
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier: MAvc+X3505NFtWi+DAIs2K103db8pSo+6xb1kdzxtjM=
Subject key identifier: 63:C0:58:08:76:2F:F4:76:C5:BA:A9:D6:81:45:D7:EB:3A:15:74:A6
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0DC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number: 0DC6
Signing time: Tue 28 Jul 2026 18:01:27 +0000
Manifest this update: Tue 28 Jul 2026 18:01:27 +0000
Manifest next update: Tue 04 Aug 2026 18:01:27 +0000
Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: Rl41KdY/utSiH9ShbrNvlbFDW3Bqbu1UaLnH+W11UzA=)
2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=)
3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Jul 28 18:01:27 2026 GMT
Not After : Aug 4 18:01:27 2026 GMT
Subject: CN=6a68ee77-bee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:23:87:89:9f:f8:8c:e2:2d:f9:78:88:0c:
45:92:a9:ff:10:1f:c6:b3:ad:b9:6f:7f:43:09:f9:
97:9a:85:c5:2d:ec:4c:40:9a:7c:b2:eb:44:bd:09:
d0:5f:9e:25:93:1b:5e:a7:58:6a:f2:fe:cf:10:93:
bd:a9:3b:36:b2:ec:10:e7:53:dd:a5:c2:5e:03:62:
e7:db:26:31:74:55:21:c4:81:96:f1:bd:70:51:3a:
bb:2f:a1:2e:f4:a3:38:11:bd:af:a5:f5:c7:9e:ff:
1d:1a:1b:f1:b2:df:35:6e:f6:1b:7c:17:f1:b6:c0:
7f:8e:2a:6b:2a:2e:fa:6c:e1:88:28:f6:a4:19:01:
bf:7b:79:10:96:78:3b:dc:6c:7c:d2:1d:e6:96:40:
7f:01:aa:b8:27:ca:4f:96:33:69:72:6e:9e:bf:96:
80:1c:12:cd:d8:c3:b6:2c:94:dd:4f:1e:9d:26:ca:
e9:92:c2:18:b1:a9:93:96:ff:b5:69:90:3c:0b:64:
fd:7b:ca:f5:09:d5:d1:77:1b:27:57:de:47:9a:43:
a4:c7:d3:8a:29:b2:54:38:be:13:ab:cf:da:0d:c1:
7f:53:b3:37:fd:3d:38:4f:4f:37:b1:17:ec:be:11:
cd:5c:aa:91:b8:e4:96:b6:39:b7:83:d6:84:3b:ff:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:58:08:76:2F:F4:76:C5:BA:A9:D6:81:45:D7:EB:3A:15:74:A6
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:fc:1f:1f:c7:81:35:02:de:09:8f:47:a6:20:35:3e:1c:
f8:1d:b5:0a:dc:93:bd:a4:00:d8:12:bb:f3:8e:ad:a6:ad:cf:
01:ad:15:78:e1:2e:4f:c3:5e:1e:53:c1:aa:b7:4b:98:71:7f:
63:f2:e4:55:48:f0:45:48:4b:4c:34:32:ff:91:cc:ad:dc:2d:
19:39:43:7a:43:e9:16:4b:68:20:ef:5e:73:6c:60:05:81:ea:
4f:47:77:5e:08:54:49:eb:5c:20:ae:7f:e1:ae:80:b0:f8:dc:
0b:a8:a0:cc:0c:59:18:04:cb:9c:3a:33:0a:00:26:ee:61:b8:
8f:6e:b3:ba:13:0a:04:46:a3:ac:bb:e7:36:c8:21:a0:a0:fa:
55:9c:cc:28:94:c1:df:7b:4f:22:24:db:c2:8f:3d:a7:af:fd:
0a:16:a1:4d:94:b7:e7:90:2a:f5:d0:a5:64:20:8d:bd:0a:ec:
e3:64:9c:75:40:21:f9:d9:38:f7:e4:b3:d6:bb:db:dd:2a:bb:
1e:bc:bb:b2:60:c3:86:d4:66:ff:e8:e6:32:a7:11:35:38:be:
30:11:04:ab:78:ef:df:4b:95:5f:0e:15:22:db:6d:1e:a9:f9:
c7:c6:a4:f9:21:42:31:39:1f:9f:1c:f3:37:47:58:c1:88:73:
c8:78:21:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0
MTg5QUYxOTgwHhcNMjYwNzI4MTgwMTI3WhcNMjYwODA0MTgwMTI3WjAYMRYwFAYD
VQQDEw02YTY4ZWU3Ny1iZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgwQjh4mf+IziLfl4iAxFkqn/EB/Gs625b39DCfmXmoXFLexMQJp8sutEvQnQ
X54lkxtep1hq8v7PEJO9qTs2suwQ51PdpcJeA2Ln2yYxdFUhxIGW8b1wUTq7L6Eu
9KM4Eb2vpfXHnv8dGhvxst81bvYbfBfxtsB/jiprKi76bOGIKPakGQG/e3kQlng7
3Gx80h3mlkB/Aaq4J8pPljNpcm6ev5aAHBLN2MO2LJTdTx6dJsrpksIYsamTlv+1
aZA8C2T9e8r1CdXRdxsnV95HmkOkx9OKKbJUOL4Tq8/aDcF/U7M3/T04T083sRfs
vhHNXKqRuOSWtjm3g9aEO//9JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPAWAh2
L/R2xbqp1oFF1+s6FXSmMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy
RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX
clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWOn8Hx/HgTUC3gmPR6YgNT4c+B21CtyTvaQA2BK7846tpq3PAa0VeOEuT8Ne
HlPBqrdLmHF/Y/LkVUjwRUhLTDQy/5HMrdwtGTlDekPpFktoIO9ec2xgBYHqT0d3
XghUSetcIK5/4a6AsPjcC6igzAxZGATLnDozCgAm7mG4j26zuhMKBEajrLvnNsgh
oKD6VZzMKJTB33tPIiTbwo89p6/9ChahTZS355Aq9dClZCCNvQrs42ScdUAh+dk4
9+Sz1rvb3Sq7Hry7smDDhtRm/+jmMqcRNTi+MBEEq3jv30uVXw4VItttHqn5x8ak
+SFCMTkfnxzzN0dYwYhzyHghIw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:27 2026 by rpki-client