
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json)
Hash identifier: qYSojgny9FDGqoq5qEtqcs6va/uKVJT/8hOlomIRxhQ=
Subject key identifier: 2A:F2:D4:F8:EE:86:69:D1:B1:4A:FE:27:73:ED:5C:B7:B9:87:38:BF
Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
Manifest number: 0D87
Signing time: Tue 28 Jul 2026 18:03:58 +0000
Manifest this update: Tue 28 Jul 2026 18:03:57 +0000
Manifest next update: Tue 04 Aug 2026 18:03:57 +0000
Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: SDPlxYlitkMqDtoC0Z9fqQQNKtUHMiXMPriRUD+2piY=)
2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: 6KI10DgP62KhCRKVFYn98frZWqu0hQ3t15QV7tzSmEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76
Validity
Not Before: Jul 28 18:03:57 2026 GMT
Not After : Aug 4 18:03:57 2026 GMT
Subject: CN=6a68ef0d-b40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:b1:09:16:2b:64:07:8b:e7:3a:a3:1b:32:
cd:a0:b5:1c:46:f0:0e:16:fc:d7:26:e7:1e:76:8d:
af:9b:cf:f2:0a:f0:60:15:8e:41:26:79:5f:7a:1a:
0e:a5:94:db:f3:0d:5b:84:fc:20:29:9c:63:52:1a:
71:6a:6c:cb:ec:ea:93:7e:8a:ce:40:a9:a6:93:ab:
c6:1d:68:3c:9b:a7:0b:9f:15:db:b1:04:22:3d:a3:
eb:2d:da:3a:1c:44:32:39:37:56:72:a1:5f:70:91:
a9:2c:2e:8f:70:e7:66:79:2a:f6:5a:91:e2:e9:8a:
39:9b:e4:3c:42:25:4b:bc:99:db:9f:de:a8:af:77:
7c:0e:6c:96:a6:16:b4:25:29:3c:8f:6b:49:f7:2b:
c1:a5:5f:ce:a2:e2:14:ac:b4:fc:50:0e:af:d3:e2:
52:ef:06:68:72:6e:8e:de:86:8b:95:d2:55:1e:a8:
dd:00:f9:84:dc:bb:55:a9:28:8e:b0:90:64:c7:f0:
3d:59:34:6a:72:c9:b6:07:b5:44:47:94:07:52:bf:
2e:10:b8:a3:1a:e7:18:d5:aa:66:7e:af:17:4b:de:
28:bf:2d:a2:e9:48:23:4d:62:cc:34:88:45:e5:d7:
5a:07:17:13:08:8d:f6:79:82:b7:69:e2:5d:5d:61:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:D4:F8:EE:86:69:D1:B1:4A:FE:27:73:ED:5C:B7:B9:87:38:BF
X509v3 Authority Key Identifier:
keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:dc:01:83:c7:cb:3e:a6:26:90:99:d7:d7:66:88:c2:fe:
39:6f:a0:1c:f0:67:ea:e9:85:c3:5a:01:18:df:ae:75:b3:ce:
77:9d:ac:76:20:46:2b:c4:ec:c9:fd:2c:b7:43:09:55:1b:33:
18:3c:0d:bd:38:04:cf:db:49:39:68:d9:52:b8:ef:91:a8:48:
34:ff:6c:a7:85:3a:5f:0a:5c:9e:69:bb:92:ec:05:aa:f6:96:
d7:39:77:8d:91:13:f5:f9:f1:b2:dc:5f:65:fd:ab:b7:72:3b:
52:79:c5:ca:00:cb:92:38:8e:06:c7:64:1b:b3:a5:d6:ca:b0:
e0:15:58:03:6b:7b:95:ee:79:bc:bd:7d:1a:1a:48:69:71:38:
8b:51:01:64:34:ca:89:45:07:37:58:4a:d0:3d:3d:de:11:ff:
db:a5:05:2c:c0:4c:af:e3:c0:12:d7:f7:66:9b:b0:ed:e6:c0:
53:e0:1f:b1:f7:67:76:8f:e0:04:07:ed:ac:da:14:87:c4:74:
c0:12:a1:b0:68:95:e9:ca:67:e8:dd:bb:a8:a5:97:87:00:81:
64:2b:22:5a:72:0e:39:3a:d0:13:52:45:03:40:ac:d8:f2:8b:
68:f6:5a:69:84:5c:53:99:28:86:3a:86:27:18:12:3e:1e:ff:
03:c1:08:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB
OTIxMEZENzYwHhcNMjYwNzI4MTgwMzU3WhcNMjYwODA0MTgwMzU3WjAYMRYwFAYD
VQQDEw02YTY4ZWYwZC1iNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqyxCRYrZAeL5zqjGzLNoLUcRvAOFvzXJucedo2vm8/yCvBgFY5BJnlfehoO
pZTb8w1bhPwgKZxjUhpxamzL7OqTforOQKmmk6vGHWg8m6cLnxXbsQQiPaPrLdo6
HEQyOTdWcqFfcJGpLC6PcOdmeSr2WpHi6Yo5m+Q8QiVLvJnbn96or3d8DmyWpha0
JSk8j2tJ9yvBpV/OouIUrLT8UA6v0+JS7wZocm6O3oaLldJVHqjdAPmE3LtVqSiO
sJBkx/A9WTRqcsm2B7VER5QHUr8uELijGucY1apmfq8XS94ovy2i6UgjTWLMNIhF
5ddaBxcTCI32eYK3aeJdXWHdCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCry1Pju
hmnRsUr+J3PtXLe5hzi/MB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw
QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU
V2s0cFp4RUNBdWVwSVFfWFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEyHcAYPHyz6mJpCZ19dmiML+OW+gHPBn6umFw1oBGN+udbPOd52sdiBGK8Ts
yf0st0MJVRszGDwNvTgEz9tJOWjZUrjvkahINP9sp4U6Xwpcnmm7kuwFqvaW1zl3
jZET9fnxstxfZf2rt3I7UnnFygDLkjiOBsdkG7Ol1sqw4BVYA2t7le55vL19GhpI
aXE4i1EBZDTKiUUHN1hK0D093hH/26UFLMBMr+PAEtf3Zpuw7ebAU+Afsfdndo/g
BAftrNoUh8R0wBKhsGiV6cpn6N27qKWXhwCBZCsiWnIOOTrQE1JFA0Cs2PKLaPZa
aYRcU5kohjqGJxgSPh7/A8EIpg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:34 2026 by rpki-client