
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: RctO8lKLDK/F2ls39QZ07F19PVQ4oOWwSGesYErDROk=
Subject key identifier: 07:BA:25:A9:02:DE:11:23:15:89:B7:D1:A1:8D:3F:8A:E5:DE:37:E5
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 059B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 058A
Signing time: Tue 28 Jul 2026 23:54:38 +0000
Manifest this update: Tue 28 Jul 2026 23:54:38 +0000
Manifest next update: Tue 04 Aug 2026 23:54:38 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: KHtWTeldFAVsszZQj+hxGY/fwMf20P/Get+IFgjicNo=)
2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=)
3: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=)
4: 2894A350705F11F1A7A1ED8F70A30FBC.roa (hash: f5hXdnbfoOJMTROR6C6aBv/K1AhGm1KG2D4JAjNeBYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: Jul 28 23:54:38 2026 GMT
Not After : Aug 4 23:54:38 2026 GMT
Subject: CN=6a69413e-5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:53:e6:fd:6e:fc:26:7c:fd:49:b0:86:1a:
59:78:23:be:b2:b7:2e:29:4b:85:f1:05:c8:2f:ca:
b3:22:92:4b:6a:be:3f:e6:12:b9:33:84:6e:87:5d:
6e:bb:35:af:ba:80:be:9c:76:88:e0:8e:9b:99:a0:
c1:d5:c6:e1:bf:50:af:6b:a1:87:c1:7d:fb:a1:59:
17:e0:09:8b:c9:4e:54:44:40:68:bd:a7:f6:93:cc:
5c:20:c5:94:54:16:31:35:d0:99:90:05:71:97:a4:
f0:0e:c5:f5:16:54:c4:65:d8:40:cb:ae:84:dd:34:
b4:8b:85:08:26:ca:29:08:84:d7:7b:c7:68:eb:90:
11:50:dc:e9:1c:23:2a:92:e4:79:df:b9:8a:41:b0:
77:71:12:32:5a:69:02:7e:72:81:2d:a5:ac:cc:a9:
6a:e6:5f:0a:26:49:1c:54:9e:fd:1f:b3:61:ec:67:
f9:e9:c9:b9:e5:a4:9b:5d:07:be:4a:7a:a3:1b:66:
09:25:48:75:01:0e:e2:39:7a:30:af:62:8e:91:44:
f9:7e:0f:1c:a0:e2:29:08:b8:f2:3d:72:c8:92:1f:
1e:9f:b2:f0:07:4e:ff:de:82:1f:f8:3e:a6:62:0b:
a2:27:2b:5e:4f:d9:63:dd:c5:44:bb:14:3f:e6:a2:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:25:A9:02:DE:11:23:15:89:B7:D1:A1:8D:3F:8A:E5:DE:37:E5
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:d5:eb:c4:e3:d8:42:b3:19:aa:a5:59:62:1e:bf:3a:f0:
97:bd:2b:aa:78:53:6f:c7:08:78:08:a6:a5:12:10:f7:d4:96:
81:db:ad:1c:b1:ce:15:fc:5a:de:26:5a:63:4e:4d:c9:78:87:
ac:0f:51:f1:2c:94:d4:a8:9c:10:c4:30:38:05:c3:b9:b7:81:
03:a7:47:5f:47:f1:0d:01:0c:ff:13:b0:54:bc:cc:34:34:a3:
af:6e:53:d9:e3:de:ef:43:5b:7f:cd:78:55:70:f9:d0:5d:f8:
c3:88:0a:f1:f9:10:1f:b3:a7:89:ee:51:bf:e8:3c:d8:88:e6:
b0:82:db:fb:c9:9d:fa:6b:40:f5:50:1b:b1:1d:e9:da:72:c0:
52:c9:7a:95:bb:a8:b3:fd:66:6c:ff:45:7b:0e:52:bb:f8:a4:
79:0f:77:7a:1f:69:bc:6b:b5:a2:b3:8f:2f:28:73:40:59:43:
c3:06:26:de:be:58:f5:8e:a0:22:33:80:5b:6e:81:30:9f:56:
a6:16:88:43:69:ec:e2:5a:3c:1c:f7:52:af:ad:ec:bf:a7:63:
a8:ea:9f:54:df:58:bc:0c:7a:ef:5f:2b:e5:ca:d3:67:2e:ec:
1c:d0:04:db:be:c8:52:84:92:b5:d8:bc:f1:1c:c4:c2:05:92:
01:86:92:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1
RjIyRjI0ODIwHhcNMjYwNzI4MjM1NDM4WhcNMjYwODA0MjM1NDM4WjAYMRYwFAYD
VQQDEw02YTY5NDEzZS01NDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyotT5v1u/CZ8/UmwhhpZeCO+srcuKUuF8QXIL8qzIpJLar4/5hK5M4Ruh11u
uzWvuoC+nHaI4I6bmaDB1cbhv1Cva6GHwX37oVkX4AmLyU5UREBovaf2k8xcIMWU
VBYxNdCZkAVxl6TwDsX1FlTEZdhAy66E3TS0i4UIJsopCITXe8do65ARUNzpHCMq
kuR537mKQbB3cRIyWmkCfnKBLaWszKlq5l8KJkkcVJ79H7Nh7Gf56cm55aSbXQe+
SnqjG2YJJUh1AQ7iOXowr2KOkUT5fg8coOIpCLjyPXLIkh8en7LwB07/3oIf+D6m
YguiJyteT9lj3cVEuxQ/5qKgiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAe6JakC
3hEjFYm30aGNP4rl3jflMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw
QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ
cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK5HV68Tj2EKzGaqlWWIevzrwl70rqnhTb8cIeAimpRIQ99SWgdutHLHOFfxa
3iZaY05NyXiHrA9R8SyU1KicEMQwOAXDubeBA6dHX0fxDQEM/xOwVLzMNDSjr25T
2ePe70Nbf814VXD50F34w4gK8fkQH7Onie5Rv+g82IjmsILb+8md+mtA9VAbsR3p
2nLAUsl6lbuos/1mbP9Few5Su/ikeQ93eh9pvGu1orOPLyhzQFlDwwYm3r5Y9Y6g
IjOAW26BMJ9WphaIQ2ns4lo8HPdSr63sv6djqOqfVN9YvAx6718r5crTZy7sHNAE
277IUoSStdi88RzEwgWSAYaSHg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:14 2026 by rpki-client