
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: PIDbB0LqSfagE+XPdcTp7p/msEI2ibOYuENwdQerTvo=
Subject key identifier: 63:34:3E:27:E1:D8:DD:17:F1:A3:17:68:82:3B:EB:BF:51:FF:0A:49
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 09FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 09F5
Signing time: Tue 28 Jul 2026 20:09:03 +0000
Manifest this update: Tue 28 Jul 2026 20:09:03 +0000
Manifest next update: Tue 04 Aug 2026 20:09:03 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: nstC/KU2CJCcSXSSstKxwseZRWSpXFGaDHPOVBzQMxs=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: RChnlqhk/AdCL7WNTqOscOAo8EiLEWYXjeVnfDLTqaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: Jul 28 20:09:03 2026 GMT
Not After : Aug 4 20:09:03 2026 GMT
Subject: CN=6a690c5f-9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:b7:6d:97:62:56:ac:e1:05:f4:63:75:24:
23:65:e1:2e:6a:e1:85:0e:e3:0a:3f:60:2b:86:5e:
19:d9:81:2a:8b:a5:9f:80:a8:dd:01:c8:26:7d:74:
3e:64:60:98:70:a0:2e:34:8a:2a:45:69:19:ec:56:
0c:7f:80:01:93:c8:5d:61:98:b2:e2:2f:6c:a2:7a:
89:a7:13:a8:8c:b1:7e:96:a2:06:e9:a3:df:68:92:
01:75:0e:3a:d4:d5:5c:ff:5c:fa:47:d0:f6:9e:27:
e5:d8:45:e9:dc:f7:cc:f1:d2:05:a9:3f:3c:99:c4:
80:ec:b1:6b:d4:c3:51:ab:1b:49:36:f1:10:9f:62:
6a:2f:09:4f:79:c0:45:bd:f0:b8:28:0d:5d:46:a0:
d0:da:3e:53:a1:05:17:66:68:f1:28:b0:45:9d:54:
15:2a:33:db:ae:92:c8:d9:b1:d1:77:36:dd:ba:bb:
70:4c:d7:bf:8d:ae:b4:a6:7f:6e:39:c6:4a:18:19:
ae:c7:9c:5e:20:cc:a9:be:c6:0c:b1:79:3c:95:c0:
ed:bb:e6:f8:3a:d4:47:5b:5e:f0:af:56:0d:cb:a2:
cc:9d:0a:c6:e4:1a:19:13:70:17:73:0c:e3:fb:25:
01:1d:2b:e8:3b:2c:16:95:88:17:ea:72:cf:4c:24:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:3E:27:E1:D8:DD:17:F1:A3:17:68:82:3B:EB:BF:51:FF:0A:49
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bd:35:b7:20:26:6d:62:66:0a:6d:ca:bc:d8:58:3e:10:14:
90:c9:2c:d4:f2:15:63:9f:88:15:e1:5f:38:8b:f6:ff:41:ad:
fb:4a:37:3f:ee:e9:47:b9:17:0e:1b:2e:cf:c0:4a:9d:7b:c4:
04:64:87:c6:8f:84:b7:0c:8f:fd:17:b6:58:b8:2d:09:bd:5a:
90:79:82:a5:58:4d:c6:f6:06:5e:f7:04:1c:a9:38:97:12:30:
09:37:60:37:d7:2c:86:f4:fe:40:c4:4d:07:fa:23:dc:ee:60:
cc:bc:52:f6:d3:5c:f0:50:4a:9a:9c:08:52:fc:b9:b0:d7:29:
4c:54:05:be:51:aa:65:6f:a7:2d:23:ee:2f:d3:6f:fe:69:bc:
7b:11:4b:7e:c7:ce:02:e8:d6:d1:d9:9d:80:cb:8e:27:a5:57:
f1:ae:42:c3:3e:33:6e:1f:b0:a8:50:7b:5d:73:78:cd:44:71:
5c:05:21:12:5e:43:21:c0:4a:79:cd:ff:32:30:35:a0:0e:1c:
30:97:c5:80:02:7e:6d:84:79:a8:5c:06:a0:6d:58:20:96:cf:
3b:24:99:07:8f:09:25:9d:42:32:37:cf:23:7e:97:15:0c:db:
ac:dd:d4:63:8c:f7:d4:8a:e7:74:bc:1c:a0:35:0d:bd:12:6e:
b3:c7:1d:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjYwNzI4MjAwOTAzWhcNMjYwODA0MjAwOTAzWjAYMRYwFAYD
VQQDEw02YTY5MGM1Zi05MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8m3bZdiVqzhBfRjdSQjZeEuauGFDuMKP2Arhl4Z2YEqi6WfgKjdAcgmfXQ+
ZGCYcKAuNIoqRWkZ7FYMf4ABk8hdYZiy4i9sonqJpxOojLF+lqIG6aPfaJIBdQ46
1NVc/1z6R9D2nifl2EXp3PfM8dIFqT88mcSA7LFr1MNRqxtJNvEQn2JqLwlPecBF
vfC4KA1dRqDQ2j5ToQUXZmjxKLBFnVQVKjPbrpLI2bHRdzbdurtwTNe/ja60pn9u
OcZKGBmux5xeIMypvsYMsXk8lcDtu+b4OtRHW17wr1YNy6LMnQrG5BoZE3AXcwzj
+yUBHSvoOywWlYgX6nLPTCQT/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGM0Pifh
2N0X8aMXaII7679R/wpJMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1
enBnTFhibDNGRi1NR2Nna3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfr01tyAmbWJmCm3KvNhYPhAUkMks1PIVY5+IFeFfOIv2/0Gt+0o3P+7pR7kX
Dhsuz8BKnXvEBGSHxo+EtwyP/Re2WLgtCb1akHmCpVhNxvYGXvcEHKk4lxIwCTdg
N9cshvT+QMRNB/oj3O5gzLxS9tNc8FBKmpwIUvy5sNcpTFQFvlGqZW+nLSPuL9Nv
/mm8exFLfsfOAujW0dmdgMuOJ6VX8a5Cwz4zbh+wqFB7XXN4zURxXAUhEl5DIcBK
ec3/MjA1oA4cMJfFgAJ+bYR5qFwGoG1YIJbPOySZB48JJZ1CMjfPI36XFQzbrN3U
Y4z31IrndLwcoDUNvRJus8cdSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:15 2026 by rpki-client