
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: iagzjg77CamaS0BI5E8vfBGS4udCKIwVlmv/DgBVpdU=
Subject key identifier: 89:9F:8D:F9:DE:AF:7D:01:F4:17:97:DD:36:F5:61:FC:07:FA:AC:2D
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 0348
Signing time: Mon 27 Jul 2026 02:15:16 +0000
Manifest this update: Mon 27 Jul 2026 02:15:16 +0000
Manifest next update: Mon 03 Aug 2026 02:15:16 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: yFn233pRwwbH+tQkBddCwZydhI6Xcn7nh7s6B1/IIOA=)
2: 3AkIRjJC4OnfoPP0vLOoArWe2KU.asa (hash: SkpGxKdp6L3KmQeLofZ6dxJnAyujCnet35AXK9oGw+s=)
3: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: XbDlXjkT6B/0pKZNJe/T0DRFMQ69K8sgLZCTuOzQfWs=)
4: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: wevBG0wx/RR5cJLa7ldnPoK/rlGc4xXyBB/69btBp6o=)
5: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: 7sE/4U476Hc/mgcr6agMQHrBpEwfsvBVQ9XVXdE0iPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Jul 27 02:15:16 2026 GMT
Not After : Aug 3 02:15:16 2026 GMT
Subject: CN=6a66bf34-e993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:28:79:de:22:2f:ae:97:2f:3d:ce:46:5f:
47:77:df:70:b4:8a:91:e2:44:dc:46:15:05:99:37:
42:02:65:4c:04:e3:4f:e4:c9:c6:97:88:a3:a0:ad:
12:1e:ca:d3:2a:92:cf:5b:2a:72:f8:02:13:2e:14:
74:72:06:fa:99:d0:0b:86:3c:76:5e:76:4e:25:13:
3b:80:40:93:34:ee:b1:c1:b7:2b:87:92:a3:86:dc:
b4:47:70:08:f0:40:04:8f:d8:20:b5:8b:48:ea:2b:
27:6b:40:d2:48:aa:5c:ec:27:24:0e:6d:a0:39:d2:
22:1c:b3:f7:15:6c:91:df:84:12:6a:d3:b5:49:25:
ec:9e:8a:ce:ef:0e:f6:23:d0:a9:f9:2f:69:1c:96:
0d:4a:91:fd:ca:11:a4:f4:90:90:ad:53:f2:e2:48:
e8:4b:22:d7:69:44:ca:8f:a7:14:fa:ab:3b:90:26:
51:47:42:01:c8:50:72:eb:af:32:58:c1:7a:1f:de:
d4:e8:c1:e2:79:22:74:e1:e3:77:d6:98:57:8d:59:
6d:c9:ef:a9:b2:9d:b9:dc:9d:87:3d:df:69:30:95:
b5:73:ea:22:7f:02:7a:dd:7c:45:a1:41:35:87:88:
63:9d:cc:b9:c0:4c:96:24:c2:c8:2d:4f:f4:5e:f5:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:8D:F9:DE:AF:7D:01:F4:17:97:DD:36:F5:61:FC:07:FA:AC:2D
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f8:40:5e:ff:39:2c:68:c1:e8:13:0d:a2:26:3a:64:24:38:
94:a7:29:cd:05:96:dd:8b:7a:14:7f:8f:71:72:65:de:64:cf:
20:cf:4e:88:6a:2e:9f:46:42:5f:63:18:87:5d:bd:66:e5:fd:
2a:f0:0a:c9:2f:a6:2c:f2:3d:9a:3c:5e:4f:18:af:ec:ce:d0:
70:d3:d9:60:1c:05:ad:ae:ef:f2:68:40:87:09:9c:53:92:c7:
bc:9d:0a:31:ad:b4:40:94:a3:e8:19:b9:e3:5e:ed:8d:a2:aa:
cd:4d:9e:e4:8b:6d:a4:1a:45:2e:71:c4:fd:ac:e3:c6:34:b3:
92:e6:0b:36:74:68:66:61:d6:af:73:d4:4f:fc:ee:92:50:31:
29:20:2d:b5:8c:39:e7:d5:9c:91:c8:8e:6d:eb:0d:9b:a3:a8:
13:62:26:b0:61:3c:e2:d2:84:3f:6c:0c:e3:db:24:7f:de:a5:
48:4e:a4:52:42:2f:c5:62:96:d4:f6:58:f5:22:1f:36:fc:b0:
c9:fc:8d:40:08:b9:f9:57:6c:f7:21:fd:d0:76:dc:7c:15:5b:
5f:5a:c0:95:91:b0:0d:50:a8:e1:b5:32:4b:1f:68:d5:6d:0b:
54:7d:e8:01:f1:2f:ed:76:fc:44:0c:61:50:76:88:73:4f:1d:
3e:24:93:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF
QUIzQ0I5RkIwHhcNMjYwNzI3MDIxNTE2WhcNMjYwODAzMDIxNTE2WjAYMRYwFAYD
VQQDEw02YTY2YmYzNC1lOTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjr8oed4iL66XLz3ORl9Hd99wtIqR4kTcRhUFmTdCAmVMBONP5MnGl4ijoK0S
HsrTKpLPWypy+AITLhR0cgb6mdALhjx2XnZOJRM7gECTNO6xwbcrh5Kjhty0R3AI
8EAEj9ggtYtI6isna0DSSKpc7CckDm2gOdIiHLP3FWyR34QSatO1SSXsnorO7w72
I9Cp+S9pHJYNSpH9yhGk9JCQrVPy4kjoSyLXaUTKj6cU+qs7kCZRR0IByFBy668y
WMF6H97U6MHieSJ04eN31phXjVltye+psp253J2HPd9pMJW1c+oifwJ63XxFoUE1
h4hjncy5wEyWJMLILU/0XvUlMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImfjfne
r30B9BeX3Tb1YfwH+qwtMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE
MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t
TlZ5bzJPa1FDenpxczh1ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArfhAXv85LGjB6BMNoiY6ZCQ4lKcpzQWW3Yt6FH+PcXJl3mTPIM9OiGoun0ZC
X2MYh129ZuX9KvAKyS+mLPI9mjxeTxiv7M7QcNPZYBwFra7v8mhAhwmcU5LHvJ0K
Ma20QJSj6Bm5417tjaKqzU2e5IttpBpFLnHE/azjxjSzkuYLNnRoZmHWr3PUT/zu
klAxKSAttYw559WckciObesNm6OoE2ImsGE84tKEP2wM49skf96lSE6kUkIvxWKW
1PZY9SIfNvywyfyNQAi5+Vds9yH90HbcfBVbX1rAlZGwDVCo4bUySx9o1W0LVH3o
AfEv7Xb8RAxhUHaIc08dPiST8g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 07:37:39 2026 by rpki-client