
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: VR6igsPiPr7LjuZTsQFsXhZqU212WP3VmEzpebeDBDQ=
Subject key identifier: 34:50:96:F4:AF:50:A9:0F:07:93:C4:B2:BE:8A:AB:B8:54:C5:90:43
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 0885
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 087A
Signing time: Tue 28 Jul 2026 21:11:05 +0000
Manifest this update: Tue 28 Jul 2026 21:11:04 +0000
Manifest next update: Tue 04 Aug 2026 21:11:04 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: RZLJRNvLnmTcmjeUHX8TJyhndaKQEqr2TUdhAM4OmwA=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: qtMYIEnbiq7hnTXu83dyb1pR6Ew8tkioJCqNAvjo/dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Jul 28 21:11:04 2026 GMT
Not After : Aug 4 21:11:04 2026 GMT
Subject: CN=6a691ae9-27cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:d9:5a:5e:e4:01:0c:23:b8:f5:dd:3f:69:
6e:31:f8:e0:58:e4:cc:46:85:ae:07:21:d1:41:67:
16:1b:7a:e8:7d:69:30:18:bd:71:22:5a:c8:5f:f5:
9a:a3:73:a9:d9:28:d4:c8:bf:11:20:d5:1d:ec:02:
35:5a:5a:4c:27:e8:5d:35:0f:78:c4:9f:84:d9:d5:
e9:21:b9:dd:fb:fe:0a:9d:a6:81:0f:5b:00:cb:fc:
f8:8d:3b:76:90:f9:5f:a4:59:2d:8c:47:df:e3:29:
a0:00:a3:af:1d:3a:2e:4f:a4:dc:ed:d2:b3:33:b4:
65:fc:53:01:b7:b8:f9:a2:a9:de:38:6c:64:c2:0f:
e8:4f:bc:b6:8b:97:05:76:30:89:05:54:4b:f6:07:
0c:eb:5a:94:3f:52:69:9b:1f:10:e7:ec:72:f5:96:
d7:51:2b:df:3e:c3:7b:df:ac:0d:6a:a9:5f:63:ed:
cc:bd:e6:6d:22:6c:b1:99:65:34:7f:99:45:fa:d1:
17:84:25:e4:cb:da:ac:f8:8e:14:4d:45:56:77:fa:
a0:66:4d:02:b8:d5:b6:72:3c:ad:e4:71:f6:09:3c:
cd:81:5c:96:98:e0:5b:2b:24:e0:b1:36:6b:44:4c:
58:54:a7:41:9b:29:15:a6:1f:80:3f:e0:c3:0a:a0:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:96:F4:AF:50:A9:0F:07:93:C4:B2:BE:8A:AB:B8:54:C5:90:43
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6b:aa:34:f1:64:44:3c:c4:f8:7a:2e:7b:57:a1:f1:76:85:
6e:2f:14:d2:54:f3:f4:f8:28:2e:ab:89:1c:f9:42:24:b0:dd:
8e:ae:d9:62:6c:31:3b:54:d2:d5:19:a9:9e:2d:6e:2e:ac:e2:
ab:32:8d:c6:36:aa:e5:99:af:3e:32:fa:81:95:7e:22:58:fe:
2a:f2:12:04:b2:89:36:bb:d2:ed:f9:8f:b9:79:58:15:7f:97:
9e:86:10:ca:99:ce:a5:fa:08:da:b5:73:14:a8:c5:4f:02:2a:
c7:46:7a:85:dc:db:b3:c3:23:d5:89:d6:24:d0:07:9f:a9:8e:
19:28:4b:14:20:76:58:8d:e0:c3:0e:62:ec:a2:82:37:48:a9:
a3:66:5d:a3:75:a3:0e:cb:35:c1:b4:b8:a6:a5:83:3a:05:0f:
7e:0d:ec:5c:e2:59:43:dc:0c:85:b2:7f:84:69:16:e7:a5:b3:
d3:f9:97:d3:1c:bc:fb:03:42:c0:4d:e4:d4:e9:43:b6:01:e8:
be:83:e3:ba:11:3c:89:ac:e0:d8:8c:56:e7:73:36:6d:e8:04:
7a:a8:66:1d:e5:3a:5e:30:62:f0:bb:51:c0:ae:fd:7b:36:85:
af:5e:3b:30:41:20:d9:c1:91:f1:1f:2e:4d:2f:40:9c:14:3a:
37:08:fd:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5
RjIwOUY0MUUwHhcNMjYwNzI4MjExMTA0WhcNMjYwODA0MjExMTA0WjAYMRYwFAYD
VQQDEw02YTY5MWFlOS0yN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFzZWl7kAQwjuPXdP2luMfjgWOTMRoWuByHRQWcWG3rofWkwGL1xIlrIX/Wa
o3Op2SjUyL8RINUd7AI1WlpMJ+hdNQ94xJ+E2dXpIbnd+/4KnaaBD1sAy/z4jTt2
kPlfpFktjEff4ymgAKOvHTouT6Tc7dKzM7Rl/FMBt7j5oqneOGxkwg/oT7y2i5cF
djCJBVRL9gcM61qUP1Jpmx8Q5+xy9ZbXUSvfPsN736wNaqlfY+3MveZtImyxmWU0
f5lF+tEXhCXky9qs+I4UTUVWd/qgZk0CuNW2cjyt5HH2CTzNgVyWmOBbKyTgsTZr
RExYVKdBmykVph+AP+DDCqCpWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRQlvSv
UKkPB5PEsr6Kq7hUxZBDMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4
NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD
Tld4ZmlCY0JqejJmSUo5QjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe2uqNPFkRDzE+Houe1eh8XaFbi8U0lTz9PgoLquJHPlCJLDdjq7ZYmwxO1TS
1Rmpni1uLqziqzKNxjaq5ZmvPjL6gZV+Ilj+KvISBLKJNrvS7fmPuXlYFX+XnoYQ
ypnOpfoI2rVzFKjFTwIqx0Z6hdzbs8Mj1YnWJNAHn6mOGShLFCB2WI3gww5i7KKC
N0ipo2Zdo3WjDss1wbS4pqWDOgUPfg3sXOJZQ9wMhbJ/hGkW56Wz0/mX0xy8+wNC
wE3k1OlDtgHovoPjuhE8iazg2IxW53M2begEeqhmHeU6XjBi8LtRwK79ezaFr147
MEEg2cGR8R8uTS9AnBQ6Nwj9rQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:37:00 2026 by rpki-client