
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: QHfMCMq2yJEDTjqm+0McshkqXgwcFzDsNvWk/chJ1hE=
Subject key identifier: 43:2E:3A:75:BA:86:26:54:67:8F:75:C4:FE:8D:92:FB:CE:21:69:BE
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 90
Signing time: Wed 19 Aug 2026 08:09:24 +0000
Manifest this update: Wed 19 Aug 2026 08:09:24 +0000
Manifest next update: Wed 26 Aug 2026 08:09:24 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: 6MvEHiXQI5xesKq4fIO/OlYuVGE0YtjJU9U0+5ftfj0=)
2: 0853E998C45711F080167D38C4F9AE02.roa (hash: 9wGGSvONuRhyHPCYZAhrCUe7eBe9FnHcqTP8k+BasBo=)
3: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: C7KmmWun2dX9H9haejMLucLDX6TZ17dC6V73S7CTAnw=)
4: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: WiAAcP0KH/A3PVdMf+WKZUcSOEY5/upnhbg6/b3N8PQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Aug 19 08:09:24 2026 GMT
Not After : Aug 26 08:09:24 2026 GMT
Subject: CN=6a8564b4-0903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:5e:12:d0:af:b4:1a:09:dd:f5:75:0d:0b:
d4:f2:43:4a:65:a2:d6:a1:0b:2d:0d:4b:92:2e:66:
c1:cf:fb:6c:05:67:4a:cd:5d:a9:8a:85:aa:ae:9e:
37:c0:7c:50:3e:ee:c8:c5:97:15:fb:3b:1a:b3:22:
e7:d1:0e:b4:6e:55:9a:c6:2c:8e:a4:20:d0:10:79:
03:0d:5c:17:ae:52:65:06:02:ce:80:f6:1d:b5:e3:
84:0e:18:e3:cf:37:20:11:9d:9b:6d:df:d0:1c:03:
8d:e2:9b:be:a7:5d:f4:16:fd:47:a3:27:89:b6:f3:
42:d4:17:73:f5:01:ae:af:b5:9c:71:8a:92:9a:48:
d0:6f:c7:0d:55:05:dc:dd:a6:21:98:44:66:62:ff:
5e:b7:f4:b3:d1:9b:fc:6d:98:6f:91:d0:23:ae:df:
26:78:3e:b7:40:d7:66:d5:72:4a:70:4e:98:34:70:
83:ab:4d:a3:b2:7e:dc:d8:83:60:76:06:39:de:9d:
7c:b0:55:93:c7:fd:6e:06:a2:c0:50:6c:94:97:bc:
4b:89:f2:b3:a3:9e:66:dc:ec:ae:f4:c1:4c:9b:ef:
e9:1c:df:91:85:b8:85:a4:1a:83:d5:ed:52:a4:49:
f4:20:8d:02:de:87:9b:d5:97:31:3e:d3:58:8d:4a:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:3A:75:BA:86:26:54:67:8F:75:C4:FE:8D:92:FB:CE:21:69:BE
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:65:31:f1:38:3b:08:fd:ee:95:10:69:e6:fd:65:93:67:
de:60:1a:68:03:98:22:40:68:b8:71:20:af:38:41:8b:5c:d0:
cc:cc:aa:86:45:55:41:a3:ef:e1:7f:e0:94:90:65:ab:78:5d:
2f:34:56:e9:7f:a6:d6:53:8d:02:e6:b1:b5:2c:76:f5:5f:0e:
1c:8c:a4:2f:48:d5:16:2a:8b:d9:43:4d:b0:2f:ef:09:16:d0:
d3:f6:d1:c8:22:5e:92:49:de:0c:3e:b6:d9:b7:b2:90:76:fa:
a1:25:54:f3:60:57:46:91:53:65:30:d4:02:d3:96:c1:48:6a:
06:c9:17:35:11:3c:45:fa:dd:63:da:35:73:96:2b:2c:df:fd:
c7:e9:29:6e:76:49:c2:c5:84:5f:a4:11:70:b4:f3:47:21:0c:
bb:2d:da:0d:a5:5e:d4:91:37:6f:e4:f2:44:31:ca:85:a4:25:
4c:6d:41:15:7b:43:ad:29:c9:ba:02:9d:72:61:a0:77:6c:f0:
20:80:1d:e5:e6:fc:1d:a5:82:98:b0:0f:c7:82:99:bf:3a:d3:
28:8b:32:5c:9e:d8:57:b2:08:c2:2e:e4:63:7e:18:23:87:ba:
30:5c:d6:28:c3:c8:37:c4:de:27:0c:67:5a:25:41:82:97:14:
92:19:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:17:08 2026 by rpki-client