
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier: e3hIdrlvOiRork32tBu5Z3okTs24oaz+dkmBe26qtyw=
Subject key identifier: 05:AB:9F:7E:50:33:F2:FE:1C:B2:48:B1:A0:6A:CB:79:92:34:2B:41
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number: 03B3
Signing time: Mon 27 Jul 2026 01:48:06 +0000
Manifest this update: Mon 27 Jul 2026 01:48:06 +0000
Manifest next update: Mon 03 Aug 2026 01:48:06 +0000
Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: mtMW8rxq79mYuaif8wck/pu4bVmA7/okUdScmVq5TRY=)
2: 7E8E2302014811F1B68E82C6516F56BC.roa (hash: JyYTZPQTpKVQMGLvtLCu1teNQOIfxLpgwbO6jQC+5uU=)
3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 7b6vVIdZ0iAg7cHVnmso62PIpM5bGjmmeaRAwNPxKXE=)
4: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: kkOIjg6qoxuJ/Gjbd4gRj2XMV0e9Ga/KOtQLAeVKLPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Jul 27 01:48:06 2026 GMT
Not After : Aug 3 01:48:06 2026 GMT
Subject: CN=6a66b8d6-1e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:4b:02:8e:11:39:25:e6:d7:ad:f5:3b:50:
10:3e:58:68:ff:f0:46:1e:fb:0a:f0:6a:64:14:e0:
a2:6f:5a:ff:ab:6c:81:bd:75:8b:40:28:84:e5:0c:
9f:b5:3c:bf:83:b1:7b:bc:7c:90:ba:2a:0b:42:0a:
83:e4:ff:ac:19:6c:25:ee:fa:14:97:7d:13:6a:d6:
14:01:22:02:2d:cb:69:cc:2c:73:d2:e5:9b:78:21:
8b:5c:b9:d1:5d:15:56:21:e9:f9:eb:38:86:7c:0e:
28:cb:6a:1b:77:3d:fa:39:d6:c2:2a:73:98:92:63:
6c:e7:1a:ee:81:f7:3b:73:62:98:b4:29:a0:8e:46:
a2:34:d3:30:85:53:93:75:d1:2f:1d:dc:0d:11:f4:
84:43:e3:00:e4:24:ef:d2:1e:b9:67:60:d8:68:d1:
d2:83:06:96:79:7f:47:81:f7:7b:b1:d7:5e:b3:88:
9b:7e:46:29:51:fa:4e:0f:21:f7:25:e2:ad:7f:35:
13:1e:18:7d:8c:cc:59:a7:41:0d:5f:29:a4:5c:b2:
29:0b:89:43:5f:ea:13:52:f6:dd:31:98:0d:90:a5:
b2:5f:05:51:df:76:53:21:2f:a0:ff:d9:fb:a1:b4:
de:0b:f1:a5:4c:bf:e0:de:c9:10:79:a0:68:a2:dc:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AB:9F:7E:50:33:F2:FE:1C:B2:48:B1:A0:6A:CB:79:92:34:2B:41
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:bb:21:b5:76:55:a4:ef:47:0a:04:19:e1:70:47:8a:45:
9b:de:49:03:97:b2:c1:6d:9e:70:32:a4:74:a5:2c:60:2a:ea:
ae:b2:58:dd:f1:fe:a2:4e:48:e1:dd:2a:ec:a2:ff:1a:ab:c2:
d9:26:1a:31:02:f1:bf:78:8a:08:ae:51:d2:d6:16:cc:5c:ec:
76:5c:a5:8c:aa:a8:ee:d5:12:2b:7a:0e:46:10:27:57:9d:40:
ef:e7:d3:42:e1:72:c6:86:e9:bc:9a:94:13:19:34:12:06:cf:
37:c8:ff:19:7b:f8:43:b0:ba:12:4d:bb:e9:c2:b4:08:77:82:
4e:c6:e3:d5:39:a8:28:9f:98:20:92:51:cb:0f:cd:fd:ff:65:
f1:3f:13:68:dc:05:0c:a9:3f:51:ff:19:b5:9f:9f:12:9b:fe:
b9:08:f6:fb:4e:7a:f1:2e:09:d2:b0:28:1b:6c:a4:61:b9:65:
ff:b7:15:58:30:76:86:96:ff:0d:1c:47:3f:71:4c:d7:dc:00:
cf:d2:98:2e:9d:3b:77:57:42:1b:23:31:68:66:d1:4f:95:08:
87:41:d5:8a:a7:6c:c0:63:8c:18:01:ff:e6:06:78:60:6e:2f:
12:04:04:73:04:69:bd:3d:89:0a:81:40:96:94:6e:16:ca:d7:
b4:14:b8:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx
QzgxMzJERjEwHhcNMjYwNzI3MDE0ODA2WhcNMjYwODAzMDE0ODA2WjAYMRYwFAYD
VQQDEw02YTY2YjhkNi0xZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovlLAo4ROSXm1631O1AQPlho//BGHvsK8GpkFOCib1r/q2yBvXWLQCiE5Qyf
tTy/g7F7vHyQuioLQgqD5P+sGWwl7voUl30TatYUASICLctpzCxz0uWbeCGLXLnR
XRVWIen56ziGfA4oy2obdz36OdbCKnOYkmNs5xrugfc7c2KYtCmgjkaiNNMwhVOT
ddEvHdwNEfSEQ+MA5CTv0h65Z2DYaNHSgwaWeX9Hgfd7sddes4ibfkYpUfpODyH3
JeKtfzUTHhh9jMxZp0ENXymkXLIpC4lDX+oTUvbdMZgNkKWyXwVR33ZTIS+g/9n7
obTeC/GlTL/g3skQeaBootxLlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWrn35Q
M/L+HLJIsaBqy3mSNCtBMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw
NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU
dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAczq7IbV2VaTvRwoEGeFwR4pFm95JA5eywW2ecDKkdKUsYCrqrrJY3fH+ok5I
4d0q7KL/GqvC2SYaMQLxv3iKCK5R0tYWzFzsdlyljKqo7tUSK3oORhAnV51A7+fT
QuFyxobpvJqUExk0EgbPN8j/GXv4Q7C6Ek276cK0CHeCTsbj1TmoKJ+YIJJRyw/N
/f9l8T8TaNwFDKk/Uf8ZtZ+fEpv+uQj2+0568S4J0rAoG2ykYbll/7cVWDB2hpb/
DRxHP3FM19wAz9KYLp07d1dCGyMxaGbRT5UIh0HViqdswGOMGAH/5gZ4YG4vEgQE
cwRpvT2JCoFAlpRuFsrXtBS4cA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:45 2026 by rpki-client