
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier: C9lP5qNXEwEQ7xNBTouVb7t62OIxXAQKAMxeMhjSKpY=
Subject key identifier: B1:32:1B:99:DF:23:A2:BC:F6:B0:A7:FC:FC:7E:E5:49:AD:52:77:D8
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial: 079F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number: 158D
Signing time: Tue 18 Aug 2026 18:34:26 +0000
Manifest this update: Tue 18 Aug 2026 18:34:25 +0000
Manifest next update: Tue 25 Aug 2026 18:34:25 +0000
Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: HNwf4Ez5U1mWgujDv34cOBn7xTFogQsc0dEfrxUM0Oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Validity
Not Before: Aug 18 18:34:25 2026 GMT
Not After : Aug 25 18:34:25 2026 GMT
Subject: CN=6a84a5b2-08f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:1b:00:05:a0:cb:0b:c2:0a:33:57:f5:91:
38:fd:2b:34:90:ff:2c:f3:8d:4f:19:91:7e:f9:7a:
dd:f5:f8:8e:03:02:d1:53:6d:11:00:5c:90:0b:2c:
00:68:b5:f4:67:7e:46:96:52:c4:45:bc:6f:47:25:
64:95:90:30:11:72:70:f1:de:4e:a4:0f:5e:c7:00:
43:87:14:c6:90:80:03:ff:ea:56:01:4f:f1:98:27:
35:30:e1:a5:8b:2c:9d:bd:d4:ed:c2:ae:8d:f7:44:
6a:39:6b:54:91:ed:a8:c8:9b:5b:fc:0a:08:cc:3e:
fa:6c:b1:44:18:84:21:18:e1:ac:2a:96:16:ee:38:
45:e6:99:38:5c:b5:a1:9f:fd:1d:85:fe:7b:a4:90:
e5:8e:2f:96:72:34:54:e5:c9:13:80:60:c8:2e:c8:
93:32:a7:2b:b2:44:70:27:08:16:ef:7e:1b:fe:1d:
28:f0:32:ea:90:88:2f:21:25:ae:a0:6b:5f:e7:4d:
a5:4e:d6:13:f1:cd:3c:7b:22:91:45:fa:9b:4a:85:
d6:89:de:dc:5e:21:8e:44:b6:a0:7a:55:76:a9:0b:
4d:21:d8:cc:2a:4c:58:f4:2a:2e:5b:d0:a0:17:c8:
e5:ec:a0:08:19:94:1a:72:80:cc:d2:eb:8b:68:8a:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:1B:99:DF:23:A2:BC:F6:B0:A7:FC:FC:7E:E5:49:AD:52:77:D8
X509v3 Authority Key Identifier:
keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:a0:14:37:17:06:8f:a9:ce:8d:15:96:53:67:14:66:16:
1e:61:8c:d7:98:8f:b6:93:8a:4c:78:d3:26:a8:3c:d4:e3:f0:
e9:30:8e:ce:91:69:dc:f7:65:c6:d8:b8:1f:3e:fa:23:a8:d3:
de:ea:62:63:b9:bd:44:0f:ed:29:b2:86:60:1a:23:35:97:23:
b5:0a:a0:9a:c1:df:c1:ea:7c:8f:a5:00:88:11:c9:8d:ec:59:
f3:3b:48:38:bb:c8:e3:cc:d5:7d:2a:52:50:55:3a:d2:e2:eb:
0c:4f:f3:07:36:18:54:f6:2b:ce:9b:82:6a:25:19:8a:2e:62:
59:06:e2:15:94:3b:0a:e9:c8:84:4e:f9:45:7d:f9:6f:19:3a:
61:30:5f:ab:75:d4:ce:e3:f9:05:2c:eb:7e:01:68:0c:4a:31:
96:e3:61:e3:38:5b:7d:21:0a:94:b8:75:c3:d7:aa:87:97:96:
08:1b:0a:aa:69:21:c5:46:56:67:48:36:64:0d:46:91:8d:c9:
20:76:81:be:82:90:a4:f9:f6:87:54:6b:49:0d:f6:ae:ec:d6:
2a:f7:46:a3:8b:fa:16:87:2a:9a:17:06:5c:2c:41:d5:d7:ff:
c1:72:1f:d9:54:a1:7b:0d:40:41:ba:53:eb:e9:81:8a:f1:78:
ce:ab:7c:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy
NDREQURDRjIwHhcNMjYwODE4MTgzNDI1WhcNMjYwODI1MTgzNDI1WjAYMRYwFAYD
VQQDEw02YTg0YTViMi0wOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuu8bAAWgywvCCjNX9ZE4/Ss0kP8s841PGZF++Xrd9fiOAwLRU20RAFyQCywA
aLX0Z35GllLERbxvRyVklZAwEXJw8d5OpA9exwBDhxTGkIAD/+pWAU/xmCc1MOGl
iyydvdTtwq6N90RqOWtUke2oyJtb/AoIzD76bLFEGIQhGOGsKpYW7jhF5pk4XLWh
n/0dhf57pJDlji+WcjRU5ckTgGDILsiTMqcrskRwJwgW734b/h0o8DLqkIgvISWu
oGtf502lTtYT8c08eyKRRfqbSoXWid7cXiGORLagelV2qQtNIdjMKkxY9CouW9Cg
F8jl7KAIGZQacoDM0uuLaIoChwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEyG5nf
I6K89rCn/Px+5UmtUnfYMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC
NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT
bUxFbENZTWFUTUFrVGEzUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi3OgFDcXBo+pzo0VllNnFGYWHmGM15iPtpOKTHjTJqg81OPw6TCOzpFp3Pdl
xti4Hz76I6jT3upiY7m9RA/tKbKGYBojNZcjtQqgmsHfwep8j6UAiBHJjexZ8ztI
OLvI48zVfSpSUFU60uLrDE/zBzYYVPYrzpuCaiUZii5iWQbiFZQ7CunIhE75RX35
bxk6YTBfq3XUzuP5BSzrfgFoDEoxluNh4zhbfSEKlLh1w9eqh5eWCBsKqmkhxUZW
Z0g2ZA1GkY3JIHaBvoKQpPn2h1RrSQ32ruzWKvdGo4v6FocqmhcGXCxB1df/wXIf
2VShew1AQbpT6+mBivF4zqt8YQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:53 2026 by rpki-client