
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
File: pNgA2xjHwseXEbNfyLfSF9x9TG4.mft (raw, json)
Hash identifier: 0INBonxbX/U1WYlnk+6yyucWCzlN50+Mj9PtCsmKsQ4=
Subject key identifier: A4:29:6A:66:88:D0:05:8D:70:DE:39:6A:D0:AD:0A:8D:E8:CA:F3:54
Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
Manifest number: 49
Signing time: Tue 11 Aug 2026 07:51:14 +0000
Manifest this update: Tue 11 Aug 2026 07:51:13 +0000
Manifest next update: Tue 18 Aug 2026 07:51:13 +0000
Files and hashes: 1: pNgA2xjHwseXEbNfyLfSF9x9TG4.crl (hash: CXmLhJP1sj8PZFCppsM34riMWmCJyb+TPJ4c7e0tC2E=)
2: E1B6596E447211F188990C259B833773.roa (hash: BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=)
3: NSpCLAyaqxg6bT860Rysuj4wuCY.asa (hash: WOGZUMqAI6V+V+s9p+A2La8WI5R/wW97V+UXiE4SGSA=)
4: B7E7EF7C2C2511F1AC709C159C833773.roa (hash: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 07:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Validity
Not Before: Aug 11 07:51:13 2026 GMT
Not After : Aug 18 07:51:13 2026 GMT
Subject: CN=6a7ad472-d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:84:b5:57:aa:5e:fe:c0:64:f0:6d:70:df:
54:4f:a5:bb:2f:19:e4:f3:e1:42:3a:c2:43:64:e4:
2f:c2:97:5e:75:6b:20:a0:4a:7f:2a:90:5a:c7:8e:
75:3b:26:13:51:1b:78:b4:9c:23:ba:a8:90:81:1c:
3b:f5:21:73:42:9b:6b:5b:69:b6:94:2a:8c:37:44:
a9:0f:32:35:18:0c:29:3f:2e:cb:9d:50:c9:2f:2d:
ef:db:1c:aa:0e:70:af:4e:af:d1:28:0c:6d:3d:21:
5c:dc:86:5c:4d:f5:92:80:84:2f:45:27:ef:52:e9:
08:65:2e:28:37:ca:31:8a:e3:34:39:64:bf:4e:57:
49:9f:ad:ac:01:66:96:85:4b:8b:6f:7c:ae:48:1e:
49:f1:25:0c:26:84:d8:60:a1:3f:83:f7:6e:0f:7a:
20:ef:62:b3:47:c1:38:8b:87:ab:1f:34:9d:f8:92:
72:ac:10:d1:c6:98:d4:46:1c:23:ef:55:73:c5:37:
61:34:a3:b5:4c:ca:0a:4d:24:34:15:4b:87:8d:7a:
40:ea:ab:11:9b:b0:48:d1:d2:91:8a:bf:31:d7:8e:
76:5f:ea:a4:22:3a:21:08:f3:3b:7c:f8:46:a9:cc:
7d:f3:ac:26:ed:3f:84:9f:65:0b:c0:70:70:72:b3:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:6A:66:88:D0:05:8D:70:DE:39:6A:D0:AD:0A:8D:E8:CA:F3:54
X509v3 Authority Key Identifier:
keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:66:9f:4c:f9:7b:33:68:24:ef:d1:86:4b:c3:1a:36:4d:
22:91:46:71:0e:3c:1f:7e:91:c6:2c:4b:84:bd:fe:7b:4d:d2:
33:e8:4c:95:e0:03:cd:a9:06:ba:fc:57:a7:25:a4:65:88:75:
10:85:4a:98:dd:f6:68:b6:42:21:86:b5:ce:15:8b:7d:b1:f1:
ae:dd:c7:31:43:ec:2b:97:26:86:9b:a0:3d:0f:2e:e7:31:3d:
6a:45:61:b4:d9:d7:8c:84:16:be:30:bc:64:a7:16:b3:b6:aa:
60:9d:01:04:9c:94:7a:e7:11:01:fc:82:ba:39:5e:af:c2:16:
ae:e2:a7:33:e5:93:b0:3f:54:7f:0c:ef:67:59:6a:ac:dc:cd:
a7:86:9f:70:98:eb:9c:2c:4b:ac:99:5b:5e:d7:b7:7b:ec:7a:
15:a8:c6:47:0b:44:f1:27:88:4d:56:4f:10:9a:d6:ba:73:9b:
89:11:74:79:bf:69:3b:4c:70:34:c2:ed:fe:25:f0:3c:1c:6e:
11:27:51:b7:48:54:ed:3a:9a:64:d7:86:d1:af:72:76:fc:64:
76:22:38:c6:32:3a:34:5c:67:5f:33:ec:eb:64:5a:6e:80:90:
d6:78:71:60:f4:94:b0:65:15:73:5f:9a:9d:9e:ef:3c:7c:8c:
b5:ab:2c:2b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE
QzdENEM2RTAeFw0yNjA4MTEwNzUxMTNaFw0yNjA4MTgwNzUxMTNaMBgxFjAUBgNV
BAMTDTZhN2FkNDcyLWQ2ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAmoS1V6pe/sBk8G1w31RPpbsvGeTz4UI6wkNk5C/Cl151ayCgSn8qkFrHjnU7
JhNRG3i0nCO6qJCBHDv1IXNCm2tbabaUKow3RKkPMjUYDCk/LsudUMkvLe/bHKoO
cK9Or9EoDG09IVzchlxN9ZKAhC9FJ+9S6QhlLig3yjGK4zQ5ZL9OV0mfrawBZpaF
S4tvfK5IHknxJQwmhNhgoT+D924PeiDvYrNHwTiLh6sfNJ34knKsENHGmNRGHCPv
VXPFN2E0o7VMygpNJDQVS4eNekDqqxGbsEjR0pGKvzHXjnZf6qQiOiEI8zt8+Eap
zH3zrCbtP4SfZQvAcHBys4sPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpClqZojQ
BY1w3jlq0K0KjejK81QwHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy
NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
RjAwLzBCQjFFNEIwMkMyNTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3Nl
WEViTmZ5TGZTRjl4OVRHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAz+2afTPl7M2gk79GGS8MaNk0ikUZxDjwffpHGLEuEvf57TdIz6EyV4APNqQa6
/FenJaRliHUQhUqY3fZotkIhhrXOFYt9sfGu3ccxQ+wrlyaGm6A9Dy7nMT1qRWG0
2deMhBa+MLxkpxaztqpgnQEEnJR65xEB/IK6OV6vwhau4qcz5ZOwP1R/DO9nWWqs
3M2nhp9wmOucLEusmVte17d77HoVqMZHC0TxJ4hNVk8Qmta6c5uJEXR5v2k7THA0
wu3+JfA8HG4RJ1G3SFTtOppk14bRr3J2/GR2IjjGMjo0XGdfM+zrZFpugJDWeHFg
9JSwZRVzX5qdnu88fIy1qywr
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:50:02 2026 by rpki-client