
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: IHUV+x4N9tXkdj08HARMahGtnhrC5Vjvv8/1HZ0T0lU=
Subject key identifier: F3:46:9C:E5:9F:7B:73:E8:F8:86:2A:9E:9A:CE:2D:4B:6E:86:2B:8D
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 0727
Signing time: Tue 28 Jul 2026 22:29:27 +0000
Manifest this update: Tue 28 Jul 2026 22:29:26 +0000
Manifest next update: Tue 04 Aug 2026 22:29:26 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: Ji+esJiPkWvBpohCjx+vyXFHQK3e/U8JMPiFMZegdho=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: Jul 28 22:29:26 2026 GMT
Not After : Aug 4 22:29:26 2026 GMT
Subject: CN=6a692d47-390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:84:d2:b2:24:d2:73:60:28:02:3c:9e:c3:
f6:f6:b5:e0:34:07:dc:8a:17:94:96:9f:a0:93:3a:
80:fc:99:17:ba:e4:38:9d:c9:70:1e:b8:c8:6e:fd:
67:76:a8:85:bd:91:6d:21:69:94:f7:27:3f:d0:d9:
f7:b5:07:a6:30:06:47:89:80:8e:ed:16:cf:75:27:
48:18:fa:47:85:d1:33:e4:bb:10:14:81:cf:c5:db:
9e:1f:9a:56:8f:71:8b:e3:e1:18:50:70:10:3a:c0:
f9:f3:1c:8b:b9:31:7b:88:83:17:5c:20:82:e3:95:
5e:a2:49:98:3e:67:0f:b5:ba:50:dd:48:10:d1:a4:
46:24:28:50:f3:8b:8f:60:b7:ba:31:93:ae:00:36:
67:8b:2e:e4:a4:5f:48:38:98:73:1f:60:75:07:b4:
60:66:64:2d:2e:df:df:dd:e9:6d:3f:06:1f:15:68:
88:54:2b:d1:23:ee:ac:54:c1:3e:66:52:7a:8b:4e:
79:12:0a:be:09:3d:87:b6:91:2d:a9:86:3e:79:fb:
36:c6:08:a7:ff:aa:7f:2b:96:75:9d:c4:5c:f7:88:
6a:81:f3:3b:ee:3a:ad:7b:8e:66:82:14:95:f1:a1:
ab:f1:38:69:0f:3b:69:08:80:b3:ab:d7:b3:ef:95:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:9C:E5:9F:7B:73:E8:F8:86:2A:9E:9A:CE:2D:4B:6E:86:2B:8D
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:f4:a9:b4:6d:eb:e1:82:ac:fc:bd:e5:56:fb:36:65:30:
f3:16:82:ce:bb:57:5d:88:da:14:d3:67:00:f6:ff:23:23:2c:
56:d3:bf:46:08:e4:ea:6c:5d:20:7b:21:46:c2:31:20:1d:ca:
eb:ce:83:df:70:9a:04:e8:16:44:1b:12:b6:38:ba:21:a3:60:
07:ba:a8:72:a2:9d:6f:6d:f8:a4:c9:85:76:46:eb:4e:dc:28:
c2:1b:46:a5:5f:70:d1:2a:66:e7:42:d5:94:ea:79:12:b4:c4:
92:cd:b0:65:d2:c3:14:4f:b2:a1:65:36:85:a4:a9:21:f4:c3:
c4:fd:5d:ab:b1:e5:53:e5:f6:03:1e:65:7e:2a:2b:e1:1b:f5:
e8:1c:64:a3:72:49:8d:16:d1:0c:56:70:e1:97:8c:1c:29:a2:
ff:a3:5f:a6:50:f5:52:f0:cf:46:c9:e9:7a:3e:98:0a:e3:89:
1c:f2:f6:b8:ce:c4:7e:36:23:02:75:5a:dd:7d:a6:17:c1:2c:
25:7a:d4:1c:cb:53:e6:c6:57:33:53:d2:43:c9:60:b9:44:ca:
63:a8:0e:30:a3:e0:47:b3:ad:1c:08:22:0f:73:0b:12:b6:06:
d7:ab:d5:3f:06:1d:38:9c:ae:c2:d3:38:08:65:33:3c:c0:d1:
7a:82:73:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD
RkI1RjA2OTAwHhcNMjYwNzI4MjIyOTI2WhcNMjYwODA0MjIyOTI2WjAYMRYwFAYD
VQQDEw02YTY5MmQ0Ny0zOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSeE0rIk0nNgKAI8nsP29rXgNAfciheUlp+gkzqA/JkXuuQ4nclwHrjIbv1n
dqiFvZFtIWmU9yc/0Nn3tQemMAZHiYCO7RbPdSdIGPpHhdEz5LsQFIHPxdueH5pW
j3GL4+EYUHAQOsD58xyLuTF7iIMXXCCC45VeokmYPmcPtbpQ3UgQ0aRGJChQ84uP
YLe6MZOuADZniy7kpF9IOJhzH2B1B7RgZmQtLt/f3eltPwYfFWiIVCvRI+6sVME+
ZlJ6i055Egq+CT2HtpEtqYY+efs2xgin/6p/K5Z1ncRc94hqgfM77jqte45mghSV
8aGr8ThpDztpCICzq9ez75UC9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNGnOWf
e3Po+IYqnprOLUtuhiuNMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD
NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf
blNheE9scW40M2JQdGZCcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY5D0qbRt6+GCrPy95Vb7NmUw8xaCzrtXXYjaFNNnAPb/IyMsVtO/Rgjk6mxd
IHshRsIxIB3K686D33CaBOgWRBsStji6IaNgB7qocqKdb234pMmFdkbrTtwowhtG
pV9w0Spm50LVlOp5ErTEks2wZdLDFE+yoWU2haSpIfTDxP1dq7HlU+X2Ax5lfior
4Rv16Bxko3JJjRbRDFZw4ZeMHCmi/6NfplD1UvDPRsnpej6YCuOJHPL2uM7EfjYj
AnVa3X2mF8EsJXrUHMtT5sZXM1PSQ8lguUTKY6gOMKPgR7OtHAgiD3MLErYG16vV
PwYdOJyuwtM4CGUzPMDReoJzpw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:24 2026 by rpki-client