
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier: VMv74Q82LttxYpM+RhkPXLw+lg96caSqUrocG2fGmfI=
Subject key identifier: 9B:99:BF:B8:B4:B0:E9:26:50:56:95:C1:89:6C:67:A7:49:34:6A:3A
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial: 359D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number: 3580
Signing time: Tue 28 Jul 2026 14:16:15 +0000
Manifest this update: Tue 28 Jul 2026 14:16:15 +0000
Manifest next update: Tue 04 Aug 2026 14:16:15 +0000
Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: Al+/nl41kKdnsKvwXYLmo4oLWRUL35xO/ZUsmmtNGOY=)
2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=)
3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Validity
Not Before: Jul 28 14:16:15 2026 GMT
Not After : Aug 4 14:16:15 2026 GMT
Subject: CN=6a68b9af-ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0f:c2:1a:d1:8c:76:81:c1:38:b4:5d:d7:e9:
88:d8:f9:0a:82:80:ea:88:77:d2:c9:ae:d4:b4:53:
bb:e6:1c:3b:88:5f:40:93:47:c1:e1:5d:9c:89:93:
af:fd:5b:3c:db:05:7a:c7:07:9e:a8:e2:dc:f8:dd:
6b:ec:f2:8f:67:f5:b2:ae:9e:dc:af:b9:9f:14:10:
3d:d4:e3:11:ca:bc:88:b6:fd:7d:95:db:b5:f6:38:
65:df:27:f6:1b:aa:0c:75:3a:d1:c6:6b:42:ef:cb:
a6:12:f3:45:9d:7b:53:d4:6e:92:9c:a2:bd:31:fe:
5f:b7:7a:2f:c4:ec:18:96:c3:6d:ed:d2:bc:31:e2:
cc:16:66:ca:de:9f:dd:b8:d6:d6:3c:7c:df:e3:da:
c5:04:df:bd:58:7e:98:7c:bf:33:74:ca:2d:17:bd:
95:71:dd:22:d6:14:ae:4b:b9:ca:57:bb:55:10:65:
f2:56:9a:37:6f:f8:d1:98:b5:5e:59:d3:be:90:31:
29:9f:b1:3d:a8:3e:05:65:1f:37:52:a6:e6:43:95:
76:34:43:86:46:ed:de:1a:59:02:bc:6d:12:57:23:
e6:50:be:d8:04:2a:aa:4f:02:74:ef:b4:a6:80:96:
c1:49:b4:0f:ee:a1:79:27:a0:ac:ab:d7:f2:24:f9:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:BF:B8:B4:B0:E9:26:50:56:95:C1:89:6C:67:A7:49:34:6A:3A
X509v3 Authority Key Identifier:
keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:10:de:91:e2:63:86:3a:6d:49:13:c2:95:1f:e4:7b:5a:
de:50:72:7d:3a:f9:a4:f6:67:e0:81:03:14:bd:08:43:96:9f:
67:10:d5:e7:51:f5:3b:c7:fb:60:45:e7:5d:a1:56:72:10:29:
f8:81:fc:76:57:46:74:86:fe:6b:79:ce:a2:07:13:0a:8f:6f:
d8:72:50:6a:c2:a9:ed:3f:f6:bc:59:5c:ae:1a:94:12:d0:39:
17:7f:0b:c5:30:f8:7d:be:df:cb:d2:41:65:41:ac:ad:1c:7d:
04:3d:a2:a2:a9:da:02:5d:1c:02:75:d9:64:c8:ff:5c:70:73:
e6:58:d8:30:32:97:68:2e:91:04:49:1c:dd:60:63:f2:a9:27:
5c:e3:78:ff:18:38:b4:2a:44:f3:a1:1f:81:97:ea:41:b3:56:
b0:28:66:1a:9d:e4:9b:d0:51:f0:b2:d1:7e:95:2d:c7:df:45:
28:c6:fb:e1:14:a7:e0:b9:27:74:d7:4a:7d:93:cf:84:88:9e:
1d:04:2c:6e:6a:bf:52:a0:a7:aa:22:b0:a3:76:87:b8:7c:de:
8f:52:7f:bd:17:81:20:57:cc:b1:e3:68:bc:13:d4:50:39:cc:
b8:2f:e2:49:52:99:f7:23:7d:b3:e5:53:28:ac:b6:01:b1:18:
fe:be:53:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1
RTBENjkyQzUwHhcNMjYwNzI4MTQxNjE1WhcNMjYwODA0MTQxNjE1WjAYMRYwFAYD
VQQDEw02YTY4YjlhZi1hZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+g/CGtGMdoHBOLRd1+mI2PkKgoDqiHfSya7UtFO75hw7iF9Ak0fB4V2ciZOv
/Vs82wV6xweeqOLc+N1r7PKPZ/Wyrp7cr7mfFBA91OMRyryItv19ldu19jhl3yf2
G6oMdTrRxmtC78umEvNFnXtT1G6SnKK9Mf5ft3ovxOwYlsNt7dK8MeLMFmbK3p/d
uNbWPHzf49rFBN+9WH6YfL8zdMotF72Vcd0i1hSuS7nKV7tVEGXyVpo3b/jRmLVe
WdO+kDEpn7E9qD4FZR83UqbmQ5V2NEOGRu3eGlkCvG0SVyPmUL7YBCqqTwJ077Sm
gJbBSbQP7qF5J6Csq9fyJPllTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuZv7i0
sOkmUFaVwYlsZ6dJNGo6MB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE
NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps
bE9WakExT2d0M2hlRFdrc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkR0Q3pHiY4Y6bUkTwpUf5Hta3lByfTr5pPZn4IEDFL0IQ5afZxDV51H1O8f7
YEXnXaFWchAp+IH8dldGdIb+a3nOogcTCo9v2HJQasKp7T/2vFlcrhqUEtA5F38L
xTD4fb7fy9JBZUGsrRx9BD2ioqnaAl0cAnXZZMj/XHBz5ljYMDKXaC6RBEkc3WBj
8qknXON4/xg4tCpE86EfgZfqQbNWsChmGp3km9BR8LLRfpUtx99FKMb74RSn4Lkn
dNdKfZPPhIieHQQsbmq/UqCnqiKwo3aHuHzej1J/vReBIFfMseNovBPUUDnMuC/i
SVKZ9yN9s+VTKKy2AbEY/r5TXA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:17 2026 by rpki-client