
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: R+4nefsobMSPlwnoUSd+DgG8oi71T5agOt6ORXGM4J4=
Subject key identifier: 3C:96:88:19:41:2A:CD:1C:F5:26:2A:E3:32:1A:97:0C:9D:9B:8D:CE
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0E01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0DF2
Signing time: Sun 26 Jul 2026 18:07:07 +0000
Manifest this update: Sun 26 Jul 2026 18:07:06 +0000
Manifest next update: Sun 02 Aug 2026 18:07:06 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: jPbUgO+q0omqd5fbP43i74lSWq0SidcIVkSuTvV2KK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3585 (0xe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: Jul 26 18:07:06 2026 GMT
Not After : Aug 2 18:07:06 2026 GMT
Subject: CN=6a664ccb-dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:62:68:3f:07:ba:2e:42:aa:1a:f0:cc:c6:
2e:c5:31:6e:fd:9e:95:61:34:d5:9e:09:f7:3a:87:
47:42:1c:28:ee:24:23:bb:94:23:23:84:73:7e:63:
a5:1d:05:66:73:d6:24:84:12:f5:13:ca:9f:af:4b:
05:75:c9:ce:a4:b0:77:77:6a:f5:29:b5:ea:85:2a:
2d:32:28:62:6f:e0:8d:d2:a9:89:87:35:2f:c4:2f:
50:b3:db:43:48:d6:59:d6:b5:dc:87:31:c6:ab:13:
8d:3e:7c:b3:5c:68:51:be:fc:55:8c:50:91:f5:e8:
7b:ce:3b:ae:46:0c:77:52:87:97:31:b8:f5:46:57:
fa:f6:11:e5:5b:a5:40:61:28:b1:5d:04:3c:2d:77:
71:c0:75:34:fb:d2:b3:3a:48:46:38:c4:92:3a:2c:
ab:11:dd:15:71:48:8b:55:52:a7:b8:65:3c:dd:fe:
45:52:38:40:f4:4d:3e:fc:f1:89:72:3b:73:6a:1a:
7e:1f:69:29:77:e4:37:45:93:0b:4c:27:88:c0:87:
ae:57:78:75:7a:48:c3:9c:61:63:71:a3:71:77:4f:
b2:67:76:80:5d:13:ef:6d:ff:e4:99:c0:75:9c:1b:
d1:88:b1:27:81:eb:8d:12:a0:9e:2e:3c:50:ad:0c:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:88:19:41:2A:CD:1C:F5:26:2A:E3:32:1A:97:0C:9D:9B:8D:CE
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:ec:4e:14:52:7c:bd:e0:be:17:4f:b4:ec:d8:fb:3c:a4:
8d:f5:0a:ec:0a:61:16:27:d3:0d:fb:37:43:07:73:0b:25:e9:
6b:07:ba:25:1b:5c:d9:e2:aa:ae:0b:94:91:4d:cb:d9:0b:9f:
b6:b3:17:39:a3:86:4c:dc:51:23:09:fb:db:08:8c:14:e7:11:
33:94:32:68:26:e5:f0:1e:32:8c:8c:23:8d:89:2d:04:2c:49:
60:b9:6e:78:e1:97:af:a5:d1:7d:00:65:9a:42:b0:cd:8b:2f:
ef:c1:13:35:ab:d9:8a:4a:2f:36:7d:8d:be:3c:19:25:3a:10:
27:3d:25:eb:5c:18:01:38:e7:da:35:5f:01:f1:ac:6a:22:a9:
20:2d:0a:62:6d:38:bd:47:96:c7:45:6b:37:b1:79:36:c1:d3:
03:be:c2:67:b3:b2:3c:91:c4:fb:63:70:a5:12:43:f2:84:ed:
d7:92:3b:9a:be:55:af:88:68:ab:6f:8c:b8:52:c2:ca:4d:96:
4a:56:ef:23:49:7c:dd:30:97:1f:15:5a:c5:14:70:20:71:a5:
1d:45:3e:d1:33:53:aa:b5:c5:fb:94:e8:ff:ea:44:46:43:6a:
60:99:24:eb:02:1d:64:84:86:49:03:88:5c:a8:68:77:31:b1:
46:f4:cb:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2
QjgwNjE3NTIwHhcNMjYwNzI2MTgwNzA2WhcNMjYwODAyMTgwNzA2WjAYMRYwFAYD
VQQDEw02YTY2NGNjYi1kZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA90liaD8Hui5CqhrwzMYuxTFu/Z6VYTTVngn3OodHQhwo7iQju5QjI4RzfmOl
HQVmc9YkhBL1E8qfr0sFdcnOpLB3d2r1KbXqhSotMihib+CN0qmJhzUvxC9Qs9tD
SNZZ1rXchzHGqxONPnyzXGhRvvxVjFCR9eh7zjuuRgx3UoeXMbj1Rlf69hHlW6VA
YSixXQQ8LXdxwHU0+9KzOkhGOMSSOiyrEd0VcUiLVVKnuGU83f5FUjhA9E0+/PGJ
cjtzahp+H2kpd+Q3RZMLTCeIwIeuV3h1ekjDnGFjcaNxd0+yZ3aAXRPvbf/kmcB1
nBvRiLEngeuNEqCeLjxQrQxqowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyWiBlB
Ks0c9SYq4zIalwydm43OMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE
REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j
VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOAzsThRSfL3gvhdPtOzY+zykjfUK7AphFifTDfs3QwdzCyXpawe6JRtc2eKq
rguUkU3L2QuftrMXOaOGTNxRIwn72wiMFOcRM5QyaCbl8B4yjIwjjYktBCxJYLlu
eOGXr6XRfQBlmkKwzYsv78ETNavZikovNn2NvjwZJToQJz0l61wYATjn2jVfAfGs
aiKpIC0KYm04vUeWx0VrN7F5NsHTA77CZ7OyPJHE+2NwpRJD8oTt15I7mr5Vr4ho
q2+MuFLCyk2WSlbvI0l83TCXHxVaxRRwIHGlHUU+0TNTqrXF+5To/+pERkNqYJkk
6wIdZISGSQOIXKhodzGxRvTLOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:55 2026 by rpki-client