
$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File: cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier: ns8tJPge1ZR7qNMu8+gT6/NSBG9uYHlcJ9MQA88pBeI=
Subject key identifier: DF:FC:C9:45:3A:2E:CC:B4:49:B0:EA:DC:52:40:68:63:12:27:64:35
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number: 43
Signing time: Mon 27 Jul 2026 10:49:16 +0000
Manifest this update: Mon 27 Jul 2026 10:49:15 +0000
Manifest next update: Mon 03 Aug 2026 10:49:15 +0000
Files and hashes: 1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: 7lu3HU4OriPdFMjA4MYN9TkevyeMcLR2B3PLSre4IMY=)
2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
3: Scg7PJbOX1YSuX4BX1r5NJHcAQw.asa (hash: SowS+6Uuqsv91VN4b5P3wjoKjlFe0UN8c0bvgMcSLU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: Jul 27 10:49:15 2026 GMT
Not After : Aug 3 10:49:15 2026 GMT
Subject: CN=6a6737ac-8408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:6b:e1:42:48:32:0a:2e:5b:ef:be:b2:85:
6b:65:51:94:85:7c:a4:19:33:a6:ea:fe:19:e7:aa:
14:ca:64:6c:e1:f7:95:ec:a2:df:a8:87:60:c1:78:
41:93:05:76:1f:43:c8:22:3d:6a:68:fb:3a:ef:39:
85:77:e7:2b:8d:d1:b2:96:7b:43:69:e1:5f:75:91:
1d:a4:ba:c1:88:87:bd:2d:d9:c7:fd:8a:ef:51:8c:
a9:b7:c9:19:07:a6:d9:c4:0e:0f:b4:af:96:3b:ee:
0d:03:b6:05:75:9d:0a:26:38:39:e2:e9:37:53:da:
0e:9c:fb:e7:02:37:57:c1:75:2e:f3:c8:32:c5:3a:
42:54:44:c9:9b:9b:e7:40:cf:c4:ad:1f:3b:ba:55:
14:24:cc:c8:1d:d8:19:d4:a6:fd:4c:24:e8:06:c6:
f7:9b:5a:ca:2f:0b:2d:de:13:d9:50:e4:79:e0:c7:
a0:57:53:1d:26:9f:86:42:fc:06:6c:cb:99:b1:18:
07:46:57:4e:f5:85:e9:b2:5a:5c:7a:26:fb:ef:85:
96:5d:50:c4:12:ea:e0:57:35:10:56:63:d6:32:3a:
9e:a8:34:88:20:be:d4:b2:22:d6:99:52:b2:af:c7:
bb:01:ad:c0:27:b6:3c:16:b2:fb:4e:78:d5:98:5d:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:C9:45:3A:2E:CC:B4:49:B0:EA:DC:52:40:68:63:12:27:64:35
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:18:25:ae:a5:89:6a:15:bf:b5:6f:32:a3:e0:b6:e9:fb:00:
10:01:b3:37:f5:1a:79:4b:88:20:fc:d9:d2:1a:df:bd:47:51:
fe:90:bf:04:9c:7c:5a:f6:23:2d:5a:15:b7:28:1c:d0:8f:3f:
16:ce:14:36:e0:ec:02:34:c9:d9:2d:b1:b8:47:96:85:40:1c:
db:01:98:4a:73:81:91:8e:02:81:f9:d1:6d:70:83:84:34:9c:
3d:99:44:cc:af:a4:55:42:7a:d3:e8:2d:0a:91:18:29:ed:c0:
17:35:b8:df:0d:89:31:7c:63:fc:cc:26:9c:d9:a7:fd:8b:b1:
a4:2e:f0:54:dc:58:a2:65:66:95:55:99:ad:d2:c6:82:0b:25:
81:93:c5:35:5a:82:af:17:b3:12:e7:a2:70:7f:7b:d9:ca:ef:
f4:1f:fb:5c:34:1d:30:ad:9d:d4:79:a4:e8:d4:40:a1:e3:42:
33:42:67:5b:56:d4:73:89:d9:7b:49:b6:a3:d4:fb:58:5c:cd:
0d:ad:23:d5:dd:e1:d8:19:be:33:7c:07:6e:22:d8:aa:3c:76:
6e:6b:63:31:7e:88:71:29:22:59:60:a2:97:72:d4:44:75:d9:
74:de:63:31:73:b4:b1:23:47:1b:be:fe:08:a6:88:93:78:63:
35:ce:c0:11
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTJCRTExMC8GA1UEBRMoNzEzQTM2NzQ4RkUyQTcyOUU5OTU1NDczRkE1QzQwMDAy
M0FBMjA3RDAeFw0yNjA3MjcxMDQ5MTVaFw0yNjA4MDMxMDQ5MTVaMBgxFjAUBgNV
BAMTDTZhNjczN2FjLTg0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5kGvhQkgyCi5b776yhWtlUZSFfKQZM6bq/hnnqhTKZGzh95Xsot+oh2DBeEGT
BXYfQ8giPWpo+zrvOYV35yuN0bKWe0Np4V91kR2kusGIh70t2cf9iu9RjKm3yRkH
ptnEDg+0r5Y77g0DtgV1nQomODni6TdT2g6c++cCN1fBdS7zyDLFOkJURMmbm+dA
z8StHzu6VRQkzMgd2BnUpv1MJOgGxvebWsovCy3eE9lQ5Hngx6BXUx0mn4ZC/AZs
y5mxGAdGV071hemyWlx6JvvvhZZdUMQS6uBXNRBWY9YyOp6oNIggvtSyItaZUrKv
x7sBrcAntjwWsvtOeNWYXeQBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3/zJRTou
zLRJsOrcUkBoYxInZDUwHwYDVR0jBBgwFoAUcTo2dI/ipynplVRz+lxAACOqIH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMkJFLzk3QUREQzBDMjY0
QTExRjE4NjcxMERDNjlGODMzNzczL2NUbzJkSV9pcHlucGxWUnotbHhBQUNPcUlI
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1RvMmRJX2lweW5wbFZSei1seEFBQ09xSUgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
MkJFLzk3QUREQzBDMjY0QTExRjE4NjcxMERDNjlGODMzNzczL2NUbzJkSV9pcHlu
cGxWUnotbHhBQUNPcUlIMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQATGCWupYlqFb+1bzKj4Lbp+wAQAbM39Rp5S4gg/NnSGt+9R1H+kL8EnHxa9iMt
WhW3KBzQjz8WzhQ24OwCNMnZLbG4R5aFQBzbAZhKc4GRjgKB+dFtcIOENJw9mUTM
r6RVQnrT6C0KkRgp7cAXNbjfDYkxfGP8zCac2af9i7GkLvBU3FiiZWaVVZmt0saC
CyWBk8U1WoKvF7MS56Jwf3vZyu/0H/tcNB0wrZ3UeaTo1ECh40IzQmdbVtRzidl7
Sbaj1PtYXM0NrSPV3eHYGb4zfAduItiqPHZua2MxfohxKSJZYKKXctREddl03mMx
c7SxI0cbvv4IpoiTeGM1zsAR
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:55 2026 by rpki-client