
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: JGhYRmjqg6YRbiqQNdm8Apx5AQql7/MVICdM1g3HRCA=
Subject key identifier: 09:D8:43:AD:69:79:D5:3C:E6:3F:76:AD:04:14:BA:2E:A5:FF:CE:77
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 02B9
Signing time: Wed 29 Jul 2026 02:30:22 +0000
Manifest this update: Wed 29 Jul 2026 02:30:21 +0000
Manifest next update: Wed 05 Aug 2026 02:30:21 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: mpdJyfaFa2l4EMqhDgr2GTh6xiaI5NMwBn+sTJq3AMY=)
2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Jul 29 02:30:21 2026 GMT
Not After : Aug 5 02:30:21 2026 GMT
Subject: CN=6a6965be-72ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:7e:8f:86:ae:82:b8:d2:16:73:53:eb:71:
0e:81:9d:5d:41:d5:64:d1:80:4e:38:53:2e:ee:14:
ad:35:f8:12:83:53:a2:a9:f2:95:63:bf:22:94:9a:
10:e1:16:50:ae:49:52:f2:23:4b:9e:f8:cf:3f:1a:
a7:ab:50:95:48:68:e5:38:69:be:ef:1c:c9:b1:a5:
ac:31:be:c9:f3:c3:a9:ee:9e:8f:31:41:35:54:67:
85:f8:12:ad:b8:54:ad:c7:6d:12:96:c1:dc:05:90:
a4:be:31:1e:44:6b:9a:7d:3a:15:02:25:ae:ec:4e:
78:f2:8f:06:76:7e:36:5f:45:e6:77:14:1e:44:40:
c2:8a:0b:33:2f:c0:6c:3d:5a:4f:bf:21:61:14:c7:
72:70:c6:26:52:73:26:3c:47:f7:2a:b5:9f:a2:5e:
93:b4:9a:b2:db:e4:cb:5f:bd:38:b2:30:d8:d1:2f:
11:77:0b:2f:d9:34:de:5b:fa:24:17:bf:5d:a3:01:
a1:7b:30:57:28:12:22:41:54:a7:5e:41:c5:e0:7f:
fd:82:18:1d:9a:55:77:d9:78:75:f3:3c:b1:27:da:
71:10:01:9e:c4:e9:f0:06:15:dd:a0:04:d5:6a:b0:
82:73:a3:c7:0a:a7:4f:b1:eb:f6:d7:2f:8e:88:84:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:43:AD:69:79:D5:3C:E6:3F:76:AD:04:14:BA:2E:A5:FF:CE:77
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:0d:9b:27:b0:df:92:c0:0f:f7:d5:00:33:02:dd:f8:38:
46:dd:50:93:1a:4d:1e:0b:d3:c3:c6:ca:cd:52:c3:35:bb:fd:
a7:0e:13:8f:34:a5:b6:4d:84:b8:c6:c3:46:a3:70:1c:8a:a8:
b8:d8:d6:25:b0:5c:1c:4b:c1:f0:57:e8:03:b9:14:2e:41:43:
cb:0d:02:93:c8:40:66:55:1a:d3:ec:2a:c4:34:2e:d7:24:06:
55:b0:9f:8e:d4:7f:f7:c2:bc:f5:bf:38:52:2f:87:98:f1:8c:
d1:94:70:d8:f2:67:c9:16:7f:21:7d:92:4e:a8:43:e0:ac:ed:
28:f5:c3:8e:96:f5:80:f6:fd:83:ff:67:8d:52:1b:a2:ea:18:
f1:da:9a:36:d2:b0:23:22:07:c3:d9:17:b7:cb:08:e7:fc:84:
76:18:b5:30:da:45:43:2c:60:41:08:de:db:7f:41:e9:9e:2a:
eb:c7:ea:71:ec:e2:ba:a4:7e:45:98:0b:1e:07:4b:c3:9f:73:
69:74:83:35:a0:08:65:b7:db:46:52:6a:cb:a9:68:89:75:34:
81:96:fe:f4:41:b1:8a:b3:05:88:2c:c6:59:d8:27:68:83:08:
cc:c2:4c:d1:66:ce:d3:b1:23:b7:c4:8d:76:be:d3:40:9a:15:
0f:2c:b3:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4
QkQ2QUQ4MUYwHhcNMjYwNzI5MDIzMDIxWhcNMjYwODA1MDIzMDIxWjAYMRYwFAYD
VQQDEw02YTY5NjViZS03MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAB+j4augrjSFnNT63EOgZ1dQdVk0YBOOFMu7hStNfgSg1OiqfKVY78ilJoQ
4RZQrklS8iNLnvjPPxqnq1CVSGjlOGm+7xzJsaWsMb7J88Op7p6PMUE1VGeF+BKt
uFStx20SlsHcBZCkvjEeRGuafToVAiWu7E548o8Gdn42X0XmdxQeREDCigszL8Bs
PVpPvyFhFMdycMYmUnMmPEf3KrWfol6TtJqy2+TLX704sjDY0S8Rdwsv2TTeW/ok
F79dowGhezBXKBIiQVSnXkHF4H/9ghgdmlV32Xh18zyxJ9pxEAGexOnwBhXdoATV
arCCc6PHCqdPsev21y+OiITbeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnYQ61p
edU85j92rQQUui6l/853MB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3
RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx
b2gxZzR0d3lxYmlMMXEyQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYwNmyew35LAD/fVADMC3fg4Rt1QkxpNHgvTw8bKzVLDNbv9pw4TjzSltk2E
uMbDRqNwHIqouNjWJbBcHEvB8FfoA7kULkFDyw0Ck8hAZlUa0+wqxDQu1yQGVbCf
jtR/98K89b84Ui+HmPGM0ZRw2PJnyRZ/IX2STqhD4KztKPXDjpb1gPb9g/9njVIb
ouoY8dqaNtKwIyIHw9kXt8sI5/yEdhi1MNpFQyxgQQje239B6Z4q68fqceziuqR+
RZgLHgdLw59zaXSDNaAIZbfbRlJqy6loiXU0gZb+9EGxirMFiCzGWdgnaIMIzMJM
0WbO07Ejt8SNdr7TQJoVDyyzqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:57 2026 by rpki-client