
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: hVonaa9cC5b7SpOjHFbk7Gj7OMh2ubUduaa89Ohogig=
Subject key identifier: F5:79:24:7E:3C:6E:F3:D2:B1:63:99:5B:97:09:86:28:DD:15:BD:15
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 0485
Signing time: Mon 27 Jul 2026 01:03:54 +0000
Manifest this update: Mon 27 Jul 2026 01:03:53 +0000
Manifest next update: Mon 03 Aug 2026 01:03:53 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: O7KC0wAKSdTAJOiQ+RiZ5DELPiK79jpneEpwRI/8h9g=)
2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
4: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Jul 27 01:03:53 2026 GMT
Not After : Aug 3 01:03:53 2026 GMT
Subject: CN=6a66ae79-9850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:ad:e3:22:c1:82:f6:01:ec:cf:a9:f0:2c:
44:a7:18:75:06:ee:4b:4a:10:a7:71:60:17:b5:18:
2f:24:63:ec:73:85:8e:5b:54:83:51:90:73:58:8f:
8a:b5:90:3a:14:ad:a4:59:1c:56:63:91:4f:a1:66:
fe:f1:0b:b4:be:68:46:34:97:7e:ca:55:ae:7e:de:
3d:53:a0:53:5b:9c:4d:67:a8:1c:93:50:90:62:fe:
26:0e:22:67:28:e4:4c:0b:66:68:68:0d:88:bb:57:
bd:9b:3f:ea:8b:4b:82:21:cb:43:b8:4c:57:bb:48:
4a:1b:3d:9f:c3:26:ee:ad:68:18:3c:0c:e2:a7:35:
98:6c:73:51:a0:60:6b:bb:72:cc:4e:7d:e7:93:d4:
13:2c:a9:fb:56:2e:94:80:38:08:27:4d:80:52:cd:
fa:a0:41:6a:5c:c3:83:c0:3e:38:fb:7f:e9:37:02:
ac:ff:f7:55:ce:37:ea:b1:f2:64:5d:d9:5e:e5:61:
0a:7b:7b:bf:31:f2:5c:04:56:4b:5b:16:da:e1:93:
db:7e:cb:fc:e0:3c:8a:69:7d:15:c9:1c:87:7f:73:
94:01:c9:b5:c8:8d:8e:48:3d:a4:48:8e:97:c5:eb:
8f:86:63:66:a4:a3:84:30:a3:08:15:8e:3f:35:2b:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:24:7E:3C:6E:F3:D2:B1:63:99:5B:97:09:86:28:DD:15:BD:15
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:31:39:30:ac:4d:9d:ef:45:04:c4:22:48:31:f8:72:db:
51:86:b3:ca:cf:0a:09:ba:91:a4:32:c2:97:e0:f1:e6:f9:e8:
3f:d3:71:fa:45:a0:5d:02:4d:20:4a:cf:4f:f2:81:55:9a:f5:
75:aa:11:a2:f1:85:9a:ec:f3:b5:82:18:7f:4e:40:d1:20:aa:
23:42:b1:ad:ea:1c:3c:20:40:c2:cd:fc:98:e1:bd:23:d9:a6:
86:48:3a:02:cc:66:2c:19:bb:17:41:4c:55:83:9d:22:64:c0:
83:4d:9b:31:51:61:a9:f6:30:ba:cb:23:df:f0:fd:18:b0:b8:
64:5b:a3:5a:e5:2b:e3:d6:9b:c6:2f:12:42:2f:e1:85:48:80:
e7:41:61:1c:35:7d:9f:bc:d4:72:31:b5:eb:87:39:3e:a1:90:
d1:76:43:a1:e0:91:75:15:a2:5d:6d:44:f5:2d:c1:f7:79:da:
e3:d1:ec:cc:eb:df:ba:78:f5:09:ed:09:45:27:38:62:d2:68:
f7:6e:38:83:c6:38:ee:9c:d2:f6:79:e9:72:34:45:96:4d:53:
df:dd:1b:4d:d5:f4:1b:1d:29:c5:c7:94:6e:ac:c5:b8:8a:f1:
ef:fa:16:5a:5d:c2:de:95:09:74:67:0a:a7:72:d7:54:6f:e5:
65:aa:f0:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw
N0ZFQzUzRkIwHhcNMjYwNzI3MDEwMzUzWhcNMjYwODAzMDEwMzUzWjAYMRYwFAYD
VQQDEw02YTY2YWU3OS05ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyB2t4yLBgvYB7M+p8CxEpxh1Bu5LShCncWAXtRgvJGPsc4WOW1SDUZBzWI+K
tZA6FK2kWRxWY5FPoWb+8Qu0vmhGNJd+ylWuft49U6BTW5xNZ6gck1CQYv4mDiJn
KORMC2ZoaA2Iu1e9mz/qi0uCIctDuExXu0hKGz2fwyburWgYPAzipzWYbHNRoGBr
u3LMTn3nk9QTLKn7Vi6UgDgIJ02AUs36oEFqXMODwD44+3/pNwKs//dVzjfqsfJk
Xdle5WEKe3u/MfJcBFZLWxba4ZPbfsv84DyKaX0VyRyHf3OUAcm1yI2OSD2kSI6X
xeuPhmNmpKOEMKMIFY4/NSvrxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV5JH48
bvPSsWOZW5cJhijdFb0VMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2
MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy
QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG7kxOTCsTZ3vRQTEIkgx+HLbUYazys8KCbqRpDLCl+Dx5vnoP9Nx+kWgXQJN
IErPT/KBVZr1daoRovGFmuzztYIYf05A0SCqI0KxreocPCBAws38mOG9I9mmhkg6
AsxmLBm7F0FMVYOdImTAg02bMVFhqfYwussj3/D9GLC4ZFujWuUr49abxi8SQi/h
hUiA50FhHDV9n7zUcjG164c5PqGQ0XZDoeCRdRWiXW1E9S3B93na49HszOvfunj1
Ce0JRSc4YtJo9244g8Y47pzS9nnpcjRFlk1T390bTdX0Gx0pxceUbqzFuIrx7/oW
Wl3C3pUJdGcKp3LXVG/lZarwfA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:35 2026 by rpki-client