
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json)
Hash identifier: BUrxmrO/Q+AD5sKvyYuAu0ICC/djX/wAogdFIwVTwuY=
Subject key identifier: B1:3A:13:00:84:E0:FF:FB:D8:06:88:89:CC:F1:CD:4E:7E:A9:B5:0B
Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
Manifest number: 0115
Signing time: Mon 27 Jul 2026 07:58:22 +0000
Manifest this update: Mon 27 Jul 2026 07:58:22 +0000
Manifest next update: Mon 03 Aug 2026 07:58:22 +0000
Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: 77l56h9Q5hOdrA15GOUdpGxxA4jDXPsZDAKW+3BzNu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Validity
Not Before: Jul 27 07:58:22 2026 GMT
Not After : Aug 3 07:58:22 2026 GMT
Subject: CN=6a670f9e-68ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:7d:b7:cd:57:03:ef:27:11:79:aa:65:5c:
a6:2d:29:b7:4d:c1:0b:6c:2b:8b:57:a4:f2:de:7f:
33:de:f4:43:03:fd:9d:af:d4:65:a7:c2:4d:0c:f3:
fa:05:c4:dc:4c:09:7f:ca:44:22:27:0c:c7:af:ae:
f6:2a:52:0d:dc:ca:40:f7:0f:e8:4f:24:9c:c1:44:
3a:e4:f5:30:9f:29:51:41:5d:d7:09:dd:fe:f1:a4:
8d:87:6e:a8:4c:a4:5a:1d:4e:42:ba:b5:92:10:49:
c0:56:35:64:cc:fa:27:72:5f:65:87:df:0c:1e:90:
1d:06:7b:35:01:ed:b2:31:7e:d1:7b:76:3f:00:c2:
f4:3b:4b:6e:34:be:a2:86:d2:b9:31:41:2f:3f:86:
5d:ea:6a:16:d0:fb:ac:b2:e3:4d:4c:ca:fc:41:fc:
ab:5b:3d:cd:a5:b7:e2:67:b4:79:dc:4e:0c:f8:42:
88:df:b1:b4:43:4e:4d:8d:4c:44:7e:52:e0:a8:65:
d8:37:da:0c:dd:31:c8:ec:41:9d:79:bd:e6:45:94:
e1:df:c9:8c:cb:be:b4:10:71:b9:9a:db:05:3b:d3:
ac:67:7c:4a:79:3e:54:62:a2:27:d4:50:d7:40:b2:
69:55:bc:32:44:55:87:ac:08:0f:d4:98:b1:b5:08:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:13:00:84:E0:FF:FB:D8:06:88:89:CC:F1:CD:4E:7E:A9:B5:0B
X509v3 Authority Key Identifier:
keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:e6:2e:be:5d:80:c8:a1:e1:72:c6:c1:a9:01:c3:5b:39:
d1:5f:b9:d8:df:ce:fa:cb:d5:46:66:63:f2:a1:da:9a:c9:4b:
3a:0c:e1:f6:46:8d:91:7f:d6:b2:c3:d8:40:1f:0b:d9:9b:a6:
e4:50:62:d3:86:be:a1:b5:ef:3b:ce:37:71:59:d4:01:e5:98:
96:91:07:5f:c5:ea:f6:92:5d:9e:01:df:c6:ec:ad:29:f0:51:
82:f6:6a:c1:47:57:b8:e6:3e:58:53:17:61:e7:4d:3a:10:e1:
c3:1b:e8:c3:d9:af:cf:f9:4a:cb:65:1b:45:a0:64:1d:35:e5:
d6:b0:29:52:bd:67:77:f0:43:85:a5:5a:b0:e7:a6:47:8e:04:
c8:cc:ce:06:b0:7f:65:06:5f:df:25:34:b6:eb:ea:e6:a4:12:
00:22:63:e2:a3:fc:74:d8:a1:c6:8f:17:a4:69:e6:b4:19:9f:
58:06:f5:b5:83:5a:5c:59:e9:60:04:30:05:96:04:ff:b3:33:
c7:df:53:ce:63:a4:7c:72:68:b8:bd:7a:f6:9f:4a:e1:d8:31:
22:22:59:88:5d:b9:39:a5:71:03:60:26:1f:7a:6e:1f:a7:20:
46:09:75:c5:93:b5:48:d0:53:78:83:88:22:0c:e9:42:2d:9e:
80:be:ea:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRBODAxMTAvBgNVBAUTKDNGRDdGNTU1RkM3RDZGQzIzNTM5QTNBNjIxRUYyRDA0
OEQ0QzdDQzcwHhcNMjYwNzI3MDc1ODIyWhcNMjYwODAzMDc1ODIyWjAYMRYwFAYD
VQQDEw02YTY3MGY5ZS02OGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCJ9t81XA+8nEXmqZVymLSm3TcELbCuLV6Ty3n8z3vRDA/2dr9Rlp8JNDPP6
BcTcTAl/ykQiJwzHr672KlIN3MpA9w/oTyScwUQ65PUwnylRQV3XCd3+8aSNh26o
TKRaHU5CurWSEEnAVjVkzPoncl9lh98MHpAdBns1Ae2yMX7Re3Y/AML0O0tuNL6i
htK5MUEvP4Zd6moW0PussuNNTMr8QfyrWz3NpbfiZ7R53E4M+EKI37G0Q05NjUxE
flLgqGXYN9oM3THI7EGdeb3mRZTh38mMy760EHG5mtsFO9OsZ3xKeT5UYqIn1FDX
QLJpVbwyRFWHrAgP1JixtQhP+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLE6EwCE
4P/72AaIiczxzU5+qbULMB8GA1UdIwQYMBaAFD/X9VX8fW/CNTmjpiHvLQSNTHzH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEE4MC8yOUVDNzNCQUU0
RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4STFPYU9tSWU4dEJJMU1m
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEE4MC8yOUVDNzNCQUU0RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4
STFPYU9tSWU4dEJJMU1mTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZcvmLr5dgMih4XLGwakBw1s50V+52N/O+svVRmZj8qHamslLOgzh9kaNkX/W
ssPYQB8L2Zum5FBi04a+obXvO843cVnUAeWYlpEHX8Xq9pJdngHfxuytKfBRgvZq
wUdXuOY+WFMXYedNOhDhwxvow9mvz/lKy2UbRaBkHTXl1rApUr1nd/BDhaVasOem
R44EyMzOBrB/ZQZf3yU0tuvq5qQSACJj4qP8dNihxo8XpGnmtBmfWAb1tYNaXFnp
YAQwBZYE/7Mzx99TzmOkfHJouL169p9K4dgxIiJZiF25OaVxA2AmH3puH6cgRgl1
xZO1SNBTeIOIIgzpQi2egL7qIA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:49 2026 by rpki-client