
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json)
Hash identifier: 137wOoIULOh++w9RuMj2xgRGxMm1Eh+54mQm2Vt56BY=
Subject key identifier: 8D:32:E7:19:BF:3F:AF:F5:9D:AE:67:D7:C7:01:5B:0D:08:5B:FD:33
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial: 040F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
Manifest number: 0405
Signing time: Wed 29 Jul 2026 01:10:30 +0000
Manifest this update: Wed 29 Jul 2026 01:10:30 +0000
Manifest next update: Wed 05 Aug 2026 01:10:30 +0000
Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: ZGmbYcmHJXPgE0/fh8T/SeYAoB0Iz9xdBpfCeyMV8dw=)
2: 1B979C223EE411F19E8F25E5B8833773.roa (hash: wi5Jdm400NVVrEhqsCRygJRPgFVgnSFV5lXcRFaVlfo=)
3: 815A09C645F311F19D4C8BBB9A833773.roa (hash: gXEe/7OkKqUCUDk1lxEeptn1iCrY7lDmXDjXXtgnbdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Validity
Not Before: Jul 29 01:10:30 2026 GMT
Not After : Aug 5 01:10:30 2026 GMT
Subject: CN=6a695306-b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:88:ae:f0:ef:8d:7d:4d:e0:6c:01:63:88:
de:25:5b:b6:5b:89:7b:f9:25:b1:cb:44:d8:eb:da:
17:a8:a5:ef:d8:75:1d:3f:df:29:89:03:f4:a4:50:
45:a0:26:62:af:3a:e7:98:55:0e:ac:c9:c5:e8:77:
e8:b2:9e:5c:13:0e:7e:49:63:29:e5:b4:91:df:40:
5c:a7:fb:94:bb:21:44:ec:0a:13:49:2c:09:4b:60:
57:39:b2:aa:37:a4:91:e4:94:32:51:30:2b:13:6d:
c4:2d:32:76:e6:14:33:8a:03:d4:78:95:63:23:43:
c9:eb:79:0b:fb:bd:4d:e7:c8:0d:80:60:c0:34:11:
8a:57:fc:94:97:88:16:e7:64:48:d8:93:aa:dd:14:
4a:ab:14:8f:e7:71:39:b6:be:b5:e4:30:02:69:f0:
97:cb:22:16:b7:44:fe:a5:35:de:a7:a7:58:55:bc:
08:a2:70:5a:a4:b1:72:0b:4f:db:f3:db:5c:55:48:
d2:c6:db:62:5e:f5:f4:7f:99:b9:24:10:c8:7e:b3:
c8:7d:5a:1b:dc:9c:9b:6f:ea:fb:b0:58:03:dd:0e:
a1:3b:8c:34:6f:15:b4:a3:ac:31:43:ac:f9:06:44:
bd:1b:dc:a4:7e:de:c2:83:78:d4:95:d7:20:18:7b:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:E7:19:BF:3F:AF:F5:9D:AE:67:D7:C7:01:5B:0D:08:5B:FD:33
X509v3 Authority Key Identifier:
keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:79:ea:52:09:6d:5d:ab:8f:dc:88:12:5c:bb:bd:d7:0e:72:
1a:22:4f:a3:6a:95:96:ad:4a:eb:2b:2f:23:d1:03:1c:e4:d0:
ec:ee:c1:95:5b:0d:b2:bd:4e:95:2f:8c:0a:9c:34:c4:ef:10:
d8:40:f9:e4:54:af:4d:25:bd:f9:88:6e:54:47:87:0f:a3:79:
35:e3:a5:bd:74:92:77:04:85:ef:1e:6f:ad:00:f0:40:50:7b:
78:90:68:ae:53:14:7d:6b:80:a8:a4:84:86:bf:20:af:0e:a3:
50:43:90:dc:a6:fd:1f:1d:a2:c9:67:68:7c:a6:e5:ef:fb:b8:
cf:91:89:fe:54:41:67:69:15:43:7c:13:d2:76:a7:90:0b:78:
82:b3:7d:3a:b0:36:22:67:d4:47:34:be:5a:df:06:60:f4:7a:
36:bc:48:fa:f9:77:da:9d:ad:0a:f2:1d:b0:49:b3:5c:20:2e:
44:b3:63:ec:fa:1f:bb:df:f0:c7:99:69:c3:74:48:b8:b2:73:
e0:1a:97:75:44:b7:46:2b:68:f4:22:4c:2b:90:5f:d5:b1:bc:
25:aa:4b:6e:14:ad:d7:52:e1:4f:ec:69:7d:b3:58:7c:b4:79:
e2:6d:cb:34:83:61:62:bc:95:4b:f2:45:da:ae:dc:a2:ac:0d:
0e:ea:73:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF
NTM3RjVGQ0UwHhcNMjYwNzI5MDExMDMwWhcNMjYwODA1MDExMDMwWjAYMRYwFAYD
VQQDEw02YTY5NTMwNi1iODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAaIrvDvjX1N4GwBY4jeJVu2W4l7+SWxy0TY69oXqKXv2HUdP98piQP0pFBF
oCZirzrnmFUOrMnF6Hfosp5cEw5+SWMp5bSR30Bcp/uUuyFE7AoTSSwJS2BXObKq
N6SR5JQyUTArE23ELTJ25hQzigPUeJVjI0PJ63kL+71N58gNgGDANBGKV/yUl4gW
52RI2JOq3RRKqxSP53E5tr615DACafCXyyIWt0T+pTXep6dYVbwIonBapLFyC0/b
89tcVUjSxttiXvX0f5m5JBDIfrPIfVob3Jybb+r7sFgD3Q6hO4w0bxW0o6wxQ6z5
BkS9G9ykft7Cg3jUldcgGHvVJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0y5xm/
P6/1na5n18cBWw0IW/0zMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5
RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx
anJmVTlzdnBaSHZsTl9YODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlXnqUgltXauP3IgSXLu91w5yGiJPo2qVlq1K6ysvI9EDHOTQ7O7BlVsNsr1O
lS+MCpw0xO8Q2ED55FSvTSW9+YhuVEeHD6N5NeOlvXSSdwSF7x5vrQDwQFB7eJBo
rlMUfWuAqKSEhr8grw6jUEOQ3Kb9Hx2iyWdofKbl7/u4z5GJ/lRBZ2kVQ3wT0nan
kAt4grN9OrA2ImfURzS+Wt8GYPR6NrxI+vl32p2tCvIdsEmzXCAuRLNj7Pofu9/w
x5lpw3RIuLJz4BqXdUS3Rito9CJMK5Bf1bG8JapLbhSt11LhT+xpfbNYfLR54m3L
NINhYryVS/JF2q7coqwNDupzXA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:15 2026 by rpki-client