
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: RSgjS/dNNAET1rraNlxCUC8ahD7LmsLloGQwKwe5Xc4=
Subject key identifier: 7C:26:55:38:7A:5E:A6:65:DB:97:86:02:FD:A4:94:FE:43:F7:3D:54
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 023B
Signing time: Wed 19 Aug 2026 03:05:15 +0000
Manifest this update: Wed 19 Aug 2026 03:05:14 +0000
Manifest next update: Wed 26 Aug 2026 03:05:14 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: X6Kv9NysPCbuKLXYa+r9VHtcezrZcAKCOnO6YuB3F/E=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 615JmX9cruG++rabOl7xOJVJY/bjLhdXzPxbybiBquw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Aug 19 03:05:14 2026 GMT
Not After : Aug 26 03:05:14 2026 GMT
Subject: CN=6a851d6a-b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:16:03:84:39:96:cc:03:d7:12:55:88:aa:
0c:e4:8b:ad:14:45:ff:10:c6:c0:c7:d2:76:d2:f7:
5e:db:34:d7:36:32:80:c5:7b:65:ae:11:ee:e6:77:
80:6e:57:63:c9:1a:ca:fb:7c:d6:6d:0f:3b:37:31:
b7:46:24:4b:a4:a1:af:2b:5c:39:e4:e5:91:2d:cb:
61:fe:1d:aa:4f:68:d7:4b:d7:17:41:39:44:aa:9a:
d9:5e:2f:fc:c0:d1:9e:bb:bd:59:c8:36:62:00:a0:
8c:e7:a4:44:1a:ae:ac:9f:02:7d:72:f9:69:34:ba:
c6:ae:04:d8:d7:63:45:0d:15:02:b1:fc:ee:1a:c1:
15:f9:89:92:5b:c9:43:2d:6a:45:8b:14:75:5a:66:
2e:4c:5a:48:8b:e8:44:85:27:03:9d:18:ac:7c:c1:
93:51:b2:34:83:21:95:44:b7:5c:ac:f3:25:00:e9:
05:f5:60:68:71:71:3a:45:a2:a9:d9:19:c3:40:d2:
59:5e:64:31:04:f9:4b:d6:36:14:12:d8:c7:68:60:
e1:07:79:40:93:ac:0f:21:d0:0f:d4:10:5c:36:1c:
a4:09:e8:f4:7f:33:ea:0d:76:90:01:8e:66:c9:5d:
ab:68:55:ff:1d:61:c0:83:25:25:02:aa:67:ee:f1:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:55:38:7A:5E:A6:65:DB:97:86:02:FD:A4:94:FE:43:F7:3D:54
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:93:00:b8:27:f9:fe:65:0d:be:7b:fa:82:df:45:1f:34:
41:86:86:42:2f:f9:67:b7:1b:11:bd:58:21:ba:d2:34:ec:b4:
d8:c8:ca:63:9f:32:02:62:e4:98:d4:1c:47:f8:f9:ed:e4:59:
67:7d:38:9a:95:d6:c0:49:9b:2f:d0:79:65:eb:99:3a:69:2d:
39:1d:eb:60:fb:88:48:4c:46:82:0f:66:27:58:f1:89:c8:39:
65:66:f2:93:9e:04:6a:b4:77:03:5a:0c:30:f5:d5:cf:bb:d9:
50:43:6d:66:8f:2e:bc:09:f9:7b:a9:a0:0f:47:6a:55:33:25:
d1:e7:c5:15:90:2f:1d:d1:95:da:1c:91:3e:44:b9:2c:00:1e:
13:11:ea:3b:af:b5:89:2a:25:b9:35:a9:52:f7:f1:db:fb:62:
54:7a:14:72:82:ac:67:7f:e8:ad:a9:e1:14:d3:74:28:74:eb:
34:5f:28:b6:12:78:b5:d7:a6:b2:bf:92:34:09:f7:e6:eb:3e:
d4:0a:33:0b:78:fb:f8:76:e9:24:4d:62:e5:eb:ac:80:6b:e5:
24:c6:a9:0c:39:4f:7e:5f:fb:9d:a3:6b:9b:f7:20:34:1d:b8:
44:88:da:bb:34:df:d5:4f:da:08:bd:ec:77:7a:e3:81:24:4b:
d4:9c:0a:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4
MURBNEIzMUMwHhcNMjYwODE5MDMwNTE0WhcNMjYwODI2MDMwNTE0WjAYMRYwFAYD
VQQDEw02YTg1MWQ2YS1iMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rkWA4Q5lswD1xJViKoM5IutFEX/EMbAx9J20vde2zTXNjKAxXtlrhHu5neA
bldjyRrK+3zWbQ87NzG3RiRLpKGvK1w55OWRLcth/h2qT2jXS9cXQTlEqprZXi/8
wNGeu71ZyDZiAKCM56REGq6snwJ9cvlpNLrGrgTY12NFDRUCsfzuGsEV+YmSW8lD
LWpFixR1WmYuTFpIi+hEhScDnRisfMGTUbI0gyGVRLdcrPMlAOkF9WBocXE6RaKp
2RnDQNJZXmQxBPlL1jYUEtjHaGDhB3lAk6wPIdAP1BBcNhykCej0fzPqDXaQAY5m
yV2raFX/HWHAgyUlAqpn7vGaTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwmVTh6
XqZl25eGAv2klP5D9z1UMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx
RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq
M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAID2TALgn+f5lDb57+oLfRR80QYaGQi/5Z7cbEb1YIbrSNOy02MjKY58yAmLk
mNQcR/j57eRZZ304mpXWwEmbL9B5ZeuZOmktOR3rYPuISExGgg9mJ1jxicg5ZWby
k54EarR3A1oMMPXVz7vZUENtZo8uvAn5e6mgD0dqVTMl0efFFZAvHdGV2hyRPkS5
LAAeExHqO6+1iSoluTWpUvfx2/tiVHoUcoKsZ3/oranhFNN0KHTrNF8othJ4tdem
sr+SNAn35us+1AozC3j7+HbpJE1i5eusgGvlJMapDDlPfl/7naNrm/cgNB24RIja
uzTf1U/aCL3sd3rjgSRL1JwKAw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:12 2026 by rpki-client