
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier: LKysut0xwH+8z9mO3cLjxlWAU/aENU0gEsunn8X68n4=
Subject key identifier: 5B:24:F4:0B:D6:7C:8A:FE:FE:F3:E1:42:E6:5A:8D:7E:60:04:AE:8C
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 0990
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number: 154A
Signing time: Thu 16 Jul 2026 19:07:04 +0000
Manifest this update: Thu 16 Jul 2026 19:07:03 +0000
Manifest next update: Thu 23 Jul 2026 19:07:03 +0000
Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: R7hwT42dcyK+WiFBsYfGWljmy88qdY3lXiWmvXVBGFA=)
2: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: QSEFrzyHThxfsuxeqGmvUKb+41WIgQBL8rivqG2479w=)
3: A856E7621BBC11F182440C5A133D8C67.roa (hash: UIVYsay7KQVs5dzePoAdcxAtnbz74xRDDqNirYjgjg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 19:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2448 (0x990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Jul 16 19:07:03 2026 GMT
Not After : Jul 23 19:07:03 2026 GMT
Subject: CN=6a592bd8-e541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:07:9a:ce:d0:fd:bc:69:d3:70:14:29:ab:
38:f4:9b:1a:81:9d:01:b7:8f:ce:9d:94:6d:ef:e1:
87:f1:e9:2b:34:66:dd:1a:75:3a:ea:3c:98:68:84:
68:27:34:b4:35:98:74:f2:3e:0b:ec:eb:2f:4c:b4:
d1:cf:22:a6:f1:14:15:86:ae:c1:a5:89:94:d6:36:
33:ab:12:8b:63:32:49:63:60:44:d2:47:5e:89:ea:
85:93:27:08:c1:ff:16:17:78:e7:a2:dd:b3:af:e8:
4c:fe:dd:18:cb:91:a6:c7:17:da:a6:ca:37:30:80:
e5:3b:37:80:90:0b:04:b0:d1:22:47:11:65:39:70:
92:24:87:7f:8f:e4:db:02:c9:e4:bf:7f:25:2a:eb:
91:86:36:b0:5c:d6:e0:0d:a6:e2:4c:1f:9b:f2:d4:
9c:f4:fe:87:0a:56:39:93:59:44:01:fe:26:7d:f6:
d5:79:fc:95:e2:c9:90:83:5f:eb:1e:23:e9:af:00:
43:c1:2f:c5:a6:5c:f8:3e:66:4c:b5:75:de:d2:86:
bc:7b:28:7e:6c:98:af:aa:ca:8d:3d:8b:00:51:09:
88:05:c8:83:15:85:c0:8c:25:5b:06:ea:46:02:4c:
8a:93:1a:6b:41:68:8d:1c:a5:86:1e:58:9a:c7:87:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:24:F4:0B:D6:7C:8A:FE:FE:F3:E1:42:E6:5A:8D:7E:60:04:AE:8C
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:15:d6:3b:17:2e:be:16:04:94:b2:28:43:18:03:d4:c6:d2:
27:72:69:14:5d:48:d1:18:dd:2b:9a:6f:39:fa:9b:fc:10:df:
55:5d:23:3b:ad:83:30:0d:79:b0:b0:ff:1e:3a:ae:37:8b:79:
2f:cb:28:f7:e6:3f:50:9c:68:19:aa:56:bb:59:02:7b:ac:a0:
f7:eb:67:a9:07:00:9a:41:18:63:67:44:08:6e:f6:bf:33:df:
1b:37:d0:3c:54:d6:25:20:b5:6b:ae:68:87:54:38:c7:e4:60:
42:4e:8d:e5:0d:f6:62:eb:b9:b7:d0:a5:20:e8:45:ee:6f:a2:
4e:64:51:d0:05:de:15:39:82:39:7d:6b:c0:07:9d:dc:f9:66:
e0:77:37:dd:65:05:c6:26:9e:ee:52:43:da:26:dc:31:0c:bb:
9b:74:4e:1d:25:c9:da:04:6c:19:18:5d:af:b8:9d:94:8c:e8:
07:46:6d:3e:38:0a:ee:c0:74:f2:9a:a9:fc:79:c2:d1:63:36:
5b:28:96:05:62:cf:23:3b:8e:5b:77:c2:33:b7:0b:e6:71:c0:
a2:00:fc:79:1f:f3:0b:ef:28:64:1c:86:00:e3:43:5f:63:d3:
5f:cd:4b:ae:60:cd:7f:dd:79:ff:f9:d4:61:40:ab:af:1f:ba:
aa:ae:95:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4
NUM5OTM4REEwHhcNMjYwNzE2MTkwNzAzWhcNMjYwNzIzMTkwNzAzWjAYMRYwFAYD
VQQDEw02YTU5MmJkOC1lNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6woHms7Q/bxp03AUKas49JsagZ0Bt4/OnZRt7+GH8ekrNGbdGnU66jyYaIRo
JzS0NZh08j4L7OsvTLTRzyKm8RQVhq7BpYmU1jYzqxKLYzJJY2BE0kdeieqFkycI
wf8WF3jnot2zr+hM/t0Yy5Gmxxfapso3MIDlOzeAkAsEsNEiRxFlOXCSJId/j+Tb
Asnkv38lKuuRhjawXNbgDabiTB+b8tSc9P6HClY5k1lEAf4mffbVefyV4smQg1/r
HiPprwBDwS/Fplz4PmZMtXXe0oa8eyh+bJivqsqNPYsAUQmIBciDFYXAjCVbBupG
AkyKkxprQWiNHKWGHliax4fe/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsk9AvW
fIr+/vPhQuZajX5gBK6MMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx
RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli
dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuBXWOxcuvhYElLIoQxgD1MbSJ3JpFF1I0RjdK5pvOfqb/BDfVV0jO62DMA15
sLD/HjquN4t5L8so9+Y/UJxoGapWu1kCe6yg9+tnqQcAmkEYY2dECG72vzPfGzfQ
PFTWJSC1a65oh1Q4x+RgQk6N5Q32Yuu5t9ClIOhF7m+iTmRR0AXeFTmCOX1rwAed
3Plm4Hc33WUFxiae7lJD2ibcMQy7m3ROHSXJ2gRsGRhdr7idlIzoB0ZtPjgK7sB0
8pqp/HnC0WM2WyiWBWLPIzuOW3fCM7cL5nHAogD8eR/zC+8oZByGAONDX2PTX81L
rmDNf915//nUYUCrrx+6qq6VUg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:17:34 2026 by rpki-client