
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json)
Hash identifier: d1JbRBwflWWKS6eAxy0wygE7Yzgmnrbg99134xMc3ls=
Subject key identifier: 0B:EA:66:DF:48:0B:B9:CA:21:61:D3:50:1C:A4:32:D3:69:ED:16:2A
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
Manifest number: 0207
Signing time: Mon 27 Jul 2026 04:39:21 +0000
Manifest this update: Mon 27 Jul 2026 04:39:20 +0000
Manifest next update: Mon 03 Aug 2026 04:39:20 +0000
Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: 9g+syhg0IinKPjuvBFUqBNkDFP+bWDISLd0Q+sJsIgE=)
2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Validity
Not Before: Jul 27 04:39:20 2026 GMT
Not After : Aug 3 04:39:20 2026 GMT
Subject: CN=6a66e0f9-066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:4f:39:5a:f4:f8:57:d6:c4:a7:0e:79:39:
e5:d4:f8:9c:73:90:7a:f8:8f:00:57:ed:ae:2d:6b:
3d:e1:88:f7:90:b3:d3:55:a8:dc:73:03:9a:08:64:
c7:5b:ce:3c:47:45:c2:dc:6b:89:68:11:7d:2e:ea:
24:e8:07:96:fe:8d:60:f8:35:44:7c:41:c7:47:79:
10:4c:61:77:05:b2:45:91:cf:cd:ec:44:1c:1f:cc:
57:05:1f:d4:6b:be:43:cc:09:6b:18:de:66:d2:d7:
6b:2a:57:1d:8b:65:79:6d:a9:2d:b6:c4:11:59:4f:
68:b4:3e:7f:d1:1b:86:8f:f2:8e:c3:67:c2:94:76:
db:e4:3f:6c:e5:b7:58:d7:29:10:10:0e:23:81:17:
58:3b:13:9c:7a:39:57:00:30:32:16:6f:48:61:cf:
6b:f5:9e:1d:37:36:e4:2f:c1:57:52:81:5e:8f:d2:
b9:a8:36:1a:e8:8a:b7:8d:14:8a:0e:78:1a:e8:41:
78:e7:9b:56:e4:26:35:f9:19:d4:0a:46:0d:72:44:
a4:b1:b7:3b:d5:59:0d:74:34:72:aa:e1:8e:f8:02:
12:12:f9:93:71:8d:96:20:99:ff:b1:1b:aa:d8:0e:
70:ed:24:0a:c3:1d:4c:af:db:d5:1c:a2:68:55:12:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:66:DF:48:0B:B9:CA:21:61:D3:50:1C:A4:32:D3:69:ED:16:2A
X509v3 Authority Key Identifier:
keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:01:ca:44:cd:5e:20:92:38:bf:1f:de:e7:50:97:1c:34:
bb:59:cf:a1:db:dc:b8:0b:5e:6f:5f:d5:1f:03:a5:85:e4:aa:
ac:a8:4e:59:c5:89:5a:8f:39:ed:e2:b2:bc:8b:13:b4:21:26:
d8:bc:88:85:73:50:07:02:2c:50:b2:db:8d:0d:9f:8e:39:fe:
f7:a3:5b:5f:07:88:55:ae:97:e3:b0:45:95:28:8d:9c:d4:8e:
2e:6b:68:a4:10:c1:9c:07:dd:ac:30:30:f8:95:47:48:a5:75:
9a:d3:ab:e0:6f:4c:dd:3d:c7:f0:23:80:c5:8c:97:e5:ba:1a:
ab:bc:0f:58:49:ad:88:b0:b9:a6:90:b1:a0:dd:a6:f5:5b:78:
2f:24:cc:3a:4d:ce:6f:ba:7d:c2:f3:ea:07:c7:3c:c5:d6:6f:
17:87:e2:ff:88:0b:69:45:bb:15:ce:a9:63:fd:90:ee:c1:f4:
89:1c:d2:d2:c6:89:6e:fa:a3:dd:9d:0b:0f:02:f5:9e:60:96:
b2:95:82:c3:1b:8c:ae:87:36:d6:6f:af:5b:f4:9f:f3:29:5e:
ae:85:d8:99:cd:71:dd:62:95:e5:9e:71:dd:7c:8f:be:b0:c1:
03:ce:5f:39:6a:b6:bb:b7:d7:34:04:dc:21:08:28:88:3e:60:
a5:f2:73:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx
NUFDMjYxNkIwHhcNMjYwNzI3MDQzOTIwWhcNMjYwODAzMDQzOTIwWjAYMRYwFAYD
VQQDEw02YTY2ZTBmOS0wNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw19POVr0+FfWxKcOeTnl1Picc5B6+I8AV+2uLWs94Yj3kLPTVajccwOaCGTH
W848R0XC3GuJaBF9Luok6AeW/o1g+DVEfEHHR3kQTGF3BbJFkc/N7EQcH8xXBR/U
a75DzAlrGN5m0tdrKlcdi2V5bakttsQRWU9otD5/0RuGj/KOw2fClHbb5D9s5bdY
1ykQEA4jgRdYOxOcejlXADAyFm9IYc9r9Z4dNzbkL8FXUoFej9K5qDYa6Iq3jRSK
Dnga6EF455tW5CY1+RnUCkYNckSksbc71VkNdDRyquGO+AISEvmTcY2WIJn/sRuq
2A5w7SQKwx1Mr9vVHKJoVRJlbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvqZt9I
C7nKIWHTUBykMtNp7RYqMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF
N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh
V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMTMBykTNXiCSOL8f3udQlxw0u1nPodvcuAteb1/VHwOlheSqrKhOWcWJWo85
7eKyvIsTtCEm2LyIhXNQBwIsULLbjQ2fjjn+96NbXweIVa6X47BFlSiNnNSOLmto
pBDBnAfdrDAw+JVHSKV1mtOr4G9M3T3H8COAxYyX5boaq7wPWEmtiLC5ppCxoN2m
9Vt4LyTMOk3Ob7p9wvPqB8c8xdZvF4fi/4gLaUW7Fc6pY/2Q7sH0iRzS0saJbvqj
3Z0LDwL1nmCWspWCwxuMroc21m+vW/Sf8yleroXYmc1x3WKV5Z5x3XyPvrDBA85f
OWq2u7fXNATcIQgoiD5gpfJzuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:48:37 2026 by rpki-client