
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier: pVPT0/8GxFj4g4WvC2xXNWYejIHq+E+xmq3S+Jztnug=
Subject key identifier: D6:4C:FA:A9:8F:8A:E1:EE:CD:8E:5F:96:39:02:F4:CE:20:6C:6B:9B
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number: 5F
Signing time: Tue 21 Jul 2026 10:08:32 +0000
Manifest this update: Tue 21 Jul 2026 10:08:32 +0000
Manifest next update: Tue 28 Jul 2026 10:08:32 +0000
Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: 3RDef/5dA6KuGls6QY8siarw32fNof4pe1xRLKo2IDQ=)
2: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
3: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Validity
Not Before: Jul 21 10:08:32 2026 GMT
Not After : Jul 28 10:08:32 2026 GMT
Subject: CN=6a5f4520-5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:05:26:eb:ac:59:16:cf:32:88:55:f1:45:
ae:bf:27:54:c4:70:77:94:91:bc:a3:5f:de:fa:fb:
6a:b4:1c:d3:21:0f:9a:0a:42:fc:ea:fa:ae:dd:84:
86:65:e5:c7:0a:88:ef:e7:7c:0b:95:6e:c2:0b:48:
a7:e7:7e:08:06:2c:43:42:6c:2a:67:0f:af:1b:c1:
ae:68:8a:97:4c:70:2f:40:ac:b6:d2:d0:86:3e:95:
64:f4:85:95:77:82:96:5b:86:9b:51:6f:1f:60:f0:
83:a1:70:14:ee:9e:48:79:0f:29:6d:2c:16:7c:fa:
22:5a:4d:37:e2:89:f6:4c:6a:45:22:ba:3e:55:f5:
b5:19:13:da:86:59:49:1f:8d:d6:a4:96:dd:38:99:
61:f9:d1:44:f6:c6:21:c8:61:7d:64:b2:df:71:1e:
7e:90:84:17:07:c6:39:60:2f:7b:33:02:f6:85:49:
5f:f0:25:4b:93:f5:ad:06:4f:74:70:0e:da:c4:f1:
87:48:21:28:9d:4a:ff:0e:9b:c0:1e:a6:ee:df:55:
41:cb:e2:b6:74:f9:0f:af:4c:bc:16:90:8f:7c:a2:
56:5f:11:6a:2f:f1:7b:9f:88:44:95:fd:99:c7:aa:
d5:ee:44:aa:3c:77:46:1f:b5:e9:ce:6c:09:8e:28:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:FA:A9:8F:8A:E1:EE:CD:8E:5F:96:39:02:F4:CE:20:6C:6B:9B
X509v3 Authority Key Identifier:
keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:72:aa:62:6b:0d:81:74:d4:d8:27:72:83:b1:a1:4f:17:ca:
b0:f8:0c:b7:9e:71:b3:f4:fa:f5:0e:58:d6:20:11:a5:b9:30:
09:83:78:41:ed:42:93:bc:9d:3a:87:e4:10:00:cf:2a:b2:f9:
66:e6:3f:43:08:7b:16:fe:d2:8a:6b:57:87:cd:2e:73:ee:af:
9e:50:b6:d6:98:77:aa:6c:16:cf:27:06:d9:e9:18:8e:6c:18:
70:8e:50:e3:59:12:14:c0:c0:af:ac:b3:8c:5e:61:5f:49:1b:
bd:f6:7a:32:80:66:7f:55:cc:31:9f:6a:85:1a:d9:54:9e:5c:
cf:54:ef:d9:f7:2d:88:58:3f:4d:3b:fe:e3:82:f7:8e:13:85:
37:7a:dd:19:a5:34:a3:91:0c:b7:da:3b:04:c4:ac:c9:7b:0f:
f5:3b:df:e4:4c:a2:c1:cb:ae:57:ba:8e:91:9b:3e:44:93:54:
1f:a6:c1:68:8c:a2:f1:5f:7d:96:03:87:c7:78:a5:84:e1:79:
0d:95:3c:10:03:f5:88:1e:0b:f7:f7:d7:b8:eb:fc:41:24:95:
a3:f8:2a:2a:26:c3:38:b8:4d:7f:f5:cc:83:6d:ec:0e:f8:24:
7e:30:d6:e2:fd:7c:dc:59:4a:25:90:c6:88:a0:ac:95:df:ec:
62:5b:2a:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NjM2OTExMC8GA1UEBRMoNDgzODQyODZBRUI5QjYwQkIzNDI4NDdGMkJBNzYxMkY4
NERCNDNCMjAeFw0yNjA3MjExMDA4MzJaFw0yNjA3MjgxMDA4MzJaMBgxFjAUBgNV
BAMTDTZhNWY0NTIwLTU1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFDQUm66xZFs8yiFXxRa6/J1TEcHeUkbyjX976+2q0HNMhD5oKQvzq+q7dhIZl
5ccKiO/nfAuVbsILSKfnfggGLENCbCpnD68bwa5oipdMcC9ArLbS0IY+lWT0hZV3
gpZbhptRbx9g8IOhcBTunkh5DyltLBZ8+iJaTTfiifZMakUiuj5V9bUZE9qGWUkf
jdaklt04mWH50UT2xiHIYX1kst9xHn6QhBcHxjlgL3szAvaFSV/wJUuT9a0GT3Rw
DtrE8YdIISidSv8Om8Aepu7fVUHL4rZ0+Q+vTLwWkI98olZfEWov8XufiESV/ZnH
qtXuRKo8d0YftenObAmOKERLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1kz6qY+K
4e7Njl+WOQL0ziBsa5swHwYDVR0jBBgwFoAUSDhChq65tguzQoR/K6dhL4TbQ7Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzY5Lzc2N0E4RThBMEM3
OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1elFvUl9LNmRoTDRUYlE3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvU0RoQ2hxNjV0Z3V6UW9SX0s2ZGhMNFRiUTdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2
MzY5Lzc2N0E4RThBMEM3OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1
elFvUl9LNmRoTDRUYlE3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCScqpiaw2BdNTYJ3KDsaFPF8qw+Ay3nnGz9Pr1DljWIBGluTAJg3hB7UKTvJ06
h+QQAM8qsvlm5j9DCHsW/tKKa1eHzS5z7q+eULbWmHeqbBbPJwbZ6RiObBhwjlDj
WRIUwMCvrLOMXmFfSRu99noygGZ/Vcwxn2qFGtlUnlzPVO/Z9y2IWD9NO/7jgveO
E4U3et0ZpTSjkQy32jsExKzJew/1O9/kTKLBy65Xuo6Rmz5Ek1QfpsFojKLxX32W
A4fHeKWE4XkNlTwQA/WIHgv399e46/xBJJWj+CoqJsM4uE1/9cyDbewO+CR+MNbi
/XzcWUolkMaIoKyV3+xiWyrR
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:49 2026 by rpki-client