
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: y+TSG8c+vr4OxJgFZPo72Z+aqDD/O8XeUWEVY4SPSsw=
Subject key identifier: 96:1C:05:50:D5:19:43:82:8A:6B:4F:BD:92:96:D5:47:0D:CF:7B:5F
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: 83
Signing time: Mon 27 Jul 2026 09:50:29 +0000
Manifest this update: Mon 27 Jul 2026 09:50:28 +0000
Manifest next update: Mon 03 Aug 2026 09:50:28 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: K/8ZJufLTwPA7BEMCIjHWjyV0zdi2UU8wE8W3ehHY74=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Jul 27 09:50:28 2026 GMT
Not After : Aug 3 09:50:28 2026 GMT
Subject: CN=6a6729e5-b4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:10:95:07:c2:a5:72:69:77:60:b0:a7:53:
82:2b:4f:e1:e6:fd:ba:3f:36:84:aa:a2:02:87:21:
a5:10:0f:fc:eb:89:e1:a6:be:f1:00:c3:c6:45:62:
86:15:87:57:98:f3:0f:32:81:14:a6:6c:29:44:79:
17:99:45:6c:2e:99:6a:6e:8e:b9:12:b8:0a:cc:da:
dd:1e:6a:f1:60:3d:dc:43:b0:f1:5c:8d:c1:da:59:
d4:a9:15:c3:55:dd:3f:b3:a8:f0:0a:a9:f5:2b:af:
0d:2a:a9:0c:fd:55:37:31:4a:b4:31:a2:94:00:34:
ad:96:d5:ac:6a:4a:e5:6e:5e:58:cd:72:b9:d6:22:
33:ba:fb:47:1a:b4:be:cb:9d:e3:58:57:d0:c6:a0:
7b:8f:75:f6:a9:6b:ef:58:0f:f6:91:f1:1a:b2:41:
04:fb:a3:8f:88:fc:e8:ad:8f:69:14:46:35:a5:ee:
e6:f0:95:33:7a:22:78:8e:af:ba:1a:9d:5e:47:11:
58:42:35:26:7a:22:ae:f7:28:13:e6:58:a7:2e:9a:
ad:1d:5c:92:22:64:17:75:b2:bf:e3:c1:94:3e:2d:
7f:75:b2:d3:0e:11:75:31:fe:9a:9b:8b:d6:4f:60:
6c:99:a3:14:7e:a0:6b:07:5f:8e:64:e9:50:ce:88:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:05:50:D5:19:43:82:8A:6B:4F:BD:92:96:D5:47:0D:CF:7B:5F
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:06:a2:17:3e:59:7c:54:f9:16:2c:09:d1:3d:41:09:b8:
3f:75:d5:16:80:b7:07:c2:29:8a:a4:81:2e:65:83:b7:94:f8:
9d:16:0c:6e:39:de:92:0d:70:40:fd:12:a1:9b:4e:36:67:4b:
c1:bb:34:89:83:14:b0:5a:39:a9:c3:34:71:77:e9:6d:75:25:
10:0c:f2:06:67:36:fd:2a:41:3a:b2:bc:a1:9a:01:49:01:99:
d7:8a:c8:21:cd:f3:ee:f4:a0:eb:70:ca:af:80:11:69:e6:ca:
cd:c6:14:ed:55:a2:f8:d2:43:88:2f:90:3c:60:f4:d9:b8:69:
d2:7b:f6:7a:21:d1:67:78:15:87:ce:95:1b:26:df:83:67:9e:
36:21:51:33:13:f3:69:a9:d4:66:1b:3c:11:8f:31:dd:da:95:
3e:1b:a6:0a:cf:aa:81:cb:5d:ef:a6:c2:af:e6:4c:d1:b6:ab:
14:ec:1e:b5:0d:26:5a:5b:80:a9:0f:dd:db:87:e9:fa:e7:d5:
09:98:ea:25:77:37:a5:22:c9:d9:72:ab:58:b5:63:92:5c:8b:
57:2d:67:e0:78:df:70:07:e9:8c:c1:c8:d8:15:d9:45:43:71:
eb:f9:d5:74:87:c0:52:69:7d:23:97:7c:72:2c:26:d4:94:ea:
eb:ba:bb:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZFQTgxMTAvBgNVBAUTKDc3ODQ4ODE0OEUzQUUyRjE0QUQ0MDg1NEY3QTJGQTU5
NTc3NUM1NzUwHhcNMjYwNzI3MDk1MDI4WhcNMjYwODAzMDk1MDI4WjAYMRYwFAYD
VQQDEw02YTY3MjllNS1iNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0MQlQfCpXJpd2Cwp1OCK0/h5v26PzaEqqIChyGlEA/864nhpr7xAMPGRWKG
FYdXmPMPMoEUpmwpRHkXmUVsLplqbo65ErgKzNrdHmrxYD3cQ7DxXI3B2lnUqRXD
Vd0/s6jwCqn1K68NKqkM/VU3MUq0MaKUADStltWsakrlbl5YzXK51iIzuvtHGrS+
y53jWFfQxqB7j3X2qWvvWA/2kfEaskEE+6OPiPzorY9pFEY1pe7m8JUzeiJ4jq+6
Gp1eRxFYQjUmeiKu9ygT5linLpqtHVySImQXdbK/48GUPi1/dbLTDhF1Mf6am4vW
T2BsmaMUfqBrB1+OZOlQzohutwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYcBVDV
GUOCimtPvZKW1UcNz3tfMB8GA1UdIwQYMBaAFHeEiBSOOuLxStQIVPei+llXdcV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkVBOC8wNjhFNzY3QUM1
OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi9kNFNJRkk0NjR2RksxQWhVOTZMNldWZDF4
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkVBOC8wNjhFNzY3QUM1OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi9kNFNJRkk0NjR2
RksxQWhVOTZMNldWZDF4WFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiEIGohc+WXxU+RYsCdE9QQm4P3XVFoC3B8IpiqSBLmWDt5T4nRYMbjnekg1w
QP0SoZtONmdLwbs0iYMUsFo5qcM0cXfpbXUlEAzyBmc2/SpBOrK8oZoBSQGZ14rI
Ic3z7vSg63DKr4ARaebKzcYU7VWi+NJDiC+QPGD02bhp0nv2eiHRZ3gVh86VGybf
g2eeNiFRMxPzaanUZhs8EY8x3dqVPhumCs+qgctd76bCr+ZM0barFOwetQ0mWluA
qQ/d24fp+ufVCZjqJXc3pSLJ2XKrWLVjklyLVy1n4HjfcAfpjMHI2BXZRUNx6/nV
dIfAUml9I5d8ciwm1JTq67q7fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:36 2026 by rpki-client