
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json)
Hash identifier: nZBarCKHSBl+JVt6i+oF/i+e0pd+ASlgNgEF3M6wCRE=
Subject key identifier: BB:97:24:89:EC:E9:18:E6:D5:4F:30:5A:C2:5E:59:F1:03:79:C5:45
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
Manifest number: 0510
Signing time: Wed 19 Aug 2026 00:03:56 +0000
Manifest this update: Wed 19 Aug 2026 00:03:55 +0000
Manifest next update: Wed 26 Aug 2026 00:03:55 +0000
Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: LVcPfdpodgSfled+rZfQh+HWJbyt2nPkxW7+xrfxKMU=)
2: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=)
3: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=)
4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Aug 19 00:03:55 2026 GMT
Not After : Aug 26 00:03:55 2026 GMT
Subject: CN=6a84f2ec-81b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:2b:0c:d4:68:f0:15:8c:1b:4a:15:a6:15:
33:d2:f6:45:d9:9e:1c:87:78:29:de:97:25:13:38:
42:aa:72:50:71:05:be:55:db:5f:3a:1f:53:54:87:
7e:7c:eb:c8:6f:ba:68:bd:a4:e2:14:95:b8:93:a2:
4a:d9:60:f0:cc:48:f5:90:a8:a7:e0:17:9b:68:b9:
5d:8c:b1:9d:c1:ac:76:88:de:ce:dd:c0:90:3f:91:
42:b6:57:81:30:cc:d9:f7:9c:b1:40:38:5d:2e:ad:
d0:25:cb:83:53:9e:7e:64:77:40:dc:9c:2b:ee:bc:
77:2f:5e:8c:bc:36:df:cd:5d:c8:bf:03:5b:95:81:
f6:3c:00:9c:30:95:06:b1:1a:77:3e:5f:5d:0c:bf:
c5:ce:31:9b:45:de:a0:22:21:49:18:b7:04:77:fc:
cc:92:f6:47:d7:e2:08:e7:fa:56:68:b0:79:77:f0:
e6:25:b2:d9:b5:28:d0:36:9c:99:11:14:1b:54:e5:
9e:4c:28:0a:b1:d8:c5:5a:19:d2:8b:ee:4d:de:76:
d4:0f:09:da:e8:ab:88:be:8e:9b:c2:3d:e4:e5:c9:
82:d8:f9:18:70:1d:7a:3f:28:8d:fe:ce:23:b9:94:
f3:69:fd:66:40:5c:37:6c:80:1b:f8:3b:6d:0a:c0:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:24:89:EC:E9:18:E6:D5:4F:30:5A:C2:5E:59:F1:03:79:C5:45
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b3:f8:63:b1:27:69:14:37:ad:17:1b:45:05:d9:76:05:32:
03:a2:c1:f5:86:62:ab:55:e2:b0:d3:7b:77:73:ac:c9:3b:10:
e8:05:8f:11:d3:9b:e4:87:81:6f:2c:8a:13:8e:b9:73:8d:80:
7d:76:5b:c4:19:59:16:76:19:3e:53:86:56:51:86:69:d5:29:
df:83:b5:97:8f:76:d5:22:e4:44:a5:72:54:06:ba:ac:d4:a7:
e5:23:c3:7b:e3:a9:b7:24:7c:98:3e:71:00:ba:a3:fe:06:29:
e5:7d:60:41:5e:01:c8:bc:6b:bf:4f:6f:d0:20:04:14:e5:f8:
8d:64:de:41:93:b8:eb:f1:95:f8:28:a7:6c:e1:e7:aa:c3:1b:
e5:b0:1e:07:05:64:1b:58:51:1f:ce:de:5f:09:cf:74:ba:6f:
18:4c:2d:4c:f0:17:a0:e4:10:66:4e:93:2e:1b:89:b4:77:03:
45:92:8e:a6:da:70:ea:cd:0f:eb:98:10:1f:d1:6d:3b:b2:82:
9f:3c:e9:fd:fd:d9:eb:42:d0:fd:d4:31:91:fa:ab:69:fd:f1:
ad:dd:21:ab:bc:ef:78:17:18:15:da:f1:ab:19:dc:e9:98:99:
c7:47:76:60:b6:89:77:ce:76:ec:a2:80:97:d3:7a:86:97:df:
4d:f5:50:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy
NkZERjdBMTMwHhcNMjYwODE5MDAwMzU1WhcNMjYwODI2MDAwMzU1WjAYMRYwFAYD
VQQDEw02YTg0ZjJlYy04MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2rQrDNRo8BWMG0oVphUz0vZF2Z4ch3gp3pclEzhCqnJQcQW+VdtfOh9TVId+
fOvIb7povaTiFJW4k6JK2WDwzEj1kKin4BebaLldjLGdwax2iN7O3cCQP5FCtleB
MMzZ95yxQDhdLq3QJcuDU55+ZHdA3Jwr7rx3L16MvDbfzV3IvwNblYH2PACcMJUG
sRp3Pl9dDL/FzjGbRd6gIiFJGLcEd/zMkvZH1+II5/pWaLB5d/DmJbLZtSjQNpyZ
ERQbVOWeTCgKsdjFWhnSi+5N3nbUDwna6KuIvo6bwj3k5cmC2PkYcB16PyiN/s4j
uZTzaf1mQFw3bIAb+DttCsAucwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuXJIns
6Rjm1U8wWsJeWfEDecVFMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF
QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0
YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf7P4Y7EnaRQ3rRcbRQXZdgUyA6LB9YZiq1XisNN7d3OsyTsQ6AWPEdOb5IeB
byyKE465c42AfXZbxBlZFnYZPlOGVlGGadUp34O1l4921SLkRKVyVAa6rNSn5SPD
e+OptyR8mD5xALqj/gYp5X1gQV4ByLxrv09v0CAEFOX4jWTeQZO46/GV+CinbOHn
qsMb5bAeBwVkG1hRH87eXwnPdLpvGEwtTPAXoOQQZk6TLhuJtHcDRZKOptpw6s0P
65gQH9FtO7KCnzzp/f3Z60LQ/dQxkfqraf3xrd0hq7zveBcYFdrxqxnc6ZiZx0d2
YLaJd8527KKAl9N6hpffTfVQBg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:42 2026 by rpki-client