
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json)
Hash identifier: uEpJx6PD3ddrG7uzl3niOEcNGFToEkX9uqHYYPCxebQ=
Subject key identifier: 6B:0C:D1:F4:22:0A:98:BA:68:9C:18:7D:6A:60:53:A0:94:C1:F9:8C
Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
Manifest number: 0117
Signing time: Mon 27 Jul 2026 07:56:33 +0000
Manifest this update: Mon 27 Jul 2026 07:56:32 +0000
Manifest next update: Mon 03 Aug 2026 07:56:32 +0000
Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: bTU6dxSU73xSEcs3uPsCoAF/PcJkx9iVpz2+2dIGL/8=)
2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: h1LWEJUQvaATUOdZkytyIfaI4klq2FxoFoCocLW2Bpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Validity
Not Before: Jul 27 07:56:32 2026 GMT
Not After : Aug 3 07:56:32 2026 GMT
Subject: CN=6a670f31-7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:82:5d:c0:e5:47:62:ef:56:17:0c:ef:0c:
76:07:77:82:7f:cc:39:46:66:39:7c:45:52:4c:d7:
73:bf:e6:16:9f:7a:76:1c:83:f5:7b:7c:ca:34:c1:
34:e6:e6:9f:80:21:a5:f5:56:a3:10:09:f2:2c:e8:
93:fe:72:48:67:d7:95:11:33:26:42:39:aa:0d:47:
53:2c:2c:0a:84:04:ee:fb:86:50:52:d4:38:9f:6b:
a1:78:6c:c7:3a:00:bf:27:86:ab:52:c0:64:ce:35:
76:3d:f9:74:6e:6c:3c:c5:50:4a:90:6b:56:86:1e:
d6:0a:b0:f4:50:3f:8d:4f:9c:4b:4a:3e:30:5b:2c:
32:dd:47:69:88:5f:8f:cd:2e:17:43:06:3a:6e:64:
db:0e:b7:60:64:27:b8:c5:0f:48:29:f0:3d:27:21:
1c:23:80:93:ac:ea:0d:2f:11:b2:34:62:69:e0:be:
8d:09:9f:9f:df:f8:ee:cf:ba:7d:a1:c1:42:cb:da:
19:e9:fc:b1:4a:22:92:3e:c4:df:57:ef:28:e4:83:
48:3f:4c:47:1f:22:28:e6:9a:1e:7c:b4:26:44:71:
ac:8f:47:15:04:b7:e0:ee:9c:fc:12:2c:17:8a:9e:
0a:19:77:10:78:12:2a:7f:9c:6b:73:b3:ab:a3:10:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:D1:F4:22:0A:98:BA:68:9C:18:7D:6A:60:53:A0:94:C1:F9:8C
X509v3 Authority Key Identifier:
keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:02:ab:32:51:97:0c:a0:d7:2b:71:3e:89:65:ff:8d:a1:6e:
2c:b1:d2:55:bf:9f:9c:8e:ce:ab:29:05:0b:e0:52:c4:84:3f:
48:1b:ad:52:87:ae:d3:41:24:1f:be:df:5c:d8:3c:0b:99:f4:
58:19:5c:df:04:c9:5d:16:72:62:72:4e:db:d4:65:ab:93:d6:
65:01:7a:63:94:ab:87:88:17:ad:3c:1a:9d:21:9b:4c:43:4e:
ff:86:a3:22:a8:7f:3f:f2:70:3d:5b:b9:96:07:80:31:84:d2:
3d:2e:2a:54:fe:22:4b:a5:dd:f9:17:7d:6a:87:19:b6:9e:42:
47:84:b3:5a:4b:a1:4d:e2:94:9c:6b:c4:89:f1:c5:bb:dd:e1:
52:12:a0:b4:f7:c2:f9:05:8f:93:9f:a5:d3:80:45:b3:d1:2a:
ec:94:f2:97:f6:4e:c5:b7:d0:c1:5e:e8:c9:b2:a4:d3:9a:6f:
97:ea:87:28:81:50:10:cf:e2:de:dd:eb:ac:ac:15:da:c2:ff:
cc:ea:80:52:03:03:90:94:32:bc:1e:7a:92:f1:19:b2:2b:9f:
3e:74:fe:97:37:d3:10:3f:3d:c5:39:2a:59:74:e8:64:e5:bf:
2a:b2:a1:82:d7:8f:bc:6f:d2:55:15:c2:ff:1a:d6:c6:8d:05:
b6:0b:57:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA5RUExMTAvBgNVBAUTKDAwRkQzMUZEMDZCNDIwNEMzRERDQjYzNTA3MTg5NTMz
Nzc4Q0NDRjgwHhcNMjYwNzI3MDc1NjMyWhcNMjYwODAzMDc1NjMyWjAYMRYwFAYD
VQQDEw02YTY3MGYzMS03MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAve6CXcDlR2LvVhcM7wx2B3eCf8w5RmY5fEVSTNdzv+YWn3p2HIP1e3zKNME0
5uafgCGl9VajEAnyLOiT/nJIZ9eVETMmQjmqDUdTLCwKhATu+4ZQUtQ4n2uheGzH
OgC/J4arUsBkzjV2Pfl0bmw8xVBKkGtWhh7WCrD0UD+NT5xLSj4wWywy3UdpiF+P
zS4XQwY6bmTbDrdgZCe4xQ9IKfA9JyEcI4CTrOoNLxGyNGJp4L6NCZ+f3/juz7p9
ocFCy9oZ6fyxSiKSPsTfV+8o5INIP0xHHyIo5poefLQmRHGsj0cVBLfg7pz8EiwX
ip4KGXcQeBIqf5xrc7OroxBeeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsM0fQi
Cpi6aJwYfWpgU6CUwfmMMB8GA1UdIwQYMBaAFAD9Mf0GtCBMPdy2NQcYlTN3jMz4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlFQS84QzU5MTJGRUUx
M0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElFdzkzTFkxQnhpVk0zZU16
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDlFQS84QzU5MTJGRUUxM0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElF
dzkzTFkxQnhpVk0zZU16UGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAggKrMlGXDKDXK3E+iWX/jaFuLLHSVb+fnI7OqykFC+BSxIQ/SButUoeu00Ek
H77fXNg8C5n0WBlc3wTJXRZyYnJO29Rlq5PWZQF6Y5Srh4gXrTwanSGbTENO/4aj
Iqh/P/JwPVu5lgeAMYTSPS4qVP4iS6Xd+Rd9aocZtp5CR4SzWkuhTeKUnGvEifHF
u93hUhKgtPfC+QWPk5+l04BFs9Eq7JTyl/ZOxbfQwV7oybKk05pvl+qHKIFQEM/i
3t3rrKwV2sL/zOqAUgMDkJQyvB56kvEZsiufPnT+lzfTED89xTkqWXToZOW/KrKh
gtePvG/SVRXC/xrWxo0FtgtXhA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:11 2026 by rpki-client