
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: u39cG427eJHQ6dXDxqh1Y6Jk1eQS4dl/MFyl+licFfo=
Subject key identifier: 3E:DD:C9:B6:57:F0:F2:B3:18:CE:2D:6C:1A:FF:07:EB:D1:A9:51:B6
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 84
Signing time: Mon 27 Jul 2026 09:49:00 +0000
Manifest this update: Mon 27 Jul 2026 09:49:00 +0000
Manifest next update: Mon 03 Aug 2026 09:49:00 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: vt9rYGsGkVsO7/MutUCdMX7ehKavQJSdRkHESgfPGRE=)
2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: C7KmmWun2dX9H9haejMLucLDX6TZ17dC6V73S7CTAnw=)
3: 0853E998C45711F080167D38C4F9AE02.roa (hash: 9wGGSvONuRhyHPCYZAhrCUe7eBe9FnHcqTP8k+BasBo=)
4: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: WiAAcP0KH/A3PVdMf+WKZUcSOEY5/upnhbg6/b3N8PQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Jul 27 09:49:00 2026 GMT
Not After : Aug 3 09:49:00 2026 GMT
Subject: CN=6a67298c-1f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:60:63:8b:09:68:be:91:bf:ad:5f:ba:76:
20:80:fb:fd:1c:93:d3:b2:f8:65:d5:92:ab:fb:6b:
d1:f4:d2:6d:24:8a:cf:c6:ab:e3:71:0f:7e:b8:2e:
be:b9:1b:b0:4c:d4:36:0c:30:62:ac:63:2b:14:61:
ce:61:e9:97:ca:9e:af:08:08:ec:8f:b0:1e:fd:d2:
00:e4:dc:60:dd:4c:43:7f:81:6e:8e:c8:93:dd:e5:
2d:f7:76:11:bb:c4:0e:d7:97:3f:bb:40:ac:79:3d:
fb:69:7e:ee:8f:24:77:4c:c0:15:f0:78:78:3d:04:
6c:81:1c:f2:0f:54:6a:2e:8f:92:27:a4:ce:89:14:
f5:3c:05:a2:56:28:f6:09:4a:23:c4:f0:db:e5:96:
fa:3c:8d:88:bb:7a:57:db:78:d6:9f:e1:8a:19:e6:
f6:cb:7b:3c:c6:af:50:38:bf:db:ed:ca:b8:51:a4:
42:c3:06:c3:99:34:81:98:6b:42:6e:73:d5:8e:ed:
8a:02:49:2d:79:57:ec:76:8a:89:25:24:cf:a9:32:
1e:ed:5e:13:b5:c3:e5:cd:01:e3:3c:60:83:01:72:
4e:d7:08:32:f1:85:f6:73:f9:0d:f2:48:64:96:d0:
b2:65:07:a7:8f:92:ef:c0:67:39:09:a1:fd:e4:ba:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:C9:B6:57:F0:F2:B3:18:CE:2D:6C:1A:FF:07:EB:D1:A9:51:B6
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:00:ef:14:df:96:90:4f:65:ed:fc:04:9a:1b:03:d5:68:e3:
a8:dc:72:e7:57:01:a1:06:97:64:1c:29:bf:76:94:d2:80:29:
ad:08:6d:56:b7:ae:b7:56:53:d8:75:59:d5:e3:11:de:cc:77:
27:fe:57:26:0c:3d:75:6b:cb:46:ac:72:ab:77:8c:9a:73:66:
93:a1:a1:c2:4b:f1:7d:17:c1:52:87:b4:73:9c:78:66:0d:fb:
44:29:36:a4:41:da:98:06:bf:2f:17:04:9e:ba:06:c0:0b:b4:
25:92:a7:f1:31:ff:d5:13:1e:9a:b9:c3:dc:18:dd:ae:01:5a:
70:eb:70:2e:7b:84:36:b5:51:ba:e0:3a:c5:69:04:10:8f:bd:
af:ac:e3:ca:1b:b0:4b:4f:33:ee:60:83:81:20:bb:b9:35:05:
ba:40:14:50:9e:31:bf:48:0b:a4:99:a3:96:0c:64:c0:ac:d1:
35:24:89:19:77:c7:e1:f8:1a:d8:f4:81:f3:5e:30:92:71:d0:
c9:3b:50:08:5f:a8:43:9a:c4:6c:05:3b:31:ee:5a:3d:5a:04:
00:02:1a:da:a5:da:44:7d:54:5c:d8:07:f7:de:59:47:ac:d4:
94:cc:97:3d:28:fa:3d:48:a3:ec:b9:9f:28:8f:92:1e:20:d5:
32:43:7f:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFNzkxMTAvBgNVBAUTKDcxQTNEQkUyRjBGRkQwQjEwN0NBNkI1NzEzQjE1Qzk3
QThFM0UxRDEwHhcNMjYwNzI3MDk0OTAwWhcNMjYwODAzMDk0OTAwWjAYMRYwFAYD
VQQDEw02YTY3Mjk4Yy0xZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodVgY4sJaL6Rv61funYggPv9HJPTsvhl1ZKr+2vR9NJtJIrPxqvjcQ9+uC6+
uRuwTNQ2DDBirGMrFGHOYemXyp6vCAjsj7Ae/dIA5Nxg3UxDf4FujsiT3eUt93YR
u8QO15c/u0CseT37aX7ujyR3TMAV8Hh4PQRsgRzyD1RqLo+SJ6TOiRT1PAWiVij2
CUojxPDb5Zb6PI2Iu3pX23jWn+GKGeb2y3s8xq9QOL/b7cq4UaRCwwbDmTSBmGtC
bnPVju2KAkkteVfsdoqJJSTPqTIe7V4TtcPlzQHjPGCDAXJO1wgy8YX2c/kN8khk
ltCyZQenj5LvwGc5CaH95LqO4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7dybZX
8PKzGM4tbBr/B+vRqVG2MB8GA1UdIwQYMBaAFHGj2+Lw/9CxB8prVxOxXJeo4+HR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUU3OS85NTFFMjhGOEM0
NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBMRUh5bXRYRTdGY2w2amo0
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NhUGI0dkRfMExFSHltdFhFN0ZjbDZqajRkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUU3OS85NTFFMjhGOEM0NTYxMUYwOEU1MzkyMEJDNEY5QUUwMi9jYVBiNHZEXzBM
RUh5bXRYRTdGY2w2amo0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcwDvFN+WkE9l7fwEmhsD1WjjqNxy51cBoQaXZBwpv3aU0oAprQhtVreut1ZT
2HVZ1eMR3sx3J/5XJgw9dWvLRqxyq3eMmnNmk6GhwkvxfRfBUoe0c5x4Zg37RCk2
pEHamAa/LxcEnroGwAu0JZKn8TH/1RMemrnD3BjdrgFacOtwLnuENrVRuuA6xWkE
EI+9r6zjyhuwS08z7mCDgSC7uTUFukAUUJ4xv0gLpJmjlgxkwKzRNSSJGXfH4fga
2PSB814wknHQyTtQCF+oQ5rEbAU7Me5aPVoEAAIa2qXaRH1UXNgH995ZR6zUlMyX
PSj6PUij7LmfKI+SHiDVMkN/GA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:13 2026 by rpki-client