
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
File: m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft (raw, json)
Hash identifier: X/lisW5KWUh6geXD6ZnBLhQyrscTNFQQMwcz3ZqIJS8=
Subject key identifier: 96:55:A4:A9:54:6F:B4:D9:E2:21:E1:B1:8C:76:F9:D9:DC:57:63:F7
Authority key identifier: 9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
Certificate issuer: /CN=A91BF7D7/serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
Manifest number: 2B
Signing time: Tue 21 Jul 2026 10:37:59 +0000
Manifest this update: Tue 21 Jul 2026 10:37:59 +0000
Manifest next update: Tue 28 Jul 2026 10:37:59 +0000
Files and hashes: 1: m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl (hash: Ure+Gu5j+mBXBrPyTbdePxjc5P6DbHBEpfNXdQ6NjxU=)
2: 86AA0D8E446F11F1B67309509A833773.roa (hash: zXvF741bTXRyFYONSYuKFzrQXEfaqz6hEnhbX238MYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Validity
Not Before: Jul 21 10:37:59 2026 GMT
Not After : Jul 28 10:37:59 2026 GMT
Subject: CN=6a5f4c07-797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:f8:4f:a8:e4:93:64:62:8d:d9:02:cc:4d:
83:da:a5:87:2d:88:37:12:cb:8c:dd:8d:13:be:f7:
b9:63:61:74:3e:92:77:dc:58:f8:e8:c6:90:3f:aa:
4d:d3:5c:0c:87:bf:cf:1f:cd:95:40:d7:d6:be:f6:
84:51:d1:92:1d:0c:7e:f3:ea:cc:1e:63:c0:42:3c:
c4:d5:64:a8:07:6d:0b:f2:b4:6f:03:77:1d:ce:b4:
a3:a1:28:c3:01:44:11:e8:6b:14:ce:bd:b4:ee:6a:
21:5e:80:cc:6d:c6:65:06:ff:7c:13:d4:8c:d7:d9:
01:57:28:4c:cd:8a:95:57:66:e0:5b:65:95:e6:4a:
08:6c:65:12:1c:5a:10:29:73:16:3c:1f:06:33:8a:
b9:2f:06:84:fa:12:00:5b:f6:d2:7f:f4:1e:df:80:
48:dd:75:99:7a:66:7c:78:4a:aa:e5:c5:db:77:c9:
8c:bd:ff:62:4e:65:4c:95:37:25:70:d7:01:18:b5:
d0:51:75:fd:1b:29:ab:2e:97:57:60:64:68:d5:59:
67:fa:1e:11:61:32:b1:77:c7:28:1c:5c:08:5c:a2:
1e:d8:71:5e:57:16:9b:b7:37:ff:f2:12:9c:e7:82:
37:12:7d:38:c5:fc:b9:cc:ec:4a:59:8e:67:64:64:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:A4:A9:54:6F:B4:D9:E2:21:E1:B1:8C:76:F9:D9:DC:57:63:F7
X509v3 Authority Key Identifier:
keyid:9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:5e:fb:ea:b4:61:92:14:aa:d1:9e:7b:60:39:4c:2e:d0:e2:
be:66:9c:f6:27:ad:db:8e:2b:03:d7:64:b9:2e:dd:7b:ef:c0:
2b:1b:e3:ee:0a:72:ed:1d:95:0e:2b:b8:1f:f6:42:55:b0:da:
bd:64:fb:85:eb:23:fc:7a:3c:75:40:a7:07:1d:81:a3:bd:f2:
c3:45:51:b9:3c:87:db:60:ae:8b:07:9e:11:10:7e:df:78:00:
d5:11:60:15:15:83:d9:c4:99:77:6d:60:bd:c8:9f:ad:6e:38:
83:40:5c:56:94:8a:b1:e9:4a:2b:ea:02:cd:18:92:2c:00:11:
ef:06:f8:72:03:f5:a0:0c:75:4a:89:8d:6a:d7:ca:33:7c:b2:
fc:b0:24:66:c1:8b:51:2f:1c:8f:6b:54:c8:57:ff:59:41:b0:
2c:83:1a:47:45:5c:2e:38:70:3f:51:1a:c0:51:98:ac:d6:6e:
b1:87:1a:f3:c0:f5:22:72:a5:32:5a:b7:7e:a0:9c:d9:7b:5a:
c9:2f:6d:aa:ea:6d:0f:0e:ce:33:9b:36:93:1a:b0:a7:26:54:
5c:9b:7f:0e:37:35:36:96:47:5f:37:91:ec:95:49:3f:8b:1d:
6b:18:1e:38:f4:4c:4b:78:98:83:a6:73:05:49:7b:3f:a7:d7:
49:15:46:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjdENzExMC8GA1UEBRMoOUJDNUY5QkIwOEU5MDk2OUFBMUQxRUVGMzlERDZFNDFG
M0IwNzc5MTAeFw0yNjA3MjExMDM3NTlaFw0yNjA3MjgxMDM3NTlaMBgxFjAUBgNV
BAMTDTZhNWY0YzA3LTc5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4OfhPqOSTZGKN2QLMTYPapYctiDcSy4zdjRO+97ljYXQ+knfcWPjoxpA/qk3T
XAyHv88fzZVA19a+9oRR0ZIdDH7z6sweY8BCPMTVZKgHbQvytG8Ddx3OtKOhKMMB
RBHoaxTOvbTuaiFegMxtxmUG/3wT1IzX2QFXKEzNipVXZuBbZZXmSghsZRIcWhAp
cxY8HwYzirkvBoT6EgBb9tJ/9B7fgEjddZl6Znx4Sqrlxdt3yYy9/2JOZUyVNyVw
1wEYtdBRdf0bKasul1dgZGjVWWf6HhFhMrF3xygcXAhcoh7YcV5XFpu3N//yEpzn
gjcSfTjF/LnM7EpZjmdkZHfpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUllWkqVRv
tNniIeGxjHb52dxXY/cwHwYDVR0jBBgwFoAUm8X5uwjpCWmqHR7vOd1uQfOwd5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzY2MDgzRjA2NDQ2
QTExRjFBNTYyMkY2RTk3ODMzNzczL204WDV1d2pwQ1dtcUhSN3ZPZDF1UWZPd2Q1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbThYNXV3anBDV21xSFI3dk9kMXVRZk93ZDVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
N0Q3LzY2MDgzRjA2NDQ2QTExRjFBNTYyMkY2RTk3ODMzNzczL204WDV1d2pwQ1dt
cUhSN3ZPZDF1UWZPd2Q1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCJXvvqtGGSFKrRnntgOUwu0OK+Zpz2J63bjisD12S5Lt1778ArG+PuCnLtHZUO
K7gf9kJVsNq9ZPuF6yP8ejx1QKcHHYGjvfLDRVG5PIfbYK6LB54REH7feADVEWAV
FYPZxJl3bWC9yJ+tbjiDQFxWlIqx6Uor6gLNGJIsABHvBvhyA/WgDHVKiY1q18oz
fLL8sCRmwYtRLxyPa1TIV/9ZQbAsgxpHRVwuOHA/URrAUZis1m6xhxrzwPUicqUy
Wrd+oJzZe1rJL22q6m0PDs4zmzaTGrCnJlRcm38ONzU2lkdfN5HslUk/ix1rGB44
9ExLeJiDpnMFSXs/p9dJFUbO
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:37:33 2026 by rpki-client