
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier: yjXLPHc5RVBgG98+2Kz4L5WWPOWCzQMtyIau4blKnoQ=
Subject key identifier: 08:4A:F3:66:AF:1B:73:A5:C0:F0:11:A1:0B:D8:46:18:B0:C2:3B:26
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 160B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number: 15B1
Signing time: Tue 28 Jul 2026 16:52:22 +0000
Manifest this update: Tue 28 Jul 2026 16:52:22 +0000
Manifest next update: Tue 04 Aug 2026 16:52:22 +0000
Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: Y5pTYcBam3XAuqhb4NHIRAp52i2cWruwvgdJ1J1X6h4=)
2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: Aeg61XcuOkOdleV15Q4+Qk8RtuldUKElhU+Yjo/HRrk=)
3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: BQsuQrikdwhD5Mc0XBMqkQHD0Ua6D0EyN+F6ar++uGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5643 (0x160b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Jul 28 16:52:22 2026 GMT
Not After : Aug 4 16:52:22 2026 GMT
Subject: CN=6a68de46-58cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:97:d0:4a:93:bc:13:89:30:5c:f5:b2:d2:
e6:f7:07:ca:ec:9b:cb:8f:69:af:d7:2f:91:c0:9a:
3a:4e:eb:2c:bf:0f:0a:9f:2d:bf:67:9a:b7:2d:17:
35:0f:3e:b0:ee:56:9b:66:93:ce:34:84:94:06:5a:
00:a1:33:5e:50:86:aa:cd:cf:c7:d6:51:22:e0:1d:
97:25:b3:43:01:b8:46:6e:5d:af:57:66:74:ff:f7:
fb:c4:e7:27:c4:83:7e:c8:cd:e9:aa:8a:52:99:b6:
aa:84:10:2e:2c:33:48:7d:07:c1:76:1f:fd:64:da:
e1:73:14:33:09:df:b1:db:b1:7d:e1:1c:3a:9b:79:
2d:59:cb:7f:a8:e3:fa:2d:ad:9c:d9:50:1c:40:78:
15:39:9f:aa:a6:eb:6f:50:35:5c:e0:58:75:a8:5f:
e8:0b:65:d5:c2:eb:e7:14:41:7f:c9:f8:7e:f3:85:
71:72:01:81:b7:28:7a:ea:d9:aa:7c:69:56:15:2c:
29:dd:52:7c:7a:4e:ad:e0:62:12:b3:e9:27:bb:16:
93:b8:32:d9:14:96:21:8f:c7:10:c4:fd:06:dd:68:
cc:75:19:db:86:e0:29:83:1c:81:49:8e:44:98:cd:
68:a7:07:30:57:5d:94:94:24:80:e3:30:14:f1:b1:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:F3:66:AF:1B:73:A5:C0:F0:11:A1:0B:D8:46:18:B0:C2:3B:26
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:92:86:38:5e:3b:72:31:f7:73:35:53:72:d8:7a:be:13:
b4:2d:c0:c9:63:47:e8:ec:79:2f:9c:96:18:51:8a:9f:1b:a4:
83:94:b2:6f:23:90:1a:34:f4:a4:e1:69:42:f1:af:c7:f0:09:
e0:c9:0d:11:dc:01:f1:e0:09:1d:c1:0a:44:96:d5:ca:f1:39:
0d:4a:73:c3:03:97:74:10:c1:b0:c8:09:da:25:d5:30:3b:2e:
07:f3:55:64:22:04:08:9f:ed:b9:dd:3c:ad:39:4d:36:bf:53:
b7:35:f7:7e:0e:51:fc:ad:6a:37:1f:33:d0:8c:e2:0d:ae:17:
18:58:40:4c:45:f9:f2:59:f4:23:21:6d:a5:b5:25:ed:0d:4e:
28:a9:45:77:6a:fa:37:3c:13:56:92:6d:d9:61:49:ee:b7:14:
96:43:35:a8:1c:44:4d:0f:5d:2d:0c:5a:90:5b:05:a8:ac:4a:
20:b6:84:e2:31:37:b8:55:49:e4:53:d6:65:df:e4:c5:32:37:
09:74:38:5e:a5:e8:9a:31:79:e2:66:85:99:68:0d:06:22:bc:
21:9e:70:0b:3b:61:17:e8:93:9b:e4:e9:24:75:1f:9c:1b:7c:
91:79:df:b2:67:41:8b:7f:e8:ff:5c:12:5c:d0:d6:87:fc:d0:
0a:d2:8a:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez
MzhGNThCNTkwHhcNMjYwNzI4MTY1MjIyWhcNMjYwODA0MTY1MjIyWjAYMRYwFAYD
VQQDEw02YTY4ZGU0Ni01OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1r6X0EqTvBOJMFz1stLm9wfK7JvLj2mv1y+RwJo6Tussvw8Kny2/Z5q3LRc1
Dz6w7labZpPONISUBloAoTNeUIaqzc/H1lEi4B2XJbNDAbhGbl2vV2Z0//f7xOcn
xIN+yM3pqopSmbaqhBAuLDNIfQfBdh/9ZNrhcxQzCd+x27F94Rw6m3ktWct/qOP6
La2c2VAcQHgVOZ+qputvUDVc4Fh1qF/oC2XVwuvnFEF/yfh+84VxcgGBtyh66tmq
fGlWFSwp3VJ8ek6t4GISs+knuxaTuDLZFJYhj8cQxP0G3WjMdRnbhuApgxyBSY5E
mM1opwcwV12UlCSA4zAU8bHhJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhK82av
G3OlwPARoQvYRhiwwjsmMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz
RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3
TmptZWNXM0NJY296ajFpMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5mShjheO3Ix93M1U3LYer4TtC3AyWNH6Ox5L5yWGFGKnxukg5SybyOQGjT0
pOFpQvGvx/AJ4MkNEdwB8eAJHcEKRJbVyvE5DUpzwwOXdBDBsMgJ2iXVMDsuB/NV
ZCIECJ/tud08rTlNNr9TtzX3fg5R/K1qNx8z0IziDa4XGFhATEX58ln0IyFtpbUl
7Q1OKKlFd2r6NzwTVpJt2WFJ7rcUlkM1qBxETQ9dLQxakFsFqKxKILaE4jE3uFVJ
5FPWZd/kxTI3CXQ4XqXomjF54maFmWgNBiK8IZ5wCzthF+iTm+TpJHUfnBt8kXnf
smdBi3/o/1wSXNDWh/zQCtKKLw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:07 2026 by rpki-client