
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json)
Hash identifier: 2w41fSPcqGNGVd7ZNt+giuQ4x27v+7F0sCtO2gGn0Xk=
Subject key identifier: 1B:7D:00:AD:E1:F4:DD:A3:4F:6E:60:20:60:6F:4B:72:A4:A9:F9:F9
Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
Manifest number: 5D
Signing time: Mon 27 Jul 2026 10:27:48 +0000
Manifest this update: Mon 27 Jul 2026 10:27:48 +0000
Manifest next update: Mon 03 Aug 2026 10:27:48 +0000
Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: zJNYbVhu59vMaX7fofj9jS36aOaUt458N98P0X59FdE=)
2: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=)
3: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Validity
Not Before: Jul 27 10:27:48 2026 GMT
Not After : Aug 3 10:27:48 2026 GMT
Subject: CN=6a6732a4-5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:e7:c7:23:73:48:07:bd:e0:0b:70:c0:23:
77:fc:16:12:f9:7d:13:04:3b:2f:91:33:ff:35:05:
70:86:54:65:d8:94:20:15:83:be:8f:0e:f7:8b:e9:
4b:b9:dc:00:3c:47:00:f2:df:14:5f:ec:13:a5:ca:
a9:04:3a:7f:f4:ea:6c:ef:04:fe:5a:c5:e5:4d:f8:
52:40:98:4e:d3:bd:c9:76:5d:54:72:b0:c7:ed:fe:
89:da:a3:b2:79:46:15:4c:b6:ca:2b:d8:69:60:37:
81:35:17:58:dd:62:17:c9:08:ac:be:f5:e5:18:67:
70:00:5d:7f:66:39:a0:c4:72:b9:3f:6b:4c:a5:2a:
45:31:52:6a:e2:a6:0f:3d:5d:08:2c:7a:19:56:30:
ef:ff:4d:5a:e6:63:ef:89:da:6d:a8:c0:7d:62:6c:
c6:3c:cd:4f:a9:88:1d:18:2b:f7:1f:37:49:f0:86:
5b:a4:a8:21:56:9c:26:64:4d:09:b8:ab:25:c6:57:
95:38:23:23:82:a4:3b:58:e4:92:d7:ea:44:d6:a3:
fc:54:27:b9:eb:9c:42:6b:3c:9a:95:e5:4c:f6:d4:
cd:d2:49:58:42:1b:8a:04:b6:24:3f:ee:fa:51:72:
99:94:34:45:99:82:19:b5:05:b3:6b:53:9a:bf:39:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:00:AD:E1:F4:DD:A3:4F:6E:60:20:60:6F:4B:72:A4:A9:F9:F9
X509v3 Authority Key Identifier:
keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:44:a4:88:78:b2:83:b8:6e:fc:08:b1:54:aa:ce:11:27:96:
d4:fe:16:b2:a7:e2:9a:09:37:a2:c1:2a:03:b6:8f:b6:3f:ee:
97:78:cb:06:f3:2b:02:14:20:ec:be:ee:f5:a0:4f:9b:69:18:
ee:c7:43:5e:e9:64:f7:31:90:51:f2:b2:c0:af:ac:ae:f6:f3:
9e:95:c4:d0:85:a2:65:a4:9e:04:db:12:32:8e:23:68:de:eb:
69:8a:9b:ea:93:81:32:7e:3b:d6:e8:09:a7:e1:af:d3:02:8f:
51:05:94:bc:b1:89:00:77:3b:ab:b8:c9:21:4e:7b:e3:d0:0c:
65:9e:1e:74:fd:c0:8c:28:73:3d:a0:eb:8f:c2:23:26:2f:74:
a8:07:62:ea:ff:c9:b0:a4:66:d3:6e:68:82:95:df:f2:9f:da:
b0:7f:dd:e0:4b:4f:da:cb:45:73:11:93:26:e7:03:03:2c:df:
5c:c8:7d:48:e4:86:ae:a6:21:66:7f:4b:8d:69:97:95:07:35:
f5:6e:32:72:15:a3:d6:78:da:20:f1:ae:36:99:5a:9d:4a:6e:
6f:ff:ab:10:7d:55:c3:4b:97:63:83:89:b1:9d:35:29:51:e7:
30:94:a6:08:50:bb:de:9d:e2:04:89:da:fc:51:93:aa:88:f9:
95:cf:59:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3
Q0U4QzczOTAeFw0yNjA3MjcxMDI3NDhaFw0yNjA4MDMxMDI3NDhaMBgxFjAUBgNV
BAMTDTZhNjczMmE0LTVjODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSAOfHI3NIB73gC3DAI3f8FhL5fRMEOy+RM/81BXCGVGXYlCAVg76PDveL6Uu5
3AA8RwDy3xRf7BOlyqkEOn/06mzvBP5axeVN+FJAmE7Tvcl2XVRysMft/onao7J5
RhVMtsor2GlgN4E1F1jdYhfJCKy+9eUYZ3AAXX9mOaDEcrk/a0ylKkUxUmripg89
XQgsehlWMO//TVrmY++J2m2owH1ibMY8zU+piB0YK/cfN0nwhlukqCFWnCZkTQm4
qyXGV5U4IyOCpDtY5JLX6kTWo/xUJ7nrnEJrPJqV5Uz21M3SSVhCG4oEtiQ/7vpR
cpmUNEWZghm1BbNrU5q/OR09AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG30AreH0
3aNPbmAgYG9LcqSp+fkwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz
MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD
ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD
cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQARRKSIeLKDuG78CLFUqs4RJ5bU/hayp+KaCTeiwSoDto+2P+6XeMsG8ysCFCDs
vu71oE+baRjux0Ne6WT3MZBR8rLAr6yu9vOelcTQhaJlpJ4E2xIyjiNo3utpipvq
k4EyfjvW6Amn4a/TAo9RBZS8sYkAdzuruMkhTnvj0Axlnh50/cCMKHM9oOuPwiMm
L3SoB2Lq/8mwpGbTbmiCld/yn9qwf93gS0/ay0VzEZMm5wMDLN9cyH1I5IaupiFm
f0uNaZeVBzX1bjJyFaPWeNog8a42mVqdSm5v/6sQfVXDS5djg4mxnTUpUecwlKYI
ULveneIEidr8UZOqiPmVz1mY
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:23 2026 by rpki-client