
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier: 3aRBkvd6O8zO59xIJj3UQuZDlbxh04thdh7kEcM+1zA=
Subject key identifier: D7:8E:2F:CB:7D:52:95:2E:37:63:22:92:76:26:15:A2:43:ED:CB:87
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number: 02C7
Signing time: Wed 29 Jul 2026 02:11:55 +0000
Manifest this update: Wed 29 Jul 2026 02:11:55 +0000
Manifest next update: Wed 05 Aug 2026 02:11:55 +0000
Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: VQcYbgA12SBZTr1P3kGpgVBvgLJ4aN9rl/wdIWQb95A=)
2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Validity
Not Before: Jul 29 02:11:55 2026 GMT
Not After : Aug 5 02:11:55 2026 GMT
Subject: CN=6a69616b-2809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:9a:d1:a2:15:61:61:2f:64:b2:14:3d:e9:
24:85:06:0c:bd:4d:40:a8:f2:1d:9e:63:ee:f2:ea:
59:4d:9a:e7:c6:ec:bc:fc:2a:6e:2e:e6:9d:c4:f5:
da:c1:96:3e:09:60:cb:9c:87:17:f4:02:35:15:9f:
0c:e4:fe:89:47:69:1d:37:8a:32:9d:4a:8c:cf:23:
86:d6:67:c6:85:0e:9c:59:4e:44:97:26:c1:dd:f0:
bd:81:a0:04:1f:4d:60:67:af:78:13:31:5b:c3:5a:
a5:95:c1:06:1c:88:66:1b:73:9d:98:4e:27:38:70:
d2:e3:86:0e:a4:c0:74:ae:a7:7b:2f:f7:e7:9e:7d:
99:36:3b:28:b7:9b:92:70:53:e3:1c:3e:4b:d5:68:
b7:fd:eb:26:f0:5c:0a:5d:dd:bf:25:30:27:25:47:
80:12:dd:5e:6d:7e:37:c6:35:b8:98:76:25:a9:d7:
7d:a9:38:e9:46:61:4b:bc:48:18:4f:7a:19:ac:c4:
db:25:b4:22:04:21:fd:71:08:3c:08:9f:af:99:11:
35:7d:f1:ac:c5:ea:21:bb:68:f9:98:30:80:2d:06:
71:26:47:c7:e3:fb:66:06:19:4e:07:d7:04:ff:dc:
ac:5d:d2:11:92:d4:8b:ec:dc:3a:5a:9e:06:98:24:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:2F:CB:7D:52:95:2E:37:63:22:92:76:26:15:A2:43:ED:CB:87
X509v3 Authority Key Identifier:
keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:67:cb:1f:c4:53:3e:72:d2:4c:24:0b:79:a2:83:ae:e8:
10:48:be:4e:eb:49:19:3f:fd:41:4a:e6:38:33:37:f7:b7:b2:
f6:65:bc:76:a2:55:ba:6e:cd:38:5d:47:49:b5:92:c4:d2:8f:
e8:7e:bd:2c:21:02:4b:a0:42:21:0c:e6:ae:a8:35:9f:95:90:
ac:00:6c:b9:77:1e:a7:67:32:9d:1b:b8:3f:4f:78:77:bb:9c:
62:6f:54:0b:4b:d7:52:2e:51:7b:f0:1d:76:e7:d0:ae:fe:a3:
7d:d2:07:f8:24:0d:03:4e:08:72:53:0d:4e:6a:6e:de:8b:03:
d8:3d:de:2a:dd:72:64:bd:cf:32:7d:84:eb:f0:d1:aa:f2:16:
a7:21:ec:18:dc:bd:20:ac:97:f4:74:28:62:32:54:1e:dd:09:
ae:7a:b3:74:fd:6c:3a:e9:8d:cc:19:92:eb:22:d1:09:ee:58:
9f:d0:00:01:bc:bf:b5:17:3d:53:f2:ac:ac:c6:db:98:7f:cd:
ba:89:3b:bc:f7:da:31:0f:4a:95:dd:f3:40:eb:95:c7:60:d3:
ca:67:52:32:22:5b:91:b9:91:fd:c4:09:60:28:f6:ee:1a:e4:
ed:c6:61:33:06:ce:f3:f1:1a:70:6f:17:75:17:cc:11:18:2f:
26:c0:80:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0
RTQ2Nzc2RjYwHhcNMjYwNzI5MDIxMTU1WhcNMjYwODA1MDIxMTU1WjAYMRYwFAYD
VQQDEw02YTY5NjE2Yi0yODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5Ga0aIVYWEvZLIUPekkhQYMvU1AqPIdnmPu8upZTZrnxuy8/CpuLuadxPXa
wZY+CWDLnIcX9AI1FZ8M5P6JR2kdN4oynUqMzyOG1mfGhQ6cWU5ElybB3fC9gaAE
H01gZ694EzFbw1qllcEGHIhmG3OdmE4nOHDS44YOpMB0rqd7L/fnnn2ZNjsot5uS
cFPjHD5L1Wi3/esm8FwKXd2/JTAnJUeAEt1ebX43xjW4mHYlqdd9qTjpRmFLvEgY
T3oZrMTbJbQiBCH9cQg8CJ+vmRE1ffGsxeohu2j5mDCALQZxJkfH4/tmBhlOB9cE
/9ysXdIRktSL7Nw6Wp4GmCR7BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeOL8t9
UpUuN2MiknYmFaJD7cuHMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD
NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0
dkh3VElsUDBCc0JPUm5kdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfztnyx/EUz5y0kwkC3mig67oEEi+TutJGT/9QUrmODM397ey9mW8dqJVum7N
OF1HSbWSxNKP6H69LCECS6BCIQzmrqg1n5WQrABsuXcep2cynRu4P094d7ucYm9U
C0vXUi5Re/AddufQrv6jfdIH+CQNA04IclMNTmpu3osD2D3eKt1yZL3PMn2E6/DR
qvIWpyHsGNy9IKyX9HQoYjJUHt0JrnqzdP1sOumNzBmS6yLRCe5Yn9AAAby/tRc9
U/KsrMbbmH/Nuok7vPfaMQ9Kld3zQOuVx2DTymdSMiJbkbmR/cQJYCj27hrk7cZh
MwbO8/EacG8XdRfMERgvJsCA2g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:43 2026 by rpki-client