
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier: vxoH5TCrcCuoEnO8hyzBXiucws1VOznS7nJgPnB1g28=
Subject key identifier: F8:D8:C4:D6:22:5A:D7:48:5E:EC:C3:F2:CD:BE:77:72:75:C6:AE:FA
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number: 01FA
Signing time: Mon 27 Jul 2026 05:00:33 +0000
Manifest this update: Mon 27 Jul 2026 05:00:33 +0000
Manifest next update: Mon 03 Aug 2026 05:00:33 +0000
Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: MzCR99XbMv0DYjlmMjhXLQCm5Lws9iYStfDBgr6H0Qs=)
2: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: zkNUDLjXuqFNaipi5YVq9yVdI9wqBX+vkJTiE60LyPI=)
3: 6ABF5CFAB24311F093F9B04EC4F9AE02.roa (hash: T9d4VibSASPmkCyH9NpIJk4mWr2jmH2I4BlIvYJVUCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Validity
Not Before: Jul 27 05:00:33 2026 GMT
Not After : Aug 3 05:00:33 2026 GMT
Subject: CN=6a66e5f1-ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:f4:58:41:a6:39:f1:d3:23:5c:04:4c:8f:
bc:7c:00:53:9d:36:8f:30:44:61:09:d8:ea:cf:9a:
68:30:9a:d4:59:47:b7:95:30:a8:13:8b:2b:41:f6:
f6:6a:66:31:b2:8a:18:69:2c:0c:24:83:f5:a9:fb:
cd:9e:26:d6:6b:46:2f:73:f3:42:a2:61:cf:9b:d3:
99:b7:eb:83:d5:06:0a:34:71:64:25:f2:2f:18:44:
c4:31:7c:a0:a5:91:41:48:ac:85:e3:55:7a:3a:69:
91:6f:d8:1f:6f:90:ac:9b:4b:5d:68:e5:de:ff:a7:
76:df:21:d2:5b:dd:55:a2:11:b4:8d:52:87:23:ea:
e9:6c:7e:b8:6e:03:0a:40:6a:97:7e:d9:29:37:c3:
a1:cb:d6:74:6b:d0:63:31:55:64:9f:10:fc:e9:ad:
49:a7:3d:d1:89:49:65:65:d2:cd:55:d5:d1:eb:25:
4e:cc:81:db:06:4b:d4:38:f3:44:a8:27:d9:bd:f4:
9c:c3:2b:59:e0:d5:f9:25:98:37:a2:72:38:8f:28:
d8:3c:1d:37:f5:50:27:00:84:be:91:25:8d:94:bb:
d8:dd:b1:8a:a3:b2:bc:3e:62:7c:bb:16:5d:5c:14:
6a:db:1f:34:f5:28:db:59:bc:57:13:66:d8:e3:d7:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:C4:D6:22:5A:D7:48:5E:EC:C3:F2:CD:BE:77:72:75:C6:AE:FA
X509v3 Authority Key Identifier:
keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:eb:0f:d5:c4:9b:0d:dc:51:6f:a6:b5:29:13:3c:3b:2c:
31:e2:a2:d9:06:8e:5a:d5:19:9a:29:b3:a9:ef:83:9c:d2:a7:
e1:f7:14:a7:b1:b8:ef:64:66:e9:aa:8a:57:cd:e6:c1:3b:b7:
db:eb:ef:27:6c:3e:6b:a4:25:5a:3c:59:15:b8:7e:9c:0e:b3:
1b:6d:3d:49:d8:e4:e3:94:50:18:25:0c:8a:9f:c5:b0:fb:86:
91:09:19:e0:2f:4c:9e:a9:a3:70:4a:18:35:65:45:cc:b9:18:
74:ec:b5:ff:2b:dc:a1:f5:d6:6c:37:75:08:2c:34:42:ec:a0:
75:62:4e:c4:6c:cf:e2:e7:e9:aa:38:27:e7:fa:46:e3:2a:ef:
f6:1e:eb:ab:26:2d:d4:65:ea:4e:51:13:de:da:da:c3:69:a1:
c0:e0:52:a9:bc:83:7d:75:f3:0b:b9:09:b7:bd:c9:51:6d:69:
aa:26:81:f5:17:17:16:2a:67:7d:51:26:7b:b9:7a:6e:0b:1b:
94:58:3f:83:83:6b:5f:24:0c:89:5e:b3:a8:7e:1a:51:41:31:
c9:75:e3:69:54:e5:2f:44:02:20:c2:c6:66:7c:d8:5f:f0:e8:
b9:c8:61:37:72:db:f5:7b:02:8a:31:b9:09:f5:e9:51:1c:f0:
dd:1f:f6:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjAwNkQxMTAvBgNVBAUTKDQ2Rjk3MkQ3QjgzRENBMDYxREI5REZBQUYwMTc3RjJE
REYxRUU5MEEwHhcNMjYwNzI3MDUwMDMzWhcNMjYwODAzMDUwMDMzWjAYMRYwFAYD
VQQDEw02YTY2ZTVmMS1lYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7AX0WEGmOfHTI1wETI+8fABTnTaPMERhCdjqz5poMJrUWUe3lTCoE4srQfb2
amYxsooYaSwMJIP1qfvNnibWa0Yvc/NComHPm9OZt+uD1QYKNHFkJfIvGETEMXyg
pZFBSKyF41V6OmmRb9gfb5Csm0tdaOXe/6d23yHSW91VohG0jVKHI+rpbH64bgMK
QGqXftkpN8Ohy9Z0a9BjMVVknxD86a1Jpz3RiUllZdLNVdXR6yVOzIHbBkvUOPNE
qCfZvfScwytZ4NX5JZg3onI4jyjYPB039VAnAIS+kSWNlLvY3bGKo7K8PmJ8uxZd
XBRq2x809SjbWbxXE2bY49fsQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjYxNYi
WtdIXuzD8s2+d3J1xq76MB8GA1UdIwQYMBaAFEb5cte4PcoGHbnfqvAXfy3fHukK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDA2RC8zQzEwMEM5Mjk4
QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXlnWWR1ZC1xOEJkX0xkOGU2
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J2bHkxN2c5eWdZZHVkLXE4QmRfTGQ4ZTZRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDA2RC8zQzEwMEM5Mjk4QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXln
WWR1ZC1xOEJkX0xkOGU2UW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGc3rD9XEmw3cUW+mtSkTPDssMeKi2QaOWtUZmimzqe+DnNKn4fcUp7G472Rm
6aqKV83mwTu32+vvJ2w+a6QlWjxZFbh+nA6zG209Sdjk45RQGCUMip/FsPuGkQkZ
4C9MnqmjcEoYNWVFzLkYdOy1/yvcofXWbDd1CCw0QuygdWJOxGzP4ufpqjgn5/pG
4yrv9h7rqyYt1GXqTlET3traw2mhwOBSqbyDfXXzC7kJt73JUW1pqiaB9RcXFipn
fVEme7l6bgsblFg/g4NrXyQMiV6zqH4aUUExyXXjaVTlL0QCIMLGZnzYX/Douchh
N3Lb9XsCijG5CfXpURzw3R/2SQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:48:54 2026 by rpki-client