
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier: a9mbU7TVwFUtIOU6oR+7xtTHKqoGBx951Pr/yQVCOsc=
Subject key identifier: BF:6E:D3:C3:A9:FD:50:DB:B1:DC:7F:4A:1D:8C:A1:71:8E:9E:6D:88
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number: 05BE
Signing time: Sun 26 Jul 2026 23:59:20 +0000
Manifest this update: Sun 26 Jul 2026 23:59:20 +0000
Manifest next update: Sun 02 Aug 2026 23:59:20 +0000
Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: gNaPc2InmQTVXShk2jW8zpAFFHKfVgFbcgsQKn00nhk=)
2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=)
3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Validity
Not Before: Jul 26 23:59:20 2026 GMT
Not After : Aug 2 23:59:20 2026 GMT
Subject: CN=6a669f58-c014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:d0:60:2f:21:f5:b1:47:a0:4a:b0:25:36:
de:58:8d:02:b5:24:53:20:5c:33:6e:8f:79:19:f1:
b7:d3:dd:f7:f9:be:e5:38:1e:b9:9d:f8:cd:17:68:
b0:bc:ec:6f:46:f3:7a:bc:62:f5:56:36:4b:ee:98:
10:36:7f:9b:10:6f:19:dd:13:04:0c:f7:cc:27:0b:
39:0b:33:37:93:5f:15:81:89:21:32:df:92:01:6b:
a6:b8:4c:aa:a4:b4:e9:ec:54:8f:fb:07:be:c3:ea:
72:e6:f2:12:53:b0:bc:f8:2f:c3:ff:c8:da:1e:2c:
d8:1e:f8:c4:b5:87:cb:3b:e8:8b:57:5f:a7:cf:57:
74:6f:e9:58:17:50:58:84:ae:28:46:bb:10:38:71:
20:c2:ca:79:45:4d:bf:c9:2e:b5:22:b6:93:f0:01:
f8:79:25:60:32:1a:bf:aa:f8:44:ef:4f:63:ed:e2:
8b:04:e2:84:c1:f2:2f:46:59:b7:de:2f:a0:ae:20:
62:6c:ba:02:5b:fe:df:b6:b2:b4:0b:59:ce:23:46:
b2:ff:94:f8:9a:ce:56:6e:3e:d6:f0:b5:d5:64:2a:
22:5b:b8:97:5b:48:51:01:e0:46:f9:51:7b:66:db:
8a:2e:71:86:4c:d8:ab:ea:17:f5:e9:a4:7f:e0:56:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6E:D3:C3:A9:FD:50:DB:B1:DC:7F:4A:1D:8C:A1:71:8E:9E:6D:88
X509v3 Authority Key Identifier:
keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:90:04:00:e5:d5:f9:99:33:31:a4:b5:4a:e9:b7:3a:ef:
7f:83:93:08:4d:da:42:f1:33:6e:4a:24:2c:43:12:6b:fe:a8:
26:ae:aa:0c:1f:cd:c3:5e:c9:b8:c4:3e:2e:35:de:9e:25:22:
9c:92:19:20:a8:f3:a5:4d:ee:20:79:78:32:bd:30:a5:48:63:
8f:de:9d:57:11:59:af:fc:ff:d1:c2:b5:23:16:1c:32:54:74:
cc:fc:ad:b9:ec:7b:56:7e:37:74:91:88:f0:28:7d:4d:e7:b8:
a5:8e:42:66:cf:19:2e:86:76:7f:58:54:83:be:99:be:20:27:
ab:06:8a:49:3c:e9:a1:bf:26:70:c1:e1:23:76:78:c9:cd:63:
0c:d7:ef:9e:7e:b0:90:07:12:ca:23:21:23:97:fe:4c:6e:e1:
94:63:e7:e8:ef:68:22:97:d5:74:71:47:0b:82:e2:44:9d:74:
7b:96:94:cf:49:5c:69:e3:80:b6:4b:c1:71:ae:62:d2:82:58:
01:25:29:96:c8:5d:79:fc:59:ac:11:bf:45:d7:74:59:2a:32:
b1:36:6d:cc:03:5f:53:fa:ec:ae:87:99:82:14:5c:08:42:28:
f9:d2:b3:8a:2d:89:ba:49:5e:3a:63:b6:e1:d0:14:90:4c:8e:
d2:fb:12:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2
MTg3N0FEOUYwHhcNMjYwNzI2MjM1OTIwWhcNMjYwODAyMjM1OTIwWjAYMRYwFAYD
VQQDEw02YTY2OWY1OC1jMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArILQYC8h9bFHoEqwJTbeWI0CtSRTIFwzbo95GfG30933+b7lOB65nfjNF2iw
vOxvRvN6vGL1VjZL7pgQNn+bEG8Z3RMEDPfMJws5CzM3k18VgYkhMt+SAWumuEyq
pLTp7FSP+we+w+py5vISU7C8+C/D/8jaHizYHvjEtYfLO+iLV1+nz1d0b+lYF1BY
hK4oRrsQOHEgwsp5RU2/yS61IraT8AH4eSVgMhq/qvhE709j7eKLBOKEwfIvRlm3
3i+griBibLoCW/7ftrK0C1nOI0ay/5T4ms5Wbj7W8LXVZCoiW7iXW0hRAeBG+VF7
ZtuKLnGGTNir6hf16aR/4FYxkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9u08Op
/VDbsdx/Sh2MoXGOnm2IMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB
ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL
NExkdkVlQTNMT2xoaDNyWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATr+QBADl1fmZMzGktUrptzrvf4OTCE3aQvEzbkokLEMSa/6oJq6qDB/Nw17J
uMQ+LjXeniUinJIZIKjzpU3uIHl4Mr0wpUhjj96dVxFZr/z/0cK1IxYcMlR0zPyt
uex7Vn43dJGI8Ch9Tee4pY5CZs8ZLoZ2f1hUg76ZviAnqwaKSTzpob8mcMHhI3Z4
yc1jDNfvnn6wkAcSyiMhI5f+TG7hlGPn6O9oIpfVdHFHC4LiRJ10e5aUz0lcaeOA
tkvBca5i0oJYASUplshdefxZrBG/Rdd0WSoysTZtzANfU/rsroeZghRcCEIo+dKz
ii2JukleOmO24dAUkEyO0vsSTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:39 2026 by rpki-client