
$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier: pKkkCGH1GJL2tp9/rom8xF1eG7uPyX5y2IMiBhCj8/U=
Subject key identifier: EA:60:F8:11:9C:10:48:3D:0C:E4:66:D8:49:28:47:45:EA:5C:C2:AF
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number: A0
Signing time: Mon 27 Jul 2026 09:26:14 +0000
Manifest this update: Mon 27 Jul 2026 09:26:14 +0000
Manifest next update: Mon 03 Aug 2026 09:26:14 +0000
Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: YF+hPpIfask4q7ekQmnf7Tj/zAsYAGEh7o/Z/JbM+8Q=)
2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: aqdlEd+hSBzQzve2o5DblyAqPMOMIZAPbkwHiErLH6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Validity
Not Before: Jul 27 09:26:14 2026 GMT
Not After : Aug 3 09:26:14 2026 GMT
Subject: CN=6a672436-70a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:16:06:89:a3:57:14:27:d1:ac:11:0d:68:
83:aa:6c:87:2b:0d:25:3f:1e:19:29:db:51:4a:ec:
80:22:eb:17:7a:06:e2:e4:0e:6d:0d:84:81:d6:fe:
ec:dd:36:99:fd:0a:4c:22:0c:78:a2:61:db:2f:63:
70:7a:47:e6:ba:f3:d9:6c:c4:ff:73:71:de:d6:d7:
9d:9b:77:e6:de:eb:17:95:ef:5f:de:90:42:d0:c9:
eb:39:0b:a3:73:9b:22:68:c2:8e:d5:2d:a5:60:71:
9d:44:96:66:6b:4f:c4:33:13:5a:e0:1e:34:78:75:
07:9e:9a:19:ca:36:f3:32:b4:2e:6c:f2:87:d1:f6:
3b:23:4d:f3:08:ec:59:cf:25:71:c4:e9:ac:40:0d:
e5:1b:c2:1b:72:e6:80:35:a6:2c:5e:53:d4:e8:db:
ae:43:58:d7:96:a8:e3:83:d2:f5:bc:fe:ad:ec:c2:
db:17:fb:82:e8:97:d9:8c:02:cf:ab:f8:16:08:79:
90:a4:0b:f4:dc:ed:7e:2d:e2:6f:a1:c8:01:80:88:
34:02:24:c2:78:37:0f:fe:b6:64:6d:60:99:71:49:
17:56:8a:ac:c4:f1:e0:93:46:44:57:ae:95:64:2e:
58:df:d5:4a:32:75:30:d3:7d:7b:7f:15:a8:a7:28:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:F8:11:9C:10:48:3D:0C:E4:66:D8:49:28:47:45:EA:5C:C2:AF
X509v3 Authority Key Identifier:
keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:59:6b:48:3c:42:fd:97:86:b0:b6:e1:2c:16:bc:26:fb:9f:
93:dc:e4:4c:55:27:a9:e2:ea:1c:19:67:e3:6b:ac:c0:42:41:
d8:fa:95:9a:c7:37:1e:9e:c9:37:2d:fa:80:01:a9:f9:d9:fa:
3f:2e:33:3d:a1:23:fb:20:96:08:30:59:06:7e:eb:0b:44:eb:
02:de:dd:9d:b2:32:52:fc:60:05:f2:46:64:1b:90:6f:28:bb:
c2:82:7f:e7:e8:82:5b:67:50:f0:13:db:17:59:71:41:dd:be:
e1:6e:c5:a4:9f:1a:af:60:ea:81:61:2f:e9:52:4e:7f:c9:3d:
68:68:e7:c1:57:a1:9b:e6:36:6e:ed:c0:b5:9e:6c:0d:3d:a7:
24:a7:0b:07:a1:27:92:b0:20:24:bb:51:1d:5d:90:ea:14:0e:
52:d0:fc:dd:d5:6a:3b:ef:53:8b:ca:5b:1c:c8:c7:5c:0d:5f:
7e:4a:5d:20:b1:b7:3f:45:06:be:ba:10:70:bf:94:ce:65:aa:
28:a8:f8:be:e6:b9:49:e4:19:33:93:25:a1:61:5b:24:2c:16:
b0:4a:62:cb:ad:ea:d0:22:a3:53:cd:98:9c:a7:93:f2:02:f0:
70:9e:e5:84:fe:82:d5:5a:29:ff:7e:d1:c5:ca:fc:1c:9b:58:
3d:6d:9e:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc4QUExMTAvBgNVBAUTKDk4NTBFQUZGRUQzREEyODQ1RDUxRjA5NUFDMTEyNDUw
ODhENTYyM0YwHhcNMjYwNzI3MDkyNjE0WhcNMjYwODAzMDkyNjE0WjAYMRYwFAYD
VQQDEw02YTY3MjQzNi03MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoh0WBomjVxQn0awRDWiDqmyHKw0lPx4ZKdtRSuyAIusXegbi5A5tDYSB1v7s
3TaZ/QpMIgx4omHbL2NwekfmuvPZbMT/c3He1tedm3fm3usXle9f3pBC0MnrOQuj
c5siaMKO1S2lYHGdRJZma0/EMxNa4B40eHUHnpoZyjbzMrQubPKH0fY7I03zCOxZ
zyVxxOmsQA3lG8IbcuaANaYsXlPU6NuuQ1jXlqjjg9L1vP6t7MLbF/uC6JfZjALP
q/gWCHmQpAv03O1+LeJvocgBgIg0AiTCeDcP/rZkbWCZcUkXVoqsxPHgk0ZEV66V
ZC5Y39VKMnUw0317fxWopyjVBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpg+BGc
EEg9DORm2EkoR0XqXMKvMB8GA1UdIwQYMBaAFJhQ6v/tPaKEXVHwlawRJFCI1WI/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzhBQS8zN0M4MTdGQzk3
NDQxMUYwODA0QTU5MThDNEY5QUUwMi9tRkRxXy0wOW9vUmRVZkNWckJFa1VJalZZ
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzhBQS8zN0M4MTdGQzk3NDQxMUYwODA0QTU5MThDNEY5QUUwMi9tRkRxXy0wOW9v
UmRVZkNWckJFa1VJalZZajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXllrSDxC/ZeGsLbhLBa8Jvufk9zkTFUnqeLqHBln42uswEJB2PqVmsc3Hp7J
Ny36gAGp+dn6Py4zPaEj+yCWCDBZBn7rC0TrAt7dnbIyUvxgBfJGZBuQbyi7woJ/
5+iCW2dQ8BPbF1lxQd2+4W7FpJ8ar2DqgWEv6VJOf8k9aGjnwVehm+Y2bu3AtZ5s
DT2nJKcLB6EnkrAgJLtRHV2Q6hQOUtD83dVqO+9Ti8pbHMjHXA1ffkpdILG3P0UG
vroQcL+UzmWqKKj4vua5SeQZM5MloWFbJCwWsEpiy63q0CKjU82YnKeT8gLwcJ7l
hP6C1Vop/37Rxcr8HJtYPW2epQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:07 2026 by rpki-client