
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier: BfIpOjPWnp+Myfy13IbFLSJOjWm18ZkcaTmzXnAfxG8=
Subject key identifier: CA:7F:10:27:6C:0D:3F:42:81:C5:6A:97:8E:8A:26:2C:56:6D:71:D9
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number: 010B
Signing time: Mon 27 Jul 2026 08:08:25 +0000
Manifest this update: Mon 27 Jul 2026 08:08:24 +0000
Manifest next update: Mon 03 Aug 2026 08:08:24 +0000
Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: DTdax2FMpA8xLWffSR4tPhFmBsyh0YoRjgHJN/DZS3k=)
2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Validity
Not Before: Jul 27 08:08:24 2026 GMT
Not After : Aug 3 08:08:24 2026 GMT
Subject: CN=6a6711f8-9121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:6a:70:f4:85:2b:2c:f1:85:a9:d4:f7:60:
23:97:47:99:83:be:82:23:5c:eb:03:bf:d0:cc:c7:
f0:4c:45:b8:94:d0:6e:d3:68:b8:99:64:54:be:de:
88:7f:d1:dd:3b:05:21:0b:93:15:df:0e:49:b3:bb:
14:b0:62:01:d3:f2:74:c5:10:a9:36:6a:63:19:c3:
63:ee:b2:70:3c:5e:39:de:fd:0b:0f:85:d8:b9:96:
82:1e:5b:04:2a:46:d3:da:c6:75:8e:0d:2a:21:20:
ab:ca:2c:e9:86:95:b9:6b:13:d6:57:88:de:ef:11:
ad:e2:70:b5:90:13:9e:da:e3:40:01:f4:24:24:97:
09:b8:23:53:90:58:a0:56:32:b5:bd:e0:64:ed:b1:
0f:d7:37:0e:d4:64:b8:37:a2:c7:33:1b:cf:bb:48:
9d:58:a4:4b:bb:6b:19:b6:52:65:8c:d4:8c:26:2e:
03:ef:80:ce:ad:05:4e:54:41:44:ac:4c:76:30:20:
cc:e6:c8:25:db:4f:b4:27:23:ce:fb:0b:1f:fe:7c:
59:d5:74:79:e2:8c:69:7a:35:ae:74:17:de:65:52:
32:24:50:db:5e:49:fe:c9:b5:e0:5f:41:c1:0b:99:
f5:02:83:03:a3:80:e1:24:80:62:96:27:2d:d8:18:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:10:27:6C:0D:3F:42:81:C5:6A:97:8E:8A:26:2C:56:6D:71:D9
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:db:85:51:57:be:3d:c6:41:7c:a4:57:8f:4d:67:b9:1e:
60:96:3f:09:0f:d6:6c:61:74:b5:f0:65:23:69:fe:fb:d4:c6:
e1:65:63:ce:72:58:43:d2:9d:51:1f:2b:a9:8e:1a:dc:66:56:
37:a7:3a:58:12:d2:aa:c6:b2:a5:65:83:5e:db:1f:4c:01:0b:
1e:3b:7a:8b:1d:c7:31:b7:f2:f6:3a:3d:72:1d:85:0b:c0:84:
0f:70:5c:6d:0b:01:15:ca:7f:fe:12:2b:2b:91:84:ca:55:41:
61:e2:86:8f:2c:3a:58:f8:a4:b4:b0:60:9c:1e:72:8b:3f:38:
d2:ad:e5:e8:74:70:0c:17:50:48:01:93:7a:d6:61:43:85:33:
13:59:60:c4:8a:09:6a:73:6c:9d:d0:21:39:de:1f:5f:7b:e6:
30:40:cb:14:74:d0:0a:b1:6f:fc:64:cd:15:8c:90:b1:e6:78:
c5:f0:31:65:4a:ee:73:d1:e5:4d:fb:9e:0a:93:9e:41:d9:16:
f4:62:dd:da:7a:99:e6:dc:11:21:05:a2:e9:8b:d3:3b:ee:59:
46:bb:6e:0d:74:c5:1f:e7:b2:1f:fe:e2:cc:7f:b8:0d:8c:77:
26:3a:50:9b:02:15:53:30:ab:b8:58:8b:9d:9c:fb:f0:f0:c4:
50:f9:3c:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE4QzcxMTAvBgNVBAUTKEUzNjkyOTBGRDcxOUUzRTQ5ODdENzE5QTczQjFFQzc3
QUFBRjQ5QjYwHhcNMjYwNzI3MDgwODI0WhcNMjYwODAzMDgwODI0WjAYMRYwFAYD
VQQDEw02YTY3MTFmOC05MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnl9qcPSFKyzxhanU92Ajl0eZg76CI1zrA7/QzMfwTEW4lNBu02i4mWRUvt6I
f9HdOwUhC5MV3w5Js7sUsGIB0/J0xRCpNmpjGcNj7rJwPF453v0LD4XYuZaCHlsE
KkbT2sZ1jg0qISCryizphpW5axPWV4je7xGt4nC1kBOe2uNAAfQkJJcJuCNTkFig
VjK1veBk7bEP1zcO1GS4N6LHMxvPu0idWKRLu2sZtlJljNSMJi4D74DOrQVOVEFE
rEx2MCDM5sgl20+0JyPO+wsf/nxZ1XR54oxpejWudBfeZVIyJFDbXkn+ybXgX0HB
C5n1AoMDo4DhJIBilict2BhYUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMp/ECds
DT9CgcVql46KJixWbXHZMB8GA1UdIwQYMBaAFONpKQ/XGePkmH1xmnOx7Heqr0m2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MThDNy9GOTMwMDFCNkY4
Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQtU1lmWEdhYzdIc2Q2cXZT
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQt
U1lmWEdhYzdIc2Q2cXZTYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXLLbhVFXvj3GQXykV49NZ7keYJY/CQ/WbGF0tfBlI2n++9TG4WVjznJYQ9Kd
UR8rqY4a3GZWN6c6WBLSqsaypWWDXtsfTAELHjt6ix3HMbfy9jo9ch2FC8CED3Bc
bQsBFcp//hIrK5GEylVBYeKGjyw6WPiktLBgnB5yiz840q3l6HRwDBdQSAGTetZh
Q4UzE1lgxIoJanNsndAhOd4fX3vmMEDLFHTQCrFv/GTNFYyQseZ4xfAxZUruc9Hl
TfueCpOeQdkW9GLd2nqZ5twRIQWi6YvTO+5ZRrtuDXTFH+eyH/7izH+4DYx3JjpQ
mwIVUzCruFiLnZz78PDEUPk8IQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:45 2026 by rpki-client