
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: 2t8Lhfb8owIWUAUGeZuo90RRJeDrkOsuCvzHuUwmcHw=
Subject key identifier: D8:DF:F5:2D:F4:C8:67:5C:18:2D:CC:24:99:8C:32:64:3E:21:3A:44
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: 8F
Signing time: Fri 17 Jul 2026 08:48:39 +0000
Manifest this update: Fri 17 Jul 2026 08:48:38 +0000
Manifest next update: Fri 24 Jul 2026 08:48:38 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: gkkufZxzLpjeIAP9BFVAaW4xpIoV2Ur8wXk9InDejfE=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Jul 17 08:48:38 2026 GMT
Not After : Jul 24 08:48:38 2026 GMT
Subject: CN=6a59ec67-cc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:ae:95:ce:57:86:0a:36:41:a9:34:ea:cb:
76:8b:20:6a:96:87:30:c9:63:c3:17:e4:ac:67:1a:
96:3d:ac:1d:4e:7e:ae:d6:48:f9:a9:bb:6b:87:a9:
1c:98:08:34:fa:4b:05:cd:1f:22:52:51:dd:2d:0e:
d5:30:41:96:cb:12:94:be:11:42:19:4a:f5:d4:71:
29:57:89:1c:83:ca:73:52:fe:c2:6d:ef:1a:b9:f2:
b9:21:7b:6d:05:2c:7c:de:0e:31:09:79:15:12:8c:
c2:ca:d9:ad:e0:a0:99:86:db:67:e2:a0:b4:71:77:
50:1f:82:b2:1f:6d:c8:bd:c4:4e:e8:e4:bf:44:3d:
ba:c0:08:59:0e:b7:7c:06:56:ff:69:75:1f:c4:6e:
25:d7:22:a9:cd:0f:b7:ff:8a:b5:b0:a9:44:f5:7f:
95:7b:f9:bc:8e:06:15:b7:07:29:90:46:b7:43:43:
4d:fc:8d:5c:5f:99:d2:6c:19:96:9e:51:d9:e4:5f:
1d:ff:a9:b5:56:fe:58:b5:09:fa:4f:44:fb:dd:a8:
86:34:25:cc:2f:bc:6b:c3:09:55:62:b2:db:36:3b:
cf:93:4f:cf:c5:bf:3a:d1:ba:c3:46:28:90:95:de:
35:51:4e:a6:75:93:db:a1:b4:63:e3:18:65:24:31:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:F5:2D:F4:C8:67:5C:18:2D:CC:24:99:8C:32:64:3E:21:3A:44
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:25:ad:d8:79:8f:c6:99:f8:2b:b0:3f:43:49:dd:18:7b:
1f:4f:c7:05:f2:06:02:79:0c:c9:5a:bc:96:ef:60:35:09:11:
02:ec:c9:b0:07:8e:a2:95:6f:aa:91:72:da:fe:c2:25:ce:45:
b8:01:d8:b3:55:be:61:c8:8e:07:98:d0:1d:c6:63:9b:13:f7:
99:8f:ae:f1:b9:e5:3f:7b:bb:5a:30:9e:b6:b0:1f:14:90:81:
67:0f:e4:0e:a8:41:e7:7e:55:ca:68:b2:10:94:29:ca:b1:c1:
bd:4a:cb:0b:85:bd:8e:86:83:ce:b2:54:fc:d0:57:e2:70:9b:
f5:44:62:a3:5b:28:e8:92:03:4f:81:3f:70:b9:dd:97:c4:63:
7c:94:1b:07:df:6c:c2:76:a6:61:5d:c9:7f:86:e6:03:e6:a9:
ba:84:c7:f6:63:90:9b:a7:59:31:78:01:c8:f3:4c:89:8d:ba:
3e:9f:95:4c:86:3d:2e:85:e4:a6:65:69:89:87:4b:b1:ac:96:
66:79:02:fa:2b:e1:a7:23:39:aa:d6:3d:c8:87:93:89:67:ec:
b4:0d:c2:32:35:38:95:c6:70:0e:7f:da:ab:f5:c9:d1:3a:9b:
99:bc:e8:0e:ee:19:d6:16:5d:cd:4a:02:2b:f6:9f:95:a9:f4:
3f:6c:c8:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZFQzIxMTAvBgNVBAUTKDc0NUQ1NzdGNUI4RTdENEY4REI0OUE4REI5QUNCMTNG
QzI1QUEyMzMwHhcNMjYwNzE3MDg0ODM4WhcNMjYwNzI0MDg0ODM4WjAYMRYwFAYD
VQQDEw02YTU5ZWM2Ny1jYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzGulc5Xhgo2Qak06st2iyBqlocwyWPDF+SsZxqWPawdTn6u1kj5qbtrh6kc
mAg0+ksFzR8iUlHdLQ7VMEGWyxKUvhFCGUr11HEpV4kcg8pzUv7Cbe8aufK5IXtt
BSx83g4xCXkVEozCytmt4KCZhttn4qC0cXdQH4KyH23IvcRO6OS/RD26wAhZDrd8
Blb/aXUfxG4l1yKpzQ+3/4q1sKlE9X+Ve/m8jgYVtwcpkEa3Q0NN/I1cX5nSbBmW
nlHZ5F8d/6m1Vv5YtQn6T0T73aiGNCXML7xrwwlVYrLbNjvPk0/Pxb860brDRiiQ
ld41UU6mdZPbobRj4xhlJDGVsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjf9S30
yGdcGC3MJJmMMmQ+ITpEMB8GA1UdIwQYMBaAFHRdV39bjn1PjbSajbmssT/CWqIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkVDMi9CODJBOUExQ0I4
N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZVLU50SnFOdWF5eFA4SmFv
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9qTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkVDMi9CODJBOUExQ0I4N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZV
LU50SnFOdWF5eFA4SmFvak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhtQlrdh5j8aZ+CuwP0NJ3Rh7H0/HBfIGAnkMyVq8lu9gNQkRAuzJsAeOopVv
qpFy2v7CJc5FuAHYs1W+YciOB5jQHcZjmxP3mY+u8bnlP3u7WjCetrAfFJCBZw/k
DqhB535VymiyEJQpyrHBvUrLC4W9joaDzrJU/NBX4nCb9URio1so6JIDT4E/cLnd
l8RjfJQbB99swnamYV3Jf4bmA+apuoTH9mOQm6dZMXgByPNMiY26Pp+VTIY9LoXk
pmVpiYdLsayWZnkC+ivhpyM5qtY9yIeTiWfstA3CMjU4lcZwDn/aq/XJ0Tqbmbzo
Du4Z1hZdzUoCK/aflan0P2zI6g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:09 2026 by rpki-client