
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json)
Hash identifier: N1RxC/M+nTE6fgN0Tv1ubHSXyb4QHDl8EzXQeW25v4E=
Subject key identifier: 1C:CE:BF:5F:2B:C0:45:06:16:D9:74:EE:DA:C7:83:E0:31:AB:B0:5E
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
Manifest number: 022B
Signing time: Wed 19 Aug 2026 03:18:50 +0000
Manifest this update: Wed 19 Aug 2026 03:18:50 +0000
Manifest next update: Wed 26 Aug 2026 03:18:50 +0000
Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: 1j4oPXO69M37KL8Ewx5UtiSY0Zeo06nmVamhWPejJmw=)
2: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: J1ocAT03CSbRpODB0RRAKFgJGRB6ade57V3/kum0InU=)
3: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: mhjbk4CN2+rPJc7zvgeaO7bX0mHh9qBVgN/f8ar/U0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Validity
Not Before: Aug 19 03:18:50 2026 GMT
Not After : Aug 26 03:18:50 2026 GMT
Subject: CN=6a85209a-2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:c7:2c:9b:5f:5d:2e:a2:67:df:47:4a:f5:
fe:cb:08:b9:04:76:01:22:ec:6a:c6:be:09:2d:04:
1d:fe:e0:17:96:76:53:40:82:cd:63:7f:5c:fe:79:
e3:68:91:8e:1d:25:02:e4:45:91:34:53:3e:ee:dd:
8e:27:48:b7:e3:e6:94:75:e9:bf:b1:f4:e2:92:3d:
04:37:19:8c:e8:0d:2a:32:04:93:ff:a9:dd:e6:0c:
79:0e:a7:a3:2b:f4:ac:b9:31:20:3c:f7:51:b4:59:
78:96:e1:2c:c5:37:9c:5f:71:8c:61:82:30:d7:c2:
20:9f:db:06:ac:e1:42:9d:45:2f:f5:d8:f7:a9:bf:
88:6a:54:ab:0a:35:16:05:82:3f:20:29:cf:a2:d2:
6e:10:2d:6b:98:a1:e6:09:c1:b0:6c:0f:28:fd:ea:
b6:fd:94:76:36:58:55:d9:e0:5e:c7:97:b0:2c:4a:
0c:20:ce:ff:a8:5b:d6:96:6b:97:9c:4d:44:46:3c:
67:2e:de:a0:3d:a6:9c:24:c4:ba:df:d3:d8:b8:2e:
df:5a:31:6f:ee:53:c1:82:2d:de:4a:7a:22:3b:bb:
5e:af:04:68:f2:1b:99:f9:0b:45:9f:d7:41:4a:7e:
bc:02:85:66:05:55:4b:05:52:e0:4e:22:e0:59:c4:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:BF:5F:2B:C0:45:06:16:D9:74:EE:DA:C7:83:E0:31:AB:B0:5E
X509v3 Authority Key Identifier:
keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:ff:22:0e:62:af:3d:f0:0e:bb:d1:06:fb:5e:4d:b7:da:
8e:9b:80:88:69:05:ef:63:c2:d0:e3:07:94:85:7d:dc:2b:dd:
5f:66:69:4a:a3:8d:c5:a5:bf:d1:4b:c9:c9:d2:96:ff:47:d2:
9f:db:78:43:10:78:2a:e6:fb:48:46:26:10:df:cd:80:45:f0:
e7:a1:9e:19:43:90:dd:49:57:46:1c:68:26:87:2e:7c:2a:1f:
ab:d8:de:e7:9a:9f:05:05:5a:c4:90:f9:48:98:13:dd:31:b4:
b3:3e:37:41:e5:b2:23:f7:f2:1b:2b:1c:be:4a:ed:4a:e5:06:
55:38:60:0e:14:52:6c:2d:ff:2a:69:3c:e9:0e:11:eb:40:b9:
f3:eb:c7:33:64:30:67:e1:88:1b:63:56:e7:9d:65:0a:1a:17:
14:3d:dd:ee:bf:39:2b:7a:88:11:67:4d:5e:b9:63:2a:33:b7:
31:20:3f:cb:ca:f4:3b:cf:34:fd:ef:a0:16:37:e8:e5:a9:82:
41:e8:fa:24:11:24:99:89:3c:9c:ce:ee:29:c5:95:ba:6a:6b:
6f:f4:0c:53:2d:aa:99:f8:7f:55:d6:70:49:e1:84:6d:1c:69:
00:0c:c3:82:87:e0:0e:8d:4e:86:d2:c8:e0:eb:e0:1b:7f:bb:
71:c6:28:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2
QzU0NEQ2RDMwHhcNMjYwODE5MDMxODUwWhcNMjYwODI2MDMxODUwWjAYMRYwFAYD
VQQDEw02YTg1MjA5YS0yMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwO/HLJtfXS6iZ99HSvX+ywi5BHYBIuxqxr4JLQQd/uAXlnZTQILNY39c/nnj
aJGOHSUC5EWRNFM+7t2OJ0i34+aUdem/sfTikj0ENxmM6A0qMgST/6nd5gx5Dqej
K/SsuTEgPPdRtFl4luEsxTecX3GMYYIw18Ign9sGrOFCnUUv9dj3qb+IalSrCjUW
BYI/ICnPotJuEC1rmKHmCcGwbA8o/eq2/ZR2NlhV2eBex5ewLEoMIM7/qFvWlmuX
nE1ERjxnLt6gPaacJMS639PYuC7fWjFv7lPBgi3eSnoiO7terwRo8huZ+QtFn9dB
Sn68AoVmBVVLBVLgTiLgWcQPxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzOv18r
wEUGFtl07trHg+Axq7BeMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy
QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1
OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYHX/Ig5irz3wDrvRBvteTbfajpuAiGkF72PC0OMHlIV93CvdX2ZpSqONxaW/
0UvJydKW/0fSn9t4QxB4Kub7SEYmEN/NgEXw56GeGUOQ3UlXRhxoJocufCofq9je
55qfBQVaxJD5SJgT3TG0sz43QeWyI/fyGyscvkrtSuUGVThgDhRSbC3/Kmk86Q4R
60C58+vHM2QwZ+GIG2NW551lChoXFD3d7r85K3qIEWdNXrljKjO3MSA/y8r0O880
/e+gFjfo5amCQej6JBEkmYk8nM7uKcWVumprb/QMUy2qmfh/VdZwSeGEbRxpAAzD
gofgDo1OhtLI4OvgG3+7ccYo9w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:45 2026 by rpki-client