
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json)
Hash identifier: UfZp/8Ohknsc4x/BA2FBSnhnnrJH4GmmsdcaXR+268k=
Subject key identifier: FC:25:7C:01:D3:3D:B7:7A:B9:05:DF:CB:92:86:2A:52:14:8C:35:D7
Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
Manifest number: 0416
Signing time: Wed 19 Aug 2026 00:43:07 +0000
Manifest this update: Wed 19 Aug 2026 00:43:06 +0000
Manifest next update: Wed 26 Aug 2026 00:43:06 +0000
Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: gZatMxRhrtTnuLgjDztvbZOaNbernp5bLw0Z1fyB1Io=)
2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: aYot4qw3P8YllWeiZniDWXUCdYeGzmeGo07W9mBLGtQ=)
3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: 0a9pPFK9l1fog9k4rdhxyffTfCfNNylKzOV1up6yd0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl
rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66
Validity
Not Before: Aug 19 00:43:06 2026 GMT
Not After : Aug 26 00:43:06 2026 GMT
Subject: CN=6a84fc1b-983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:27:a4:0a:c2:36:06:4b:d1:68:a0:d9:ea:
24:fb:1c:ec:3a:a2:4f:fd:05:ac:7d:a3:8c:9d:d2:
36:65:bc:0d:66:d4:b0:67:e2:c1:cb:5d:7d:98:ea:
7a:8e:1a:03:14:03:52:11:7b:fc:01:e0:20:57:25:
fc:ad:4c:63:00:b3:a2:a6:e4:cf:e2:eb:67:27:80:
d2:b7:35:6b:f2:e4:9a:b2:34:b1:6c:0b:f1:85:9c:
f8:72:27:50:48:f0:51:0c:3f:89:c6:51:06:d4:c5:
08:1f:d6:ad:09:d8:64:48:3c:2d:1b:01:03:17:93:
ba:d5:cc:4c:f2:0f:d5:6c:1f:89:ee:70:78:50:74:
f8:d9:55:d6:f6:13:27:07:d9:26:58:52:fa:85:9d:
20:60:d9:80:21:3a:71:61:9e:49:1b:c9:4f:74:b4:
24:70:8c:d8:db:88:d2:4f:5b:99:f4:2c:f8:c1:ff:
d0:d6:b0:5b:ff:bc:c9:51:ab:01:b7:2d:3b:81:c0:
03:58:a4:22:ff:7a:b4:83:aa:ba:c8:66:ac:1b:89:
5b:6e:75:d9:aa:a1:f1:61:66:85:05:ae:a3:8b:09:
50:5b:e5:1f:fb:cf:91:22:d9:8a:b9:7e:2f:a5:52:
31:b4:13:00:64:f3:6e:d1:86:18:b1:ab:86:d2:51:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:7C:01:D3:3D:B7:7A:B9:05:DF:CB:92:86:2A:52:14:8C:35:D7
X509v3 Authority Key Identifier:
keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:18:62:64:a5:bf:f0:f3:28:20:61:a2:ca:8d:32:92:60:
c0:e6:ef:48:97:5f:5a:0e:a4:62:aa:ff:6d:3d:15:c1:9f:a1:
f7:f3:f4:5b:84:7e:80:07:6f:12:8d:7d:cb:c0:4d:d1:31:5b:
1d:76:c2:c9:1a:cb:b6:69:b1:86:18:38:02:a2:05:57:e7:ac:
4f:d6:a7:eb:54:87:10:de:39:c0:00:7e:ea:c3:5e:b8:84:9f:
c7:84:49:59:33:70:83:25:41:bb:e8:5d:d0:86:dc:f5:84:79:
51:d5:02:79:72:42:f6:27:73:61:45:f9:75:aa:c5:d9:00:5b:
99:c4:3a:79:ca:80:6d:42:a7:c9:3d:e6:b7:02:c9:c6:75:8d:
58:b5:48:e5:4a:4f:61:f7:41:72:53:f8:b3:c8:ec:3f:2b:49:
e3:05:b8:be:43:7e:71:dc:c4:72:40:d6:dd:76:14:67:82:59:
47:2c:5b:18:90:d0:88:ce:2c:0f:77:ef:82:be:a0:4b:b5:5c:
ba:ac:e9:11:8b:13:18:45:50:ed:d7:90:18:12:5c:b1:ed:11:
ac:8b:5a:0f:75:b2:d3:5d:42:9d:f2:83:13:b2:6d:f3:0c:1e:
76:65:b0:9c:60:ae:fe:4e:ec:95:4d:5e:08:b1:6f:d7:f4:db:
0f:82:99:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC
OTQ2MDRFNjYwHhcNMjYwODE5MDA0MzA2WhcNMjYwODI2MDA0MzA2WjAYMRYwFAYD
VQQDEw02YTg0ZmMxYi05ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCInpArCNgZL0Wig2eok+xzsOqJP/QWsfaOMndI2ZbwNZtSwZ+LBy119mOp6
jhoDFANSEXv8AeAgVyX8rUxjALOipuTP4utnJ4DStzVr8uSasjSxbAvxhZz4cidQ
SPBRDD+JxlEG1MUIH9atCdhkSDwtGwEDF5O61cxM8g/VbB+J7nB4UHT42VXW9hMn
B9kmWFL6hZ0gYNmAITpxYZ5JG8lPdLQkcIzY24jST1uZ9Cz4wf/Q1rBb/7zJUasB
ty07gcADWKQi/3q0g6q6yGasG4lbbnXZqqHxYWaFBa6jiwlQW+Uf+8+RItmKuX4v
pVIxtBMAZPNu0YYYsauG0lG4TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwlfAHT
Pbd6uQXfy5KGKlIUjDXXMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2
MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG
QTktdFdVdzhiZW01UmdUbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWMwYYmSlv/DzKCBhosqNMpJgwObvSJdfWg6kYqr/bT0VwZ+h9/P0W4R+gAdv
Eo19y8BN0TFbHXbCyRrLtmmxhhg4AqIFV+esT9an61SHEN45wAB+6sNeuISfx4RJ
WTNwgyVBu+hd0Ibc9YR5UdUCeXJC9idzYUX5darF2QBbmcQ6ecqAbUKnyT3mtwLJ
xnWNWLVI5UpPYfdBclP4s8jsPytJ4wW4vkN+cdzEckDW3XYUZ4JZRyxbGJDQiM4s
D3fvgr6gS7VcuqzpEYsTGEVQ7deQGBJcse0RrItaD3Wy011CnfKDE7Jt8wwedmWw
nGCu/k7slU1eCLFv1/TbD4KZcA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:31 2026 by rpki-client