
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: 6S1dTFGTtuPRaNcy2wBHdopdSb4mJsiDtra69Go/hBw=
Subject key identifier: 07:87:1D:6A:F1:7B:14:B5:EF:C5:BD:54:67:33:2F:FD:45:A6:A2:4D
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 0245
Signing time: Mon 27 Jul 2026 03:59:56 +0000
Manifest this update: Mon 27 Jul 2026 03:59:55 +0000
Manifest next update: Mon 03 Aug 2026 03:59:55 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: 7YB+smoBGyMtly/uZRh5m9il8d57qTGGNjlM5e7Vp8c=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: 3JU/RdBTU+wotb53bcqVAvYiAzucQIeHWQfmEF0cNOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Jul 27 03:59:55 2026 GMT
Not After : Aug 3 03:59:55 2026 GMT
Subject: CN=6a66d7bc-03d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:b8:7a:53:bb:00:33:d3:1d:88:a6:c6:6f:
8a:af:1a:d5:5d:b4:47:e6:6a:06:14:9c:30:1e:52:
03:06:30:79:6b:1b:7d:37:76:9e:3d:6e:81:23:5a:
ae:5d:5f:a7:33:6f:1f:a4:cd:4a:3e:23:c1:6f:ed:
c1:c5:7f:fd:1b:12:2e:20:21:34:0c:6d:0c:32:3d:
d3:40:9e:27:21:3c:83:c1:cd:a3:83:b9:38:94:af:
4f:3a:b0:f6:c0:4f:2b:4f:ba:05:10:9b:85:52:b9:
49:0e:81:38:4d:d4:7d:05:e7:c5:1c:fb:f5:8a:32:
76:0e:7e:8c:88:b6:f3:73:f7:ff:43:46:4a:d4:ce:
dc:ba:44:db:e7:0b:01:08:67:1b:91:2d:26:32:a5:
20:b8:df:ba:81:3e:f1:61:8e:0a:46:e1:d3:b4:a4:
43:6b:ee:76:e0:b6:75:df:28:e8:db:f8:f1:22:e0:
67:52:f3:63:11:27:b2:cd:f9:f2:18:c3:ca:05:f5:
66:0b:ba:70:89:15:2e:09:88:60:39:47:1a:f2:6e:
d7:de:06:4c:d0:59:10:dc:42:9d:ea:b8:b6:21:30:
15:ff:4b:65:eb:c9:bb:f4:55:a5:11:24:97:c2:4b:
5b:9f:35:f3:0e:de:3f:b7:0b:57:d0:0d:d9:9d:d1:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:1D:6A:F1:7B:14:B5:EF:C5:BD:54:67:33:2F:FD:45:A6:A2:4D
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7e:04:1c:18:37:cf:b2:af:79:f6:93:fb:a6:fa:d7:35:14:
8c:54:a4:a7:a2:92:7c:39:77:07:03:a4:25:d2:f8:7c:7f:75:
df:33:27:c8:97:86:c3:53:95:bc:22:9a:d8:67:1c:a1:70:6e:
19:94:97:ba:7d:9e:aa:71:da:ad:7d:f8:c2:7f:c6:11:0f:74:
be:36:de:81:58:26:7e:6e:9f:7f:97:b6:67:e3:f0:af:59:22:
7b:55:8d:dd:7c:aa:31:cd:d5:a9:e1:2a:b9:4c:b0:f7:da:bd:
17:55:5b:46:c9:85:69:2e:15:21:d8:9e:62:23:44:eb:36:86:
d8:8e:d3:4c:3c:65:49:ab:70:fa:e5:93:9b:cc:c7:24:3d:b2:
e7:d0:6d:17:da:a0:b0:73:f1:6f:7c:fe:57:ec:08:5f:95:34:
90:36:aa:65:ef:0f:c0:77:8a:8a:50:b1:ca:ce:45:b8:15:70:
76:52:25:b1:1c:a6:29:21:a9:94:ef:5a:d7:d8:e9:91:68:9e:
fd:ea:26:5e:2c:90:be:64:14:5e:7f:dd:91:ef:89:24:31:92:
4b:ae:b4:94:9a:04:13:cc:6a:fb:97:7e:7b:1f:9e:d6:1e:17:
08:00:fe:25:a4:cc:6b:99:5e:37:7b:78:dc:07:4e:94:ac:9c:
5f:dd:cc:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG
RUI0RUI4NkMwHhcNMjYwNzI3MDM1OTU1WhcNMjYwODAzMDM1OTU1WjAYMRYwFAYD
VQQDEw02YTY2ZDdiYy0wM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscm4elO7ADPTHYimxm+KrxrVXbRH5moGFJwwHlIDBjB5axt9N3aePW6BI1qu
XV+nM28fpM1KPiPBb+3BxX/9GxIuICE0DG0MMj3TQJ4nITyDwc2jg7k4lK9POrD2
wE8rT7oFEJuFUrlJDoE4TdR9BefFHPv1ijJ2Dn6MiLbzc/f/Q0ZK1M7cukTb5wsB
CGcbkS0mMqUguN+6gT7xYY4KRuHTtKRDa+524LZ13yjo2/jxIuBnUvNjESeyzfny
GMPKBfVmC7pwiRUuCYhgOUca8m7X3gZM0FkQ3EKd6ri2ITAV/0tl68m79FWlESSX
wktbnzXzDt4/twtX0A3ZndFQlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeHHWrx
exS178W9VGczL/1FpqJNMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD
NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW
ekF2cG05T2RjTEwtdE91R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOn4EHBg3z7KvefaT+6b61zUUjFSkp6KSfDl3BwOkJdL4fH913zMnyJeGw1OV
vCKa2GccoXBuGZSXun2eqnHarX34wn/GEQ90vjbegVgmfm6ff5e2Z+Pwr1kie1WN
3XyqMc3VqeEquUyw99q9F1VbRsmFaS4VIdieYiNE6zaG2I7TTDxlSatw+uWTm8zH
JD2y59BtF9qgsHPxb3z+V+wIX5U0kDaqZe8PwHeKilCxys5FuBVwdlIlsRymKSGp
lO9a19jpkWie/eomXiyQvmQUXn/dke+JJDGSS660lJoEE8xq+5d+ex+e1h4XCAD+
JaTMa5leN3t43AdOlKycX93MvA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:48 2026 by rpki-client