
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: 2ECbAKLF3hfk2oAdPIukurkqOfuZB2HE+sv0K9EeRHk=
Subject key identifier: 43:41:15:FC:BF:FE:4F:34:47:D1:91:3F:39:7F:2A:A9:39:F2:54:1A
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 07B4
Signing time: Mon 20 Jul 2026 22:01:04 +0000
Manifest this update: Mon 20 Jul 2026 22:01:04 +0000
Manifest next update: Mon 27 Jul 2026 22:01:04 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: ooDjZVhflBxMHE9G8Gno5Na0WPJMEltRIGpUx8jFyKU=)
2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: vR+q/zKzwJ0cS0EI5NmaW8vlP008OwFN/8qpLRoeRrk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Jul 20 22:01:04 2026 GMT
Not After : Jul 27 22:01:04 2026 GMT
Subject: CN=6a5e9aa0-7024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:44:90:8c:2f:a3:b4:c0:4c:ee:ef:db:38:
19:86:da:a0:20:74:71:8c:ed:e8:d6:9d:98:ee:b4:
be:4b:62:2c:c7:22:06:b0:61:98:62:c7:e8:97:59:
1d:45:d9:85:34:4e:27:a2:1c:b9:04:df:f7:ba:af:
d7:90:4d:73:ad:8f:63:76:7e:82:56:4b:f5:50:c0:
5f:30:0b:9a:45:df:26:5c:2b:4f:dc:25:46:f7:16:
a5:28:62:80:70:c3:7c:24:d6:3b:e0:8d:86:80:82:
50:63:6e:22:58:9a:56:82:6f:e4:c8:a3:b5:d6:4d:
55:63:46:4d:eb:2c:2b:13:fb:6d:1f:b2:c5:d0:ef:
9d:aa:07:81:2e:62:ad:56:4f:7d:0f:53:cc:0e:59:
1b:83:5c:92:d0:cd:66:f9:3c:6c:7e:32:9f:e8:8a:
90:92:74:bf:d4:0d:77:7d:aa:a2:32:15:8d:15:b7:
d6:b5:22:7e:e5:0e:1c:a2:3e:ed:ea:3e:47:7c:18:
05:c1:a8:64:0a:e9:7e:c0:dd:2d:89:d4:75:a6:d5:
5e:99:c2:0c:1a:85:1c:69:e9:3f:2c:4f:e9:5d:75:
32:39:53:9a:53:a7:87:9a:a9:17:67:e6:ce:99:97:
1b:9a:e3:cd:0a:5b:af:9b:27:bf:1b:cb:6a:73:6e:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:15:FC:BF:FE:4F:34:47:D1:91:3F:39:7F:2A:A9:39:F2:54:1A
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f5:29:91:c2:48:b3:47:62:b9:7f:50:cc:89:c6:a7:c2:ae:
6e:1c:a8:cd:d8:db:fb:cf:28:c3:69:5c:a1:1d:ba:06:a1:d3:
50:92:6f:05:31:7c:d9:63:14:a1:e3:d4:6b:b0:a5:9f:ef:f0:
c9:fc:58:74:68:7b:14:bb:2e:8a:8a:f1:f0:62:0f:5f:ea:24:
45:3d:fc:e5:4b:19:fc:67:ab:7d:dd:9f:ae:80:16:a8:0b:3f:
53:94:da:17:e2:42:3e:3a:f9:75:c1:b1:d4:89:9b:57:2c:9f:
0a:86:bd:0e:66:02:70:6f:44:cc:5d:6c:b8:f6:66:c5:e4:d5:
0f:cd:92:ff:16:46:4b:44:fa:d1:4b:41:c4:66:cc:46:d1:63:
4c:ed:ac:f9:39:d0:4d:27:8f:76:82:a6:e7:e0:6a:f6:11:f0:
31:a0:e8:98:25:c1:9e:17:ae:ed:ee:be:b0:9c:d1:13:af:33:
16:44:7e:bc:d4:f6:8b:de:73:8d:31:c9:62:d8:4b:4a:bd:93:
dd:47:91:d7:9d:ac:26:74:87:47:1e:78:f7:86:c3:b4:64:c6:
9c:65:34:a1:3a:6a:38:3b:07:9b:f7:52:16:0f:f0:1a:e3:54:
c3:5c:80:b3:9b:22:75:a5:c5:02:72:11:51:7f:8d:fb:3a:64:
24:01:3a:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE
MDBERjRENzAwHhcNMjYwNzIwMjIwMTA0WhcNMjYwNzI3MjIwMTA0WjAYMRYwFAYD
VQQDEw02YTVlOWFhMC03MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0kVEkIwvo7TATO7v2zgZhtqgIHRxjO3o1p2Y7rS+S2IsxyIGsGGYYsfol1kd
RdmFNE4nohy5BN/3uq/XkE1zrY9jdn6CVkv1UMBfMAuaRd8mXCtP3CVG9xalKGKA
cMN8JNY74I2GgIJQY24iWJpWgm/kyKO11k1VY0ZN6ywrE/ttH7LF0O+dqgeBLmKt
Vk99D1PMDlkbg1yS0M1m+TxsfjKf6IqQknS/1A13faqiMhWNFbfWtSJ+5Q4coj7t
6j5HfBgFwahkCul+wN0tidR1ptVemcIMGoUcaek/LE/pXXUyOVOaU6eHmqkXZ+bO
mZcbmuPNCluvmye/G8tqc24bYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENBFfy/
/k80R9GRPzl/Kqk58lQaMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy
NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS
ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmfUpkcJIs0diuX9QzInGp8Kubhyozdjb+88ow2lcoR26BqHTUJJvBTF82WMU
oePUa7Cln+/wyfxYdGh7FLsuiorx8GIPX+okRT385UsZ/Gerfd2froAWqAs/U5Ta
F+JCPjr5dcGx1ImbVyyfCoa9DmYCcG9EzF1suPZmxeTVD82S/xZGS0T60UtBxGbM
RtFjTO2s+TnQTSePdoKm5+Bq9hHwMaDomCXBnheu7e6+sJzRE68zFkR+vNT2i95z
jTHJYthLSr2T3UeR152sJnSHRx5494bDtGTGnGU0oTpqODsHm/dSFg/wGuNUw1yA
s5sidaXFAnIRUX+N+zpkJAE6oQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:48:57 2026 by rpki-client