
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier: r+nMNAUrbCmPtd/PqCkQWttM9e+/9WFlKUvJJEx6DAI=
Subject key identifier: 05:67:4D:96:08:DD:DE:83:5B:A2:8D:A9:CF:AA:D9:AD:F9:25:60:EC
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number: 85
Signing time: Fri 17 Jul 2026 08:49:29 +0000
Manifest this update: Fri 17 Jul 2026 08:49:28 +0000
Manifest next update: Fri 24 Jul 2026 08:49:28 +0000
Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: f08k09jbT14Rve8WWGxqPaooNd6BXLs33KBHs7mPB0s=)
2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Validity
Not Before: Jul 17 08:49:28 2026 GMT
Not After : Jul 24 08:49:28 2026 GMT
Subject: CN=6a59ec99-86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:1b:b4:93:78:7f:d7:e0:63:d1:e9:2f:34:
50:79:5e:a3:11:b4:a0:f1:bf:86:ef:78:99:63:04:
9f:bf:b7:ba:43:16:4a:2b:b8:68:28:50:ee:94:63:
13:dd:a2:6e:37:31:28:d6:99:dc:a8:3d:64:6b:a5:
e0:4f:3c:1d:f8:b8:24:12:fc:99:ac:1f:5e:d1:ab:
71:6b:0a:10:03:ef:ae:82:0c:53:0d:9e:bd:0f:28:
f3:d8:57:0f:21:e0:e8:d0:e4:b3:d7:6a:a9:03:4d:
b9:61:42:15:dc:fe:40:f3:8c:79:fa:26:31:26:ab:
c8:22:58:f6:84:6f:ca:64:99:6c:04:9a:b7:51:f0:
28:b7:8e:b9:b2:e0:e7:d9:1f:d6:10:e7:49:0d:55:
da:bc:28:4e:2f:6f:c9:7a:b5:6f:7a:f7:50:72:1c:
92:7a:54:8a:dc:63:15:5a:31:18:18:b7:b0:21:a2:
b7:bc:8c:dd:b8:76:19:0b:99:7f:24:1a:73:e6:e5:
fe:5b:b2:3e:8a:3c:a4:40:28:31:3e:4b:96:76:8e:
d5:8d:aa:3d:ba:51:6f:c2:92:97:d0:ab:17:15:cf:
ec:01:45:9d:a8:21:b6:1e:2b:45:cb:b4:ca:57:cf:
2e:58:b9:8c:e8:31:53:d6:a9:9e:4a:d9:ff:cb:2d:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:4D:96:08:DD:DE:83:5B:A2:8D:A9:CF:AA:D9:AD:F9:25:60:EC
X509v3 Authority Key Identifier:
keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:6a:05:95:33:5a:3a:89:83:86:e9:46:e0:e7:a6:4d:48:
60:8f:d0:6d:c3:26:37:1f:0c:39:fa:f9:58:6a:ba:92:24:44:
44:69:6d:b8:a7:bb:5a:8a:ac:17:62:17:99:43:87:0e:e2:cf:
98:f4:07:66:64:e6:f7:fd:01:a6:5b:d1:fc:f7:0f:1c:8d:c0:
3e:32:f9:3c:d4:01:a8:1e:9b:b4:47:54:4a:81:02:db:0e:b6:
26:90:5b:fe:66:e0:ed:77:10:fa:fa:40:40:19:b8:16:52:73:
00:ad:59:df:9d:89:5a:f4:38:6c:f7:0f:b1:f3:94:a7:d7:fd:
87:05:ac:c9:2e:75:5f:54:cd:76:b3:04:76:a3:89:b1:b4:96:
22:bf:56:7c:7c:90:5a:a5:64:d7:a8:12:b8:d5:f1:b0:2d:5b:
1e:16:5e:f9:ea:74:b1:20:07:4a:d5:f2:6a:0d:3d:a1:d5:cc:
e0:81:a9:79:54:e4:c7:e0:68:cf:e9:90:d9:0a:65:b1:0f:19:
5e:67:46:8d:97:8f:7a:29:e4:3c:80:83:2c:b4:41:03:94:12:
2c:64:13:cd:8f:bb:92:4e:fd:bf:2f:e9:f9:7b:9f:b6:f9:d6:
1d:72:ca:09:67:10:1d:b9:19:cb:a3:51:91:14:a3:45:83:e1:
db:a6:ec:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDRDQxMTAvBgNVBAUTKDdDNzg5NTk2RDVBMzdCMDQ1QzlEOUYxM0E0MjAwQzFF
ODc0NzdGNzQwHhcNMjYwNzE3MDg0OTI4WhcNMjYwNzI0MDg0OTI4WjAYMRYwFAYD
VQQDEw02YTU5ZWM5OS04NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcEbtJN4f9fgY9HpLzRQeV6jEbSg8b+G73iZYwSfv7e6QxZKK7hoKFDulGMT
3aJuNzEo1pncqD1ka6XgTzwd+LgkEvyZrB9e0atxawoQA++uggxTDZ69Dyjz2FcP
IeDo0OSz12qpA025YUIV3P5A84x5+iYxJqvIIlj2hG/KZJlsBJq3UfAot465suDn
2R/WEOdJDVXavChOL2/JerVvevdQchySelSK3GMVWjEYGLewIaK3vIzduHYZC5l/
JBpz5uX+W7I+ijykQCgxPkuWdo7Vjao9ulFvwpKX0KsXFc/sAUWdqCG2HitFy7TK
V88uWLmM6DFT1qmeStn/yy1nuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVnTZYI
3d6DW6KNqc+q2a35JWDsMB8GA1UdIwQYMBaAFHx4lZbVo3sEXJ2fE6QgDB6HR390
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNENC9ENDdGNDkwQ0I5
NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9mSGlWbHRXamV3UmNuWjhUcENBTUhvZEhm
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNENC9ENDdGNDkwQ0I5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9mSGlWbHRXamV3
UmNuWjhUcENBTUhvZEhmM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXNlqBZUzWjqJg4bpRuDnpk1IYI/QbcMmNx8MOfr5WGq6kiRERGltuKe7Woqs
F2IXmUOHDuLPmPQHZmTm9/0BplvR/PcPHI3APjL5PNQBqB6btEdUSoEC2w62JpBb
/mbg7XcQ+vpAQBm4FlJzAK1Z352JWvQ4bPcPsfOUp9f9hwWsyS51X1TNdrMEdqOJ
sbSWIr9WfHyQWqVk16gSuNXxsC1bHhZe+ep0sSAHStXyag09odXM4IGpeVTkx+Bo
z+mQ2QplsQ8ZXmdGjZePeinkPICDLLRBA5QSLGQTzY+7kk79vy/p+XuftvnWHXLK
CWcQHbkZy6NRkRSjRYPh26bsHQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:11 2026 by rpki-client