
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier: 2c8AabO8CtuYClJAmt95Ez5t9kf5ri2RJbxQETlCQf4=
Subject key identifier: 00:66:4B:D5:54:31:C3:A5:8C:A9:FC:DD:C1:85:29:E8:D3:D8:A0:8D
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number: EC
Signing time: Wed 19 Aug 2026 07:02:54 +0000
Manifest this update: Wed 19 Aug 2026 07:02:54 +0000
Manifest next update: Wed 26 Aug 2026 07:02:54 +0000
Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: 4j89WuLvBbtalJ5lvCmfIJNhR1pM1Ao3wEwiVzYOVaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Validity
Not Before: Aug 19 07:02:54 2026 GMT
Not After : Aug 26 07:02:54 2026 GMT
Subject: CN=6a85551e-a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:1b:cb:4e:7d:77:70:73:2e:0d:8e:78:f7:
ed:9c:5c:6f:6d:20:aa:83:31:19:a6:b4:d4:f4:0d:
fb:17:1d:59:bb:6a:e1:0d:af:f4:45:b1:90:30:e0:
f1:c2:ca:b7:65:a8:b4:aa:25:6d:cf:4f:1f:c0:d6:
c4:54:08:2c:d5:14:6c:3f:45:b1:0b:92:b7:32:19:
ba:63:b0:82:37:4c:e9:f3:f5:7e:74:13:f9:26:0a:
ab:b1:da:67:26:14:77:82:56:7a:6b:74:5e:58:01:
60:08:ff:c3:ab:0e:6d:d5:98:72:93:f9:76:f3:22:
e8:bb:f0:0c:04:ed:c6:6f:93:9a:3f:71:b5:30:6f:
d5:6f:11:67:55:84:6f:ee:ed:26:c9:60:c6:62:07:
ae:3d:e1:20:54:83:ec:51:ee:f4:78:5d:8f:d6:24:
b7:e8:89:8b:94:ad:82:3b:a0:be:d5:0a:2f:2a:7b:
c2:09:44:62:08:c9:22:24:6b:ac:bc:97:b1:3f:e8:
c0:a2:fe:7b:21:ca:db:c2:99:61:c0:61:68:0d:55:
da:51:e3:25:8c:bc:a5:5e:f7:7c:94:79:79:9c:88:
8b:2e:a8:84:7e:f3:61:07:31:67:9d:8a:df:1d:bd:
8c:48:1d:04:e9:76:2a:18:25:93:4a:b3:5c:4c:81:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:4B:D5:54:31:C3:A5:8C:A9:FC:DD:C1:85:29:E8:D3:D8:A0:8D
X509v3 Authority Key Identifier:
keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:b4:3c:59:78:50:17:ce:80:17:20:8f:a2:b9:ef:73:2b:
36:c6:e5:a5:e2:d6:d5:69:9a:cf:f3:6d:44:6d:24:43:3b:0d:
e9:36:1f:10:19:23:0e:27:d1:e3:62:08:e3:c1:5b:3e:a2:cb:
af:a3:2d:94:5c:0a:31:57:45:a9:c6:5f:0b:5a:ee:94:64:28:
9f:12:98:4c:5b:cc:63:16:95:9e:89:54:a1:2c:f2:c4:03:42:
27:cb:8e:17:6b:66:db:67:ed:60:40:2b:a7:6c:4b:ab:3e:06:
75:46:f9:1c:f0:01:7b:17:ad:ed:5b:24:04:15:ce:8b:46:a3:
0b:b0:27:7b:93:aa:e5:32:85:4e:ac:d3:7d:c5:04:eb:5e:9e:
ef:45:56:16:d4:57:52:da:40:41:60:11:23:57:eb:50:a7:9b:
7a:54:4e:df:00:e5:35:da:37:3b:51:cd:8e:c5:34:68:cc:19:
42:7c:5d:0f:53:e3:96:ad:18:c8:2a:ee:37:f4:ea:a2:b1:8e:
69:41:13:98:e5:25:55:10:e8:e7:d8:54:85:94:c4:35:af:a1:
1a:3a:45:70:06:9f:cb:f2:33:a6:55:7d:cd:9a:2c:67:ff:d3:
86:71:44:95:df:23:88:86:ef:45:8c:e6:13:c6:ad:f5:62:3e:
c3:24:74:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQyMDQxMTAvBgNVBAUTKEZBQzQ1NTVGQkUzMUEzODA5NjkwRUUxODc4NUQ3QUJC
RTJBNzI3QTMwHhcNMjYwODE5MDcwMjU0WhcNMjYwODI2MDcwMjU0WjAYMRYwFAYD
VQQDEw02YTg1NTUxZS1hM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAre0by059d3BzLg2OePftnFxvbSCqgzEZprTU9A37Fx1Zu2rhDa/0RbGQMODx
wsq3Zai0qiVtz08fwNbEVAgs1RRsP0WxC5K3Mhm6Y7CCN0zp8/V+dBP5Jgqrsdpn
JhR3glZ6a3ReWAFgCP/Dqw5t1Zhyk/l28yLou/AMBO3Gb5OaP3G1MG/VbxFnVYRv
7u0myWDGYgeuPeEgVIPsUe70eF2P1iS36ImLlK2CO6C+1QovKnvCCURiCMkiJGus
vJexP+jAov57IcrbwplhwGFoDVXaUeMljLylXvd8lHl5nIiLLqiEfvNhBzFnnYrf
Hb2MSB0E6XYqGCWTSrNcTIETTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABmS9VU
McOljKn83cGFKejT2KCNMB8GA1UdIwQYMBaAFPrEVV++MaOAlpDuGHhdervipyej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDIwNC80QzVEMkVERTMw
MDkxMUYwQTBBQTdEM0RDNEY5QUUwMi8tc1JWWDc0eG80Q1drTzRZZUYxNnUtS25K
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1zUlZYNzR4bzRDV2tPNFllRjE2dS1Lbko2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDIwNC80QzVEMkVERTMwMDkxMUYwQTBBQTdEM0RDNEY5QUUwMi8tc1JWWDc0eG80
Q1drTzRZZUYxNnUtS25KNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVa0PFl4UBfOgBcgj6K573MrNsblpeLW1Wmaz/NtRG0kQzsN6TYfEBkjDifR
42II48FbPqLLr6MtlFwKMVdFqcZfC1rulGQonxKYTFvMYxaVnolUoSzyxANCJ8uO
F2tm22ftYEArp2xLqz4GdUb5HPABexet7VskBBXOi0ajC7Ane5Oq5TKFTqzTfcUE
616e70VWFtRXUtpAQWARI1frUKebelRO3wDlNdo3O1HNjsU0aMwZQnxdD1Pjlq0Y
yCruN/TqorGOaUETmOUlVRDo59hUhZTENa+hGjpFcAafy/IzplV9zZosZ//ThnFE
ld8jiIbvRYzmE8at9WI+wyR04A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:04 2026 by rpki-client