
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier: FqMpCwOatJzR64bprnfF5sNqLSG1Xt8c2xL2EDwcAMk=
Subject key identifier: 7A:14:49:EF:6F:62:3E:66:8F:9E:03:50:30:55:F5:1E:B6:ED:AD:DF
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number: 0238
Signing time: Mon 27 Jul 2026 04:07:34 +0000
Manifest this update: Mon 27 Jul 2026 04:07:34 +0000
Manifest next update: Mon 03 Aug 2026 04:07:34 +0000
Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: EGLG3hNaytlYUMKuV9khY0JQZpA2xVX2kJk/tQga3IM=)
2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Validity
Not Before: Jul 27 04:07:34 2026 GMT
Not After : Aug 3 04:07:34 2026 GMT
Subject: CN=6a66d986-7c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:89:ae:c5:4f:89:dd:1d:01:a3:71:98:14:
7f:57:c2:32:0a:d9:cf:68:25:ad:6d:68:dd:7c:74:
75:eb:42:c0:d9:83:31:52:ec:fb:62:75:17:19:9e:
bd:93:09:14:50:de:4a:6b:24:06:6a:e9:96:80:11:
a8:86:2b:4a:c4:0f:0d:91:2a:ae:b3:eb:2b:6e:81:
ec:eb:6a:6e:76:82:7c:26:84:fd:00:ec:02:cf:6d:
46:cb:5b:ec:86:46:61:f1:70:ad:fc:d3:b7:e7:bd:
46:f2:2e:d8:ee:b4:bc:10:4f:44:5b:77:d0:ff:93:
db:68:b1:1f:8a:1f:43:c8:84:84:01:1a:2f:4a:71:
08:73:1d:ed:34:20:f9:99:63:0b:7f:63:85:81:94:
c6:42:01:50:e3:ed:f3:41:d3:29:67:8e:d7:bc:69:
60:65:d5:ff:fb:fd:1e:ea:ae:a9:0c:80:ae:a3:66:
53:db:bc:26:0c:11:a4:e2:e3:e4:e9:dc:56:01:9c:
aa:3c:15:ef:e7:24:26:45:e5:eb:eb:03:c9:ca:f8:
f5:da:36:ef:b6:99:5e:81:49:67:d6:ae:ac:52:c9:
b8:db:7d:64:b2:f0:63:9a:a6:41:86:a0:6b:2a:81:
98:69:72:2d:6d:29:a2:2c:89:fd:54:db:e0:7e:32:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:49:EF:6F:62:3E:66:8F:9E:03:50:30:55:F5:1E:B6:ED:AD:DF
X509v3 Authority Key Identifier:
keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:af:24:4b:72:3e:6b:4f:9d:ae:03:74:3f:3d:51:83:3c:0a:
20:17:9e:64:d1:f4:4a:8a:10:72:47:34:eb:68:c4:89:18:c5:
87:23:86:81:c3:07:cc:1f:7b:c2:9b:86:60:53:f9:a2:53:e8:
e7:e9:de:0c:d6:72:e7:a8:28:9a:68:f5:42:ce:42:c8:d5:86:
c2:14:4b:f2:f2:17:d8:36:51:c3:08:85:f1:13:86:af:d5:89:
88:8d:b6:02:38:40:7d:fb:8b:d6:78:68:34:e9:4f:25:c0:41:
dd:67:3a:92:b6:45:63:32:7f:02:68:74:a4:86:c0:80:1b:77:
cb:63:c4:27:db:64:0f:2a:b1:e8:04:fe:a0:92:cf:df:8e:26:
f6:40:3c:c4:c5:13:22:dc:30:2a:bf:4a:a3:2a:85:1d:ed:76:
d8:6b:80:cd:6b:7a:bf:ec:ad:c2:d8:a0:98:f7:b6:fe:90:a5:
4b:d9:26:d4:08:73:c0:9d:62:a0:dd:ec:b2:41:21:ff:43:26:
33:2b:e9:1a:18:b1:05:a7:bf:c7:58:ac:af:fc:f5:40:87:23:
0a:af:7d:a0:97:be:40:15:de:b9:81:51:51:33:89:f0:e6:d3:
a0:84:d9:8b:26:b2:aa:2c:44:ce:e8:52:57:88:9d:84:28:a8:
a0:b1:3a:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD
NEY4OTdCNzYwHhcNMjYwNzI3MDQwNzM0WhcNMjYwODAzMDQwNzM0WjAYMRYwFAYD
VQQDEw02YTY2ZDk4Ni03YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyOJrsVPid0dAaNxmBR/V8IyCtnPaCWtbWjdfHR160LA2YMxUuz7YnUXGZ69
kwkUUN5KayQGaumWgBGohitKxA8NkSqus+srboHs62pudoJ8JoT9AOwCz21Gy1vs
hkZh8XCt/NO3571G8i7Y7rS8EE9EW3fQ/5PbaLEfih9DyISEARovSnEIcx3tNCD5
mWMLf2OFgZTGQgFQ4+3zQdMpZ47XvGlgZdX/+/0e6q6pDICuo2ZT27wmDBGk4uPk
6dxWAZyqPBXv5yQmReXr6wPJyvj12jbvtplegUln1q6sUsm4231ksvBjmqZBhqBr
KoGYaXItbSmiLIn9VNvgfjIzmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoUSe9v
Yj5mj54DUDBV9R627a3fMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE
QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1
eHptLXBzMVo1NUxFLUplM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh68kS3I+a0+drgN0Pz1RgzwKIBeeZNH0SooQckc062jEiRjFhyOGgcMHzB97
wpuGYFP5olPo5+neDNZy56gommj1Qs5CyNWGwhRL8vIX2DZRwwiF8ROGr9WJiI22
AjhAffuL1nhoNOlPJcBB3Wc6krZFYzJ/Amh0pIbAgBt3y2PEJ9tkDyqx6AT+oJLP
344m9kA8xMUTItwwKr9KoyqFHe122GuAzWt6v+ytwtigmPe2/pClS9km1AhzwJ1i
oN3sskEh/0MmMyvpGhixBae/x1isr/z1QIcjCq99oJe+QBXeuYFRUTOJ8ObToITZ
iyayqixEzuhSV4idhCiooLE6BQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:40 2026 by rpki-client