
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier: 2ZVO+0V6Qm48hcXnRLHD/czVIHEACjZ3t8dAxBwGhrc=
Subject key identifier: B8:CC:E7:88:FD:CF:3A:46:F5:19:6F:DC:0E:F2:20:F0:AE:87:39:BC
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number: 02C4
Signing time: Mon 27 Jul 2026 02:34:51 +0000
Manifest this update: Mon 27 Jul 2026 02:34:51 +0000
Manifest next update: Mon 03 Aug 2026 02:34:51 +0000
Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: lKwA+1MFJ3Edhfk4ECkb92VC0ywD21M0r84yxMEArUg=)
2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Validity
Not Before: Jul 27 02:34:51 2026 GMT
Not After : Aug 3 02:34:51 2026 GMT
Subject: CN=6a66c3cb-8b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:d2:04:06:17:05:8a:b3:93:2f:fa:0a:27:
9a:e5:41:86:d4:43:f8:94:4f:74:d9:cf:18:b1:e1:
30:79:64:19:18:9e:01:91:f3:6b:64:89:3b:7b:fb:
78:c8:47:9e:2f:7c:31:69:71:1a:cf:6f:1d:9d:9a:
b5:b3:fa:65:2e:0d:7e:cc:e6:f3:16:0f:97:b5:00:
9d:f7:87:f1:86:ce:f4:c8:1f:b0:48:23:79:32:fe:
58:bd:4f:a0:1b:e9:4c:93:ea:96:26:12:15:03:a4:
25:d7:8c:13:43:8d:35:6d:6a:b4:f8:3e:e6:9d:d3:
3d:83:63:8e:f1:22:96:d0:9f:2c:03:d6:fa:c4:ed:
58:e1:18:e7:10:b2:76:34:e2:cf:33:69:05:9b:d2:
8a:aa:ba:5a:75:e7:94:09:c2:e1:0e:96:b1:a3:00:
ec:bb:39:41:eb:67:5e:93:ef:23:b5:e4:6e:b8:2e:
f0:e1:86:0e:19:44:f0:76:e9:47:fa:8a:6d:b4:eb:
58:ad:10:2d:c9:ce:0b:28:ac:4d:97:7d:b3:21:36:
4c:fa:ac:2b:96:7d:e4:63:d4:74:10:e6:be:2f:1a:
18:d2:55:69:93:e6:35:b6:81:4f:d5:37:9b:0e:91:
eb:38:80:32:9f:40:df:b0:10:5e:d2:a6:a6:b4:6a:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:E7:88:FD:CF:3A:46:F5:19:6F:DC:0E:F2:20:F0:AE:87:39:BC
X509v3 Authority Key Identifier:
keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:75:61:37:d7:94:51:4a:7c:2c:81:14:7f:4b:13:2e:fc:58:
73:bf:86:00:b3:79:0b:88:25:c1:aa:fa:5e:42:24:90:2a:cd:
80:6b:30:d1:df:0a:ee:35:41:32:53:96:8b:73:db:6f:e8:59:
3e:9b:b3:4e:87:20:fe:b3:cf:f3:93:7a:fc:9d:12:46:9b:13:
59:f3:f6:e9:71:f1:d0:85:db:ad:1f:3f:4a:63:53:76:b0:0b:
30:3f:28:b1:de:09:74:14:98:1d:e3:52:e2:a2:46:44:b3:94:
c8:e6:76:fd:db:11:90:41:9f:31:d7:69:25:66:98:f3:dc:e6:
07:0b:cf:67:15:57:23:6d:a3:7b:ab:06:1f:31:a4:2d:42:19:
80:e6:bf:17:87:61:73:c8:c3:e3:8a:fd:eb:40:6e:e7:41:b9:
f7:be:22:b2:f5:24:ff:17:71:c5:27:fa:07:10:f6:ea:c3:a5:
c8:50:29:ef:b4:96:c2:5c:82:2c:ae:aa:33:11:02:26:62:e6:
2b:18:fc:05:e4:8a:a6:a3:f1:6e:5d:ca:e3:6f:90:3e:15:61:
97:3b:6c:56:40:5f:22:11:84:ba:3b:02:d7:f4:ca:fc:66:f2:
34:66:f9:03:97:bb:ac:18:be:92:ac:d7:11:9a:16:ab:96:dd:
2f:a7:84:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4
RTFDNDM3QjYwHhcNMjYwNzI3MDIzNDUxWhcNMjYwODAzMDIzNDUxWjAYMRYwFAYD
VQQDEw02YTY2YzNjYi04Yjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEjSBAYXBYqzky/6Ciea5UGG1EP4lE902c8YseEweWQZGJ4BkfNrZIk7e/t4
yEeeL3wxaXEaz28dnZq1s/plLg1+zObzFg+XtQCd94fxhs70yB+wSCN5Mv5YvU+g
G+lMk+qWJhIVA6Ql14wTQ401bWq0+D7mndM9g2OO8SKW0J8sA9b6xO1Y4RjnELJ2
NOLPM2kFm9KKqrpadeeUCcLhDpaxowDsuzlB62dek+8jteRuuC7w4YYOGUTwdulH
+opttOtYrRAtyc4LKKxNl32zITZM+qwrln3kY9R0EOa+LxoY0lVpk+Y1toFP1Teb
DpHrOIAyn0DfsBBe0qamtGpFpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjM54j9
zzpG9Rlv3A7yIPCuhzm8MB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw
M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4
RFZkb05UQTZMcGVPSEVON1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOXVhN9eUUUp8LIEUf0sTLvxYc7+GALN5C4glwar6XkIkkCrNgGsw0d8K7jVB
MlOWi3Pbb+hZPpuzTocg/rPP85N6/J0SRpsTWfP26XHx0IXbrR8/SmNTdrALMD8o
sd4JdBSYHeNS4qJGRLOUyOZ2/dsRkEGfMddpJWaY89zmBwvPZxVXI22je6sGHzGk
LUIZgOa/F4dhc8jD44r960Bu50G5974isvUk/xdxxSf6BxD26sOlyFAp77SWwlyC
LK6qMxECJmLmKxj8BeSKpqPxbl3K42+QPhVhlztsVkBfIhGEujsC1/TK/GbyNGb5
A5e7rBi+kqzXEZoWq5bdL6eEkw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:29 2026 by rpki-client