
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: /UMw0y/KN29gi5/48tbHZrt9NCcG49ggW8Y/1RQe9AA=
Subject key identifier: 8D:88:49:4B:AC:CD:78:49:AA:EC:AD:5A:4C:8E:2E:4C:72:5C:2E:07
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0AFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 0AF9
Signing time: Sat 04 Jul 2026 19:28:25 +0000
Manifest this update: Sat 04 Jul 2026 19:28:24 +0000
Manifest next update: Sat 11 Jul 2026 19:28:24 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: tljek2JF47+oxaCPzml0hSeOtxnRjUkgFAx6l12QA10=)
2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 19:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Jul 4 19:28:24 2026 GMT
Not After : Jul 11 19:28:24 2026 GMT
Subject: CN=6a495ed9-b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:81:2f:3e:8c:88:17:48:f1:0f:a2:9d:9f:
61:51:ef:9b:e1:97:b3:a4:2b:80:82:4d:27:19:15:
98:53:f8:30:46:e2:ec:07:bf:ac:20:6e:6a:cf:6a:
93:fa:66:0e:a0:9f:49:1f:0f:8b:2b:8a:47:1b:cb:
2b:8f:c3:5d:ce:ef:57:92:d7:b7:a5:e6:44:27:8b:
82:6f:b4:a8:ac:c9:08:bd:e6:79:f8:62:27:c3:6d:
46:44:86:3c:88:23:73:4b:a7:44:f0:e4:18:4e:63:
d4:d2:c3:97:8f:3e:8a:26:a2:6e:7b:4a:0a:7d:8e:
45:c1:91:e5:a5:70:c2:f7:4d:2c:3d:b3:f2:42:b2:
72:03:fc:78:d0:2e:d7:4b:72:c5:a0:3a:b0:c9:5c:
02:8c:53:04:c8:73:35:ea:e5:72:ee:c6:1d:1f:7c:
d1:eb:09:bf:b4:40:ac:2c:48:94:3c:e0:1e:92:da:
18:72:ab:05:69:ad:83:86:f5:5b:a1:f2:92:4a:83:
3a:47:84:98:29:16:e4:2b:0d:2e:8d:cc:a2:43:70:
80:cd:d8:8e:6b:4d:c2:d7:9a:3e:8f:14:37:1e:04:
38:c0:2f:f1:aa:13:06:74:d9:b3:44:55:a3:40:51:
0b:34:9c:ed:bd:4b:57:fc:f2:4b:df:5c:d1:c6:40:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:49:4B:AC:CD:78:49:AA:EC:AD:5A:4C:8E:2E:4C:72:5C:2E:07
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:7c:02:b8:f1:ed:12:be:d3:f3:33:bb:ef:48:a2:83:3c:
5c:6f:da:66:88:43:53:f3:16:8b:7b:18:38:4a:70:a8:c2:96:
2a:96:0d:0e:0f:36:e1:b6:66:73:ea:72:1c:ac:14:10:98:9e:
3f:f0:ac:62:40:f6:5d:b7:c7:01:2f:95:0b:2a:3a:79:ee:9a:
6c:b0:41:79:dc:70:2b:f7:1a:de:14:7e:c7:74:14:f5:d5:b4:
84:33:fd:e0:7e:1e:ea:22:1a:dc:fa:02:c9:b2:6c:28:5b:69:
ae:13:01:b5:3e:13:50:30:b0:f9:e7:7d:f7:6d:95:d7:bd:ba:
8c:32:ee:1d:43:e2:8c:5e:bd:c0:f3:1b:fd:35:08:46:8f:4d:
70:c8:1d:52:5c:50:0b:ad:18:38:9a:77:88:2d:21:cf:0e:ae:
9d:42:40:13:32:dd:04:ab:a0:20:de:1e:6c:85:ea:20:d9:bc:
1e:d0:39:f1:d8:a3:57:6d:14:01:89:f3:c7:7d:db:48:dd:34:
8b:e7:79:39:87:b2:e8:16:c2:a9:d1:57:04:9e:68:fa:d2:26:
09:ea:bf:b7:cf:e5:f0:10:87:7a:ae:eb:38:0e:47:1d:64:26:
67:99:e7:af:13:f4:1e:9a:0e:7f:a3:4c:10:66:44:60:ae:a4:
aa:59:1b:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz
QzBGODBDNTMwHhcNMjYwNzA0MTkyODI0WhcNMjYwNzExMTkyODI0WjAYMRYwFAYD
VQQDEw02YTQ5NWVkOS1iMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOuBLz6MiBdI8Q+inZ9hUe+b4ZezpCuAgk0nGRWYU/gwRuLsB7+sIG5qz2qT
+mYOoJ9JHw+LK4pHG8srj8Ndzu9Xkte3peZEJ4uCb7SorMkIveZ5+GInw21GRIY8
iCNzS6dE8OQYTmPU0sOXjz6KJqJue0oKfY5FwZHlpXDC900sPbPyQrJyA/x40C7X
S3LFoDqwyVwCjFMEyHM16uVy7sYdH3zR6wm/tECsLEiUPOAektoYcqsFaa2DhvVb
ofKSSoM6R4SYKRbkKw0ujcyiQ3CAzdiOa03C15o+jxQ3HgQ4wC/xqhMGdNmzRFWj
QFELNJztvUtX/PJL31zRxkD2XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2ISUus
zXhJquytWkyOLkxyXC4HMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD
QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk
VEowZVVzWXVEaWc4RDRERk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfTh8Arjx7RK+0/Mzu+9IooM8XG/aZohDU/MWi3sYOEpwqMKWKpYNDg824bZm
c+pyHKwUEJieP/CsYkD2XbfHAS+VCyo6ee6abLBBedxwK/ca3hR+x3QU9dW0hDP9
4H4e6iIa3PoCybJsKFtprhMBtT4TUDCw+ed9922V1726jDLuHUPijF69wPMb/TUI
Ro9NcMgdUlxQC60YOJp3iC0hzw6unUJAEzLdBKugIN4ebIXqINm8HtA58dijV20U
AYnzx33bSN00i+d5OYey6BbCqdFXBJ5o+tImCeq/t8/l8BCHeq7rOA5HHWQmZ5nn
rxP0HpoOf6NMEGZEYK6kqlkbxA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:32:59 2026 by rpki-client