
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: q6Bpfs7SMslA5K8Y0brUyYNHQ+zIH20SIrBeBRr7oY0=
Subject key identifier: 06:87:EC:69:9A:A4:F3:4F:12:C6:CA:4C:B6:D6:38:5E:F5:6F:B9:BA
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 114A
Signing time: Thu 16 Jul 2026 17:45:43 +0000
Manifest this update: Thu 16 Jul 2026 17:45:42 +0000
Manifest next update: Thu 23 Jul 2026 17:45:42 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: POsXLhfuThIMPMFiOLQfQggpoMNeTSuQvYi7Jw0pwls=)
2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=)
3: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Jul 16 17:45:42 2026 GMT
Not After : Jul 23 17:45:42 2026 GMT
Subject: CN=6a5918c7-9492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:db:50:13:cf:9d:36:05:f6:89:e8:d6:32:
4d:de:e2:c7:b8:8e:5e:36:3a:6f:d0:d4:ac:15:dc:
57:bb:c3:88:ce:88:b2:86:27:d0:df:7e:44:46:2c:
34:e7:72:d4:d2:6d:b4:40:d5:ef:26:7b:1e:ed:29:
44:8c:5d:4f:8d:d5:b6:87:ad:12:37:4d:78:a6:15:
6b:c0:95:b9:c6:ff:7a:7a:44:32:a8:dc:4f:b9:85:
95:6d:6f:aa:67:8d:d7:f1:df:02:9a:e1:ee:3b:ab:
c7:2b:f7:ba:3b:02:36:08:a8:2f:e6:4f:52:da:5c:
bb:7f:95:1d:b2:e8:cd:98:ef:ec:7e:65:42:12:dd:
ba:6f:d9:21:50:db:ce:6f:35:5f:e8:98:64:3e:0c:
fb:c8:e7:d5:05:22:10:2b:bb:19:17:36:e2:e7:36:
4b:b9:f6:a3:29:26:e5:8d:7d:9d:58:dd:31:b7:ca:
38:f1:55:f3:3e:53:44:2f:8b:9e:34:bb:68:1d:06:
93:9c:3b:7b:40:0d:8b:b1:28:15:a5:29:f7:d3:2d:
45:00:2b:3b:5f:a5:51:46:61:2e:6c:0a:13:a8:80:
b6:e3:a4:b3:21:eb:42:81:ed:ba:d3:5e:f0:91:de:
78:5d:55:36:00:98:c8:ac:81:23:fe:29:7d:a3:3c:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:EC:69:9A:A4:F3:4F:12:C6:CA:4C:B6:D6:38:5E:F5:6F:B9:BA
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c0:15:c6:73:64:83:3d:1a:e2:47:42:82:20:b2:33:aa:dc:
34:b2:4b:3d:fe:30:e7:d7:ce:fa:52:5d:0e:3b:07:bc:d4:6f:
e2:58:af:01:41:ab:e0:d2:13:d7:2f:57:52:82:68:8d:42:59:
a8:b5:98:07:d0:7c:e8:5a:54:f9:65:f3:09:96:f2:81:96:cd:
2c:63:b1:8a:26:83:5b:61:0e:05:7d:4d:a6:b3:ab:3b:4d:5b:
6e:28:d3:10:d3:c2:47:07:6b:9f:fd:04:05:c3:cd:ac:03:7f:
78:ec:42:8f:65:76:be:74:ec:e7:67:88:a8:b2:a2:71:eb:c2:
11:c3:81:67:8a:16:4e:83:d8:04:ce:c3:79:45:cc:bd:78:9b:
ee:4b:a8:3e:8d:1f:ea:7b:20:4f:51:fa:f3:44:b0:f3:cf:61:
cf:e3:94:15:51:6b:4b:f2:6f:58:a5:bf:6b:9e:03:a9:e9:7c:
51:77:0d:ae:da:dc:ac:c0:ff:8a:7f:5d:fe:2f:81:74:f8:2f:
a7:24:2a:9a:5e:a9:3e:13:bf:65:9f:ee:83:43:ea:c9:c6:d4:
bf:56:1a:ce:99:18:3a:a3:b6:90:ed:12:8f:18:b1:ed:a2:35:
0e:4e:d0:47:87:5b:83:a8:01:65:83:7e:ef:de:6c:e5:d0:d5:
f9:1e:18:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5
ODM4MTQyMjUwHhcNMjYwNzE2MTc0NTQyWhcNMjYwNzIzMTc0NTQyWjAYMRYwFAYD
VQQDEw02YTU5MThjNy05NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruzbUBPPnTYF9ono1jJN3uLHuI5eNjpv0NSsFdxXu8OIzoiyhifQ335ERiw0
53LU0m20QNXvJnse7SlEjF1PjdW2h60SN014phVrwJW5xv96ekQyqNxPuYWVbW+q
Z43X8d8CmuHuO6vHK/e6OwI2CKgv5k9S2ly7f5UdsujNmO/sfmVCEt26b9khUNvO
bzVf6JhkPgz7yOfVBSIQK7sZFzbi5zZLufajKSbljX2dWN0xt8o48VXzPlNEL4ue
NLtoHQaTnDt7QA2LsSgVpSn30y1FACs7X6VRRmEubAoTqIC246SzIetCge26017w
kd54XVU2AJjIrIEj/il9ozztewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaH7Gma
pPNPEsbKTLbWOF71b7m6MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF
QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY
Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt8AVxnNkgz0a4kdCgiCyM6rcNLJLPf4w59fO+lJdDjsHvNRv4livAUGr4NIT
1y9XUoJojUJZqLWYB9B86FpU+WXzCZbygZbNLGOxiiaDW2EOBX1NprOrO01bbijT
ENPCRwdrn/0EBcPNrAN/eOxCj2V2vnTs52eIqLKicevCEcOBZ4oWToPYBM7DeUXM
vXib7kuoPo0f6nsgT1H680Sw889hz+OUFVFrS/JvWKW/a54Dqel8UXcNrtrcrMD/
in9d/i+BdPgvpyQqml6pPhO/ZZ/ug0PqycbUv1YazpkYOqO2kO0Sjxix7aI1Dk7Q
R4dbg6gBZYN+795s5dDV+R4YOA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 13:35:42 2026 by rpki-client