
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier: TufVOQ/dCWVO1yiPdAHTaCyIN0CHYWnL+1GOexBH9tY=
Subject key identifier: 24:2D:EA:2B:C2:FE:84:CE:A2:13:BA:E2:29:C8:56:68:67:57:9F:A9
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number: 0256
Signing time: Mon 27 Jul 2026 03:44:53 +0000
Manifest this update: Mon 27 Jul 2026 03:44:52 +0000
Manifest next update: Mon 03 Aug 2026 03:44:52 +0000
Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: V8ULyDRxSFFqjTY41RlJHaokvMccfoIdPLbEqUoBAPU=)
2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: oThRjVHDmoFWRnFR0NxIEVr1V8eRjzhqrwR3MFXCY2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Validity
Not Before: Jul 27 03:44:52 2026 GMT
Not After : Aug 3 03:44:52 2026 GMT
Subject: CN=6a66d435-1e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:ce:2f:3e:cb:35:0b:52:89:9b:d5:dc:0f:
96:1e:e3:d8:23:de:16:41:5b:f1:b6:c2:50:09:67:
d4:88:67:32:ca:e3:f8:3f:a1:27:b2:9b:82:55:bc:
46:6e:66:54:23:8c:08:bb:98:64:d8:c3:b9:7c:9f:
73:c5:80:08:66:6e:ee:67:42:e3:5e:5c:c9:f0:0b:
19:36:3a:29:9a:76:aa:0c:98:ab:24:9a:61:ad:9a:
a3:13:96:49:eb:0a:df:c2:a3:39:5e:f7:f1:97:63:
ed:3c:3c:bd:41:bf:e2:f9:97:26:40:df:d4:4d:9a:
79:92:8f:63:94:44:9e:a2:82:9f:0b:4e:73:e6:88:
c3:11:9f:8c:2f:5b:b6:ac:ea:19:a2:f2:97:fb:a3:
b2:c2:8d:9a:cf:73:cb:7a:83:90:40:71:f3:2e:fc:
30:69:c1:8e:07:8d:c7:7b:e1:3f:53:cd:c8:86:03:
35:af:0b:c8:ff:98:78:f8:bf:47:35:81:0c:5d:ca:
01:6b:0a:84:b5:d8:9b:e8:86:8d:a3:cd:f5:c2:f3:
93:54:b4:3c:25:0e:15:e0:03:57:62:bb:ab:10:53:
ca:ea:86:37:c1:3a:ff:bb:7b:ff:a0:13:4f:2e:d7:
17:7f:72:69:ce:d4:d5:42:e5:88:bc:d5:bb:d5:68:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:EA:2B:C2:FE:84:CE:A2:13:BA:E2:29:C8:56:68:67:57:9F:A9
X509v3 Authority Key Identifier:
keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:09:9f:f6:98:f8:ba:34:2e:bf:27:25:1b:92:86:ca:eb:89:
dd:0e:35:b8:1f:cf:63:9e:58:2a:1d:3c:72:94:38:1d:f5:15:
8a:59:7d:6c:d1:dd:15:cb:fc:71:fd:cf:0d:dc:10:f4:33:2c:
03:bc:fa:70:30:a0:2d:b2:30:6d:04:50:49:b4:84:6e:ee:02:
f8:05:4d:f1:8a:4d:82:13:74:2c:f5:d8:9b:87:7b:cc:df:66:
2c:45:1f:d8:a4:07:79:3e:41:a0:cb:e2:81:fa:f0:93:ce:9c:
8e:b4:98:68:9a:8f:fa:f6:b3:b1:e1:ef:bd:e6:6c:cf:47:0e:
34:90:63:5a:c0:7a:5f:21:ec:83:d5:c3:d9:05:7b:dc:0c:02:
94:03:5c:97:dd:0c:3f:f9:ac:e9:03:9a:51:20:ae:08:5a:fd:
37:87:c9:0a:f8:65:26:63:63:74:e7:7e:c5:a7:8f:52:96:a1:
70:f6:a9:42:f0:62:40:f7:96:e2:5e:ae:4d:3d:5e:03:67:64:
63:d1:e3:0c:7d:79:ad:9f:18:65:01:11:96:a9:33:36:3f:69:
77:5c:32:69:50:4b:a1:d8:39:f9:4f:09:e5:51:b2:56:96:f3:
78:07:18:0c:b0:be:e6:c8:61:93:7d:85:cb:0e:c9:8f:4d:e7:
bf:60:e3:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx
NzdDODk0RjYwHhcNMjYwNzI3MDM0NDUyWhcNMjYwODAzMDM0NDUyWjAYMRYwFAYD
VQQDEw02YTY2ZDQzNS0xZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZXOLz7LNQtSiZvV3A+WHuPYI94WQVvxtsJQCWfUiGcyyuP4P6EnspuCVbxG
bmZUI4wIu5hk2MO5fJ9zxYAIZm7uZ0LjXlzJ8AsZNjopmnaqDJirJJphrZqjE5ZJ
6wrfwqM5Xvfxl2PtPDy9Qb/i+ZcmQN/UTZp5ko9jlESeooKfC05z5ojDEZ+ML1u2
rOoZovKX+6Oywo2az3PLeoOQQHHzLvwwacGOB43He+E/U83IhgM1rwvI/5h4+L9H
NYEMXcoBawqEtdib6IaNo831wvOTVLQ8JQ4V4ANXYrurEFPK6oY3wTr/u3v/oBNP
LtcXf3JpztTVQuWIvNW71WhA3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQt6ivC
/oTOohO64inIVmhnV5+pMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4
OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5
clB3NmFtNkVJZFFYZklsUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjwmf9pj4ujQuvyclG5KGyuuJ3Q41uB/PY55YKh08cpQ4HfUVill9bNHdFcv8
cf3PDdwQ9DMsA7z6cDCgLbIwbQRQSbSEbu4C+AVN8YpNghN0LPXYm4d7zN9mLEUf
2KQHeT5BoMvigfrwk86cjrSYaJqP+vazseHvveZsz0cONJBjWsB6XyHsg9XD2QV7
3AwClANcl90MP/ms6QOaUSCuCFr9N4fJCvhlJmNjdOd+xaePUpahcPapQvBiQPeW
4l6uTT1eA2dkY9HjDH15rZ8YZQERlqkzNj9pd1wyaVBLodg5+U8J5VGyVpbzeAcY
DLC+5shhk32Fyw7Jj03nv2DjXw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:25 2026 by rpki-client