
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: R9sPNGh37Aq0Izz8VU/YBHwEmDjsa3HkY/14HAT48hU=
Subject key identifier: B3:0B:1B:00:47:3F:64:88:0C:8D:9F:46:AE:27:CC:AB:2B:AC:81:60
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 05EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 05BD
Signing time: Mon 27 Jul 2026 00:09:54 +0000
Manifest this update: Mon 27 Jul 2026 00:09:54 +0000
Manifest next update: Mon 03 Aug 2026 00:09:54 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: ziMFox3AxYXewsvjnbR0nPwy/Z3TiOz+ERg3Juh7MyY=)
2: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
4: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: tcEDniWE2GiqOhyoj757p7krVg5bHwf1EmxkpQBck08=)
5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jul 27 00:09:54 2026 GMT
Not After : Aug 3 00:09:54 2026 GMT
Subject: CN=6a66a1d2-9f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:a4:62:f0:f4:9d:a5:b7:d6:51:1a:94:44:
28:0a:ed:e6:ed:b3:af:cf:1f:c2:a5:d3:28:9c:ac:
e6:3d:fb:6d:3f:e8:41:27:5f:44:1c:58:d4:6b:68:
0f:76:23:c1:05:19:d8:87:37:a4:dc:ff:55:af:19:
dd:07:e2:06:7c:bb:ca:b1:c7:be:be:9a:3b:59:b9:
6b:fe:e2:03:49:d7:5a:79:e6:56:fb:26:33:64:f3:
a3:dd:c2:24:03:00:a1:6b:3c:38:3a:b4:9e:78:43:
2c:ab:e3:5e:f0:fe:24:e0:c9:26:77:ef:ec:24:dd:
d6:6e:15:cf:cd:26:b9:50:53:53:ab:ed:43:a6:2b:
00:ba:85:d8:5c:14:51:3a:bf:f4:4b:91:e5:28:19:
c9:1a:c6:0e:f3:65:fd:e4:1d:0b:c0:72:de:66:dd:
fb:27:17:b7:14:a4:b2:d6:ae:be:ab:8c:cf:93:40:
a7:31:41:cf:02:be:c3:40:8f:24:53:af:10:5a:e7:
0b:7c:7d:1a:77:52:97:25:b5:4d:60:7f:81:e8:63:
27:df:9c:7a:f0:22:7a:4f:f3:bc:94:a7:5b:e4:a9:
00:f0:ac:e5:ad:15:e3:06:88:fc:9b:41:51:15:41:
1f:d7:7f:36:a6:e7:5b:ac:21:62:ab:3c:77:67:84:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:1B:00:47:3F:64:88:0C:8D:9F:46:AE:27:CC:AB:2B:AC:81:60
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:49:00:ed:53:e2:94:30:b9:31:46:2f:3b:49:dd:17:ab:5e:
61:11:1f:c2:96:e6:cc:27:00:69:0f:5b:89:15:35:2f:a2:c2:
a4:93:e3:93:b0:fc:e2:20:e8:01:51:d3:e3:e3:e9:b2:c8:ca:
4a:62:b2:46:27:2b:a4:6b:ee:27:f3:8e:2b:c7:3b:35:e6:2a:
dd:dc:3e:2b:f5:2f:85:dd:82:ca:7c:19:9e:dd:35:ee:e8:d6:
f9:29:c4:22:07:34:47:52:d9:06:6b:d6:05:78:1c:f3:14:ce:
b9:66:29:2b:89:4d:a7:04:c1:fb:d2:db:17:4e:4c:ef:1f:05:
17:a4:7d:c1:3f:dd:a3:5e:29:97:e3:12:a1:df:be:82:fa:f4:
e8:b0:88:a8:b3:1d:b8:b3:98:ef:61:e6:46:83:1f:41:7a:89:
db:69:e5:f0:c2:82:14:fa:37:0b:de:78:e5:8b:32:02:1c:c7:
35:77:af:ff:49:e9:da:11:07:1c:c5:fb:21:71:28:da:92:47:
10:e4:7e:47:98:18:65:44:12:89:d0:6c:be:7f:fb:da:51:6b:
fe:3c:11:67:49:16:8d:19:a3:fa:b1:ea:fb:1f:be:66:f4:25:
e4:4b:0a:ae:80:de:db:1f:20:d9:f2:f4:a4:7f:a6:47:3b:9c:
d2:07:6e:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwNzI3MDAwOTU0WhcNMjYwODAzMDAwOTU0WjAYMRYwFAYD
VQQDEw02YTY2YTFkMi05ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjYikYvD0naW31lEalEQoCu3m7bOvzx/CpdMonKzmPfttP+hBJ19EHFjUa2gP
diPBBRnYhzek3P9VrxndB+IGfLvKsce+vpo7Wblr/uIDSddaeeZW+yYzZPOj3cIk
AwChazw4OrSeeEMsq+Ne8P4k4Mkmd+/sJN3WbhXPzSa5UFNTq+1DpisAuoXYXBRR
Or/0S5HlKBnJGsYO82X95B0LwHLeZt37Jxe3FKSy1q6+q4zPk0CnMUHPAr7DQI8k
U68QWucLfH0ad1KXJbVNYH+B6GMn35x68CJ6T/O8lKdb5KkA8KzlrRXjBoj8m0FR
FUEf1382pudbrCFiqzx3Z4RU0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMLGwBH
P2SIDI2fRq4nzKsrrIFgMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuEkA7VPilDC5MUYvO0ndF6teYREfwpbmzCcAaQ9biRU1L6LCpJPjk7D84iDo
AVHT4+PpssjKSmKyRicrpGvuJ/OOK8c7NeYq3dw+K/Uvhd2CynwZnt017ujW+SnE
Igc0R1LZBmvWBXgc8xTOuWYpK4lNpwTB+9LbF05M7x8FF6R9wT/do14pl+MSod++
gvr06LCIqLMduLOY72HmRoMfQXqJ22nl8MKCFPo3C9545YsyAhzHNXev/0np2hEH
HMX7IXEo2pJHEOR+R5gYZUQSidBsvn/72lFr/jwRZ0kWjRmj+rHq+x++ZvQl5EsK
roDe2x8g2fL0pH+mRzuc0gdu8A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:46 2026 by rpki-client