXJ6QTq2Ttih5GohpRdivIQy1oni7VSvQyZ0tvxc=)
2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: BtbKwISc0o5KoYEKwJEZQMnjZhmU53NuiaoFh10O9zg=)
3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: s/cEOGRFX0DoGdQEqZyPvpLQpf664Lfa0cHYTU7MBgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Aug 19 03:23:52 2026 GMT
Not After : Aug 26 03:23:52 2026 GMT
Subject: CN=6a8521c9-9c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:8f:7e:b1:ac:3f:8e:06:55:c4:09:de:69:
cd:57:c3:16:58:34:8a:7f:6c:48:0f:d6:10:99:99:
84:66:d7:43:c0:a2:ad:1b:7c:3a:91:72:96:56:d8:
90:ca:55:e3:48:b9:f1:ec:f2:67:a8:66:7b:28:a8:
ab:c0:35:66:48:bb:50:0e:2d:3a:06:91:4d:90:ce:
be:c4:8c:99:15:6e:bc:ca:3b:e0:d0:f2:e4:c1:56:
13:06:65:b1:a7:bb:ee:32:d2:7b:6e:58:f5:f9:22:
98:b7:47:b5:56:b2:77:6f:0f:af:70:85:aa:c6:12:
3e:58:b9:54:a8:6a:48:b5:2d:33:49:4b:4b:c8:a3:
0c:12:98:f7:55:4f:49:9a:7c:7f:6d:d8:c7:ea:36:
10:58:44:05:ab:d6:45:ca:7a:eb:67:50:c7:48:86:
8f:a8:e5:b5:f3:71:92:f7:8e:eb:86:cc:55:05:da:
f9:b0:08:38:eb:78:c5:1f:2d:47:18:7e:0b:d4:45:
b9:28:7d:85:38:11:12:b5:7f:68:21:13:22:91:db:
a6:7a:9a:e8:d4:8c:e2:53:b8:c9:6f:0a:ad:eb:4f:
53:8e:3f:28:d4:c0:99:8a:10:de:40:42:36:7d:5f:
7d:21:2d:96:d0:64:3a:27:45:98:f5:e8:28:80:8e:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:35:08:FB:29:F6:22:77:79:1D:F4:36:8C:BD:06:75:62:3A:D4
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:cd:16:5c:09:da:42:31:af:0e:94:4a:6a:15:14:36:44:
74:66:2c:74:8c:04:26:73:06:a5:91:5f:4d:dd:f5:0c:a1:4f:
5f:2b:5c:80:01:e1:cb:84:7a:ee:7a:8a:32:f2:1a:7e:d3:dc:
c5:a7:10:54:3f:f5:c6:fc:4d:5d:9d:56:9e:74:56:5b:52:4d:
59:e2:78:ac:1c:d8:af:e4:c7:e4:7d:d0:cb:47:b9:11:46:a7:
65:59:49:78:87:ef:29:25:61:11:d8:ad:40:45:ce:a3:96:37:
8f:58:a7:36:13:64:27:47:b2:61:58:1e:93:66:dc:24:31:99:
15:13:18:c6:eb:e3:f2:38:33:6b:11:c1:dc:8f:d0:57:b5:39:
89:00:10:d9:69:69:4b:7b:3b:e9:10:94:1b:72:71:87:08:e3:
c7:66:d8:3f:4f:bc:eb:e6:9d:ae:31:2f:7a:9f:6a:8d:c9:ff:
bd:84:04:92:1d:c8:e4:89:8f:4f:a1:47:fc:f2:94:28:10:06:
7a:75:6f:93:ce:ff:ad:e8:ea:81:26:a7:e0:70:eb:44:01:40:
8a:80:58:3b:c0:ac:81:ea:15:3a:35:c7:ff:62:72:e2:d5:8f:
2f:8f:c6:95:8e:ed:c5:ee:96:79:50:3a:94:7a:42:4e:08:54:
78:65:03:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE
Q0IyQThBNEIwHhcNMjYwODE5MDMyMzUyWhcNMjYwODI2MDMyMzUyWjAYMRYwFAYD
VQQDEw02YTg1MjFjOS05YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxo2PfrGsP44GVcQJ3mnNV8MWWDSKf2xID9YQmZmEZtdDwKKtG3w6kXKWVtiQ
ylXjSLnx7PJnqGZ7KKirwDVmSLtQDi06BpFNkM6+xIyZFW68yjvg0PLkwVYTBmWx
p7vuMtJ7blj1+SKYt0e1VrJ3bw+vcIWqxhI+WLlUqGpItS0zSUtLyKMMEpj3VU9J
mnx/bdjH6jYQWEQFq9ZFynrrZ1DHSIaPqOW183GS947rhsxVBdr5sAg463jFHy1H
GH4L1EW5KH2FOBEStX9oIRMikdumepro1IziU7jJbwqt609Tjj8o1MCZihDeQEI2
fV99IS2W0GQ6J0WY9egogI64JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDSwNQj7
KfYid3kd9DaMvQZ1YjrUMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE
MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv
RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcMbNFlwJ2kIxrw6USmoVFDZEdGYsdIwEJnMGpZFfTd31DKFPXytcgAHhy4R6
7nqKMvIaftPcxacQVD/1xvxNXZ1WnnRWW1JNWeJ4rBzYr+TH5H3Qy0e5EUanZVlJ
eIfvKSVhEditQEXOo5Y3j1inNhNkJ0eyYVgek2bcJDGZFRMYxuvj8jgzaxHB3I/Q
V7U5iQAQ2WlpS3s76RCUG3Jxhwjjx2bYP0+86+adrjEvep9qjcn/vYQEkh3I5ImP
T6FH/PKUKBAGenVvk87/rejqgSan4HDrRAFAioBYO8CsgeoVOjXH/2Jy4tWPL4/G
lY7txe6WeVA6lHpCTghUeGUD5w==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:38 2026 by rpki-client