
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json)
Hash identifier: x+7YKd2oNsnwwTfQ8LWXvzaCrleKK/r25a+mRu6LqTc=
Subject key identifier: 41:FC:81:14:47:28:11:15:FE:65:93:0F:1D:59:43:93:1F:78:E8:6B
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 10BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
Manifest number: 1024
Signing time: Fri 12 Jun 2026 17:28:12 +0000
Manifest this update: Fri 12 Jun 2026 17:28:12 +0000
Manifest next update: Fri 19 Jun 2026 17:28:12 +0000
Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: Kyy/Da02U8mynFkfBUC36105Q5Rg97VYjCM5oEikJl8=)
2: B35E5B46334111EF9770A542C4F9AE02.roa (hash: MGyDF0SymFTGhXVC01aY5fhE89sLhtH+JybTpcTPMuU=)
3: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: X4ujn6m6b/UzOkSsv1BM/hAI4e2I7YefOVrCDDZ2L0g=)
4: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: Sd3bOmBjQUjJSEaaagRS6KbmxYRr1S/mpgHzlYj8vVc=)
5: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: HBSapd8EnRXWCh7KQah04ZzDJueHHz91PfvdNwADOIQ=)
6: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: 1hrK2Bwewpt3jrZg8tzld9vT7Z8nHw5euqbUeqhmK6U=)
7: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: oM2ZWP4gaa1Ec28NI0HOJLuGJz8huwbOd9sIWlD3wks=)
8: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: ufh38KxhdsuLy9IaI1dEAdKwH+h8MTF+UaFxLZhtCHo=)
9: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: HkpHyo2iHcK4D2nlMSOniFKi4H/SALi3eltvq0xZSgo=)
10: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: OWu1YAjMPxdpWq7sK40yFmTZBw771CrDLDYch9c7srQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4283 (0x10bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Jun 12 17:28:12 2026 GMT
Not After : Jun 19 17:28:12 2026 GMT
Subject: CN=6a2c41ac-3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:8a:3e:9f:0e:e0:c5:5d:f3:d2:4a:e1:5d:
32:b0:6f:aa:3c:b6:2c:47:c3:97:8e:0e:41:e1:4e:
51:fb:ae:66:50:db:ec:b5:39:33:bf:78:3d:e7:87:
9b:c4:53:a8:a6:e3:0a:29:03:a5:19:f7:c2:b1:dc:
33:8b:31:19:89:93:20:12:c6:dd:4a:54:3f:5d:76:
bb:c5:2a:a0:e1:8c:d7:0c:d7:ca:5e:99:fb:68:dd:
a9:c7:b5:a2:42:0c:83:47:f0:05:1b:04:ec:f5:cf:
6b:67:06:eb:b5:08:4f:39:65:e7:7c:66:11:0b:60:
fc:f0:66:36:71:1d:ab:db:de:c8:7a:b1:b2:1a:17:
4a:7d:62:ec:40:18:06:7d:d0:7d:97:00:79:d8:f8:
2f:59:96:a7:15:b6:3c:88:e5:63:c9:01:69:7b:55:
89:6b:7a:d9:19:30:4e:57:fe:6f:84:8e:88:2c:50:
9b:0a:df:ac:16:45:83:2d:10:51:d9:22:7c:53:87:
fc:e7:35:d3:f7:af:88:1d:04:f5:74:b2:55:65:62:
30:74:f0:d3:ec:cb:07:d2:9c:45:ea:cb:1e:98:ac:
1f:7a:ac:5b:a5:11:7c:4f:ad:0e:df:e2:6e:e9:4a:
47:0a:a4:0a:67:bc:b8:ef:56:12:65:dd:38:06:a1:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:81:14:47:28:11:15:FE:65:93:0F:1D:59:43:93:1F:78:E8:6B
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:f4:2a:7e:83:f7:20:9c:f9:82:e0:b7:f5:18:7a:08:fd:57:
35:3b:c8:c5:01:bf:bb:64:5d:47:91:a8:95:ba:58:c4:4a:9a:
f6:92:09:26:37:31:70:7c:80:1a:9a:c4:f2:64:33:de:a0:54:
55:2d:da:e9:8a:e3:04:ed:38:89:fb:67:31:11:51:9d:c1:ea:
2b:7c:89:b2:cd:5a:b1:db:bb:e1:74:c4:a7:39:d0:9f:cd:ad:
5f:b7:4f:bc:31:cc:a2:0f:25:77:5a:e6:1f:58:44:5b:32:84:
f5:73:83:70:fc:8b:9e:c9:3e:57:74:90:fa:48:70:93:c6:dc:
ff:fa:46:b1:c9:53:9f:23:5d:62:47:9d:43:f4:98:9e:70:a9:
3d:28:92:85:89:f1:0f:cc:82:47:b1:7b:f7:26:48:5e:6e:6a:
89:3a:3e:95:d5:65:c5:05:07:0f:1a:fe:b7:f7:cd:56:59:7f:
11:35:71:7e:6f:98:c1:3a:66:f1:e1:09:d7:b0:2a:98:2b:7b:
6b:dc:ac:a5:e7:f3:fe:fa:3b:1e:5f:77:9c:cf:e7:03:48:7b:
88:4f:31:f2:fc:f5:be:2a:f5:2f:42:a3:35:11:c2:b3:49:70:
e8:33:7d:17:b0:d8:d8:4d:aa:38:98:51:13:f4:4f:1f:c1:f1:
94:3b:89:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjYwNjEyMTcyODEyWhcNMjYwNjE5MTcyODEyWjAYMRYwFAYD
VQQDEw02YTJjNDFhYy0zNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqemKPp8O4MVd89JK4V0ysG+qPLYsR8OXjg5B4U5R+65mUNvstTkzv3g954eb
xFOopuMKKQOlGffCsdwzizEZiZMgEsbdSlQ/XXa7xSqg4YzXDNfKXpn7aN2px7Wi
QgyDR/AFGwTs9c9rZwbrtQhPOWXnfGYRC2D88GY2cR2r297IerGyGhdKfWLsQBgG
fdB9lwB52PgvWZanFbY8iOVjyQFpe1WJa3rZGTBOV/5vhI6ILFCbCt+sFkWDLRBR
2SJ8U4f85zXT96+IHQT1dLJVZWIwdPDT7MsH0pxF6ssemKwfeqxbpRF8T60O3+Ju
6UpHCqQKZ7y471YSZd04BqGZjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH8gRRH
KBEV/mWTDx1ZQ5MfeOhrMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91
dmFqeVZjVUJRUnNCOFlfMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6/QqfoP3IJz5guC39Rh6CP1XNTvIxQG/u2RdR5GolbpYxEqa9pIJJjcxcHyA
GprE8mQz3qBUVS3a6YrjBO04iftnMRFRncHqK3yJss1asdu74XTEpznQn82tX7dP
vDHMog8ld1rmH1hEWzKE9XODcPyLnsk+V3SQ+khwk8bc//pGsclTnyNdYkedQ/SY
nnCpPSiShYnxD8yCR7F79yZIXm5qiTo+ldVlxQUHDxr+t/fNVll/ETVxfm+YwTpm
8eEJ17AqmCt7a9yspefz/vo7Hl93nM/nA0h7iE8x8vz1vir1L0KjNRHCs0lw6DN9
F7DY2E2qOJhRE/RPH8HxlDuJug==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:28 2026 by rpki-client