
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier: LF87THlXCRmhay09RuFre/zDHwIRfoDzigrpY7HPCCQ=
Subject key identifier: 66:CF:ED:E3:7B:13:EB:25:68:FD:02:C1:B6:7A:8C:F8:87:D8:CF:8D
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number: 74
Signing time: Mon 29 Jun 2026 08:30:42 +0000
Manifest this update: Mon 29 Jun 2026 08:30:41 +0000
Manifest next update: Mon 06 Jul 2026 08:30:41 +0000
Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: emRjbDgslDiSijWTKQ7QeRHEj/nFwPdRMfhQMCqFC6c=)
2: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
3: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
4: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Jun 29 08:30:41 2026 GMT
Not After : Jul 6 08:30:41 2026 GMT
Subject: CN=6a422d32-b854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:d0:8a:ad:a0:6d:63:27:99:5f:2e:c7:33:
5d:78:d3:25:a7:47:74:ff:20:ce:68:16:54:3e:19:
28:e3:35:5e:68:04:17:2a:a9:06:49:2a:8f:dc:4c:
95:f6:07:f3:1e:d0:95:d4:32:fd:39:a4:49:ed:9f:
22:ed:83:3c:b6:2d:f3:20:1c:4c:f8:14:2b:17:71:
84:ea:37:50:38:b3:1f:5e:6c:4f:d6:8d:73:bf:83:
ea:75:e4:78:7f:f2:19:49:4a:3c:57:b4:50:05:cd:
48:45:c4:dd:00:7c:cd:32:02:85:ee:e5:58:da:4c:
4f:e0:f5:93:82:c6:06:02:3f:4a:1d:48:af:5b:29:
6e:41:65:4c:1d:63:52:ab:f3:29:14:2a:91:1c:72:
37:ec:29:1b:02:22:9a:0d:fc:05:6c:80:91:97:10:
e4:7c:04:6d:65:ec:e1:cc:8c:f1:96:81:50:0e:e3:
fd:b8:79:ca:fb:66:7c:75:0d:c8:5d:66:f1:a5:5e:
5c:4d:01:bb:fb:32:f3:2f:b6:b9:56:98:10:df:39:
22:af:78:6b:95:cd:c8:28:e8:fe:96:5b:ab:34:c4:
93:4c:38:cc:12:97:b9:73:78:d3:d0:28:65:3f:93:
d0:1f:6e:f3:02:f6:d4:fe:b2:b6:fd:74:a8:ca:f7:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:ED:E3:7B:13:EB:25:68:FD:02:C1:B6:7A:8C:F8:87:D8:CF:8D
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:03:1b:89:c7:25:53:17:36:c0:43:11:3e:cc:ff:d9:e6:
9e:d2:55:f9:f7:bf:11:9d:97:2f:9d:98:68:bc:ec:84:45:00:
c4:ee:3a:1c:fc:ac:f7:0c:08:fc:8e:f8:69:ee:f2:10:da:03:
4b:0f:94:ae:1a:f8:fc:57:08:d1:8b:f9:87:e4:28:a2:7d:3d:
8e:49:c7:6f:8b:2e:26:d8:a9:65:73:f1:92:15:57:4d:1e:d5:
4d:a7:14:ea:2c:26:dd:6f:2b:5f:9e:51:f1:a4:d3:9b:f3:7a:
71:ac:56:aa:cd:99:56:8b:7e:59:2c:f4:7e:7b:9a:08:bb:ec:
9a:95:6e:04:76:d3:6a:72:16:64:e8:02:ab:50:60:aa:64:78:
31:66:e1:9e:54:b4:40:1c:eb:f7:36:25:49:c3:83:27:95:2f:
4c:68:25:75:7c:cb:b3:7a:5d:00:ef:55:5c:84:46:69:54:76:
09:09:3d:9f:84:dc:42:af:04:52:8b:79:06:38:be:d3:f7:11:
2e:41:a9:91:06:57:78:bc:9c:03:8b:fc:b1:b3:59:ba:51:92:
d8:d9:d2:52:be:4e:86:c9:ed:99:e8:15:ab:7d:8f:f6:75:8c:
80:84:21:3d:ed:4c:da:fd:6f:46:6b:bf:d4:43:27:a9:83:20:
c5:1b:7c:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
Mjk4QzExMC8GA1UEBRMoNUZDMjZCOTI4REVEQzkwQzM5MUNDNEY1MjlCQTdCOUUw
OUE1MDQ2RTAeFw0yNjA2MjkwODMwNDFaFw0yNjA3MDYwODMwNDFaMBgxFjAUBgNV
BAMTDTZhNDIyZDMyLWI4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQYtCKraBtYyeZXy7HM1140yWnR3T/IM5oFlQ+GSjjNV5oBBcqqQZJKo/cTJX2
B/Me0JXUMv05pEntnyLtgzy2LfMgHEz4FCsXcYTqN1A4sx9ebE/WjXO/g+p15Hh/
8hlJSjxXtFAFzUhFxN0AfM0yAoXu5VjaTE/g9ZOCxgYCP0odSK9bKW5BZUwdY1Kr
8ykUKpEccjfsKRsCIpoN/AVsgJGXEOR8BG1l7OHMjPGWgVAO4/24ecr7Znx1Dchd
ZvGlXlxNAbv7MvMvtrlWmBDfOSKveGuVzcgo6P6WW6s0xJNMOMwSl7lzeNPQKGU/
k9AfbvMC9tT+srb9dKjK98r/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZs/t43sT
6yVo/QLBtnqM+IfYz40wHwYDVR0jBBgwFoAUX8Jrko3tyQw5HMT1Kbp7ngmlBG4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOThDL0FDNUU4QUMyQzZE
MDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3NUhNVDFLYnA3bmdtbEJH
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWDhKcmtvM3R5UXc1SE1UMUticDduZ21sQkc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
OThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyL1g4SnJrbzN0eVF3
NUhNVDFLYnA3bmdtbEJHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAoYgMbicclUxc2wEMRPsz/2eae0lX5978RnZcvnZhovOyERQDE7joc/Kz3DAj8
jvhp7vIQ2gNLD5SuGvj8VwjRi/mH5CiifT2OScdviy4m2Kllc/GSFVdNHtVNpxTq
LCbdbytfnlHxpNOb83pxrFaqzZlWi35ZLPR+e5oIu+yalW4EdtNqchZk6AKrUGCq
ZHgxZuGeVLRAHOv3NiVJw4MnlS9MaCV1fMuzel0A71VchEZpVHYJCT2fhNxCrwRS
i3kGOL7T9xEuQamRBld4vJwDi/yxs1m6UZLY2dJSvk6Gye2Z6BWrfY/2dYyAhCE9
7Uza/W9Ga7/UQyepgyDFG3yH
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:28 2026 by rpki-client