
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier: PtE/aEkWI0KUf8JjFJQu2hA2g9aRqCfXdaR1hNLqbCE=
Subject key identifier: 41:DA:91:A8:61:01:80:1E:10:08:14:55:57:63:3A:58:5D:B9:C4:7D
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number: 0640
Signing time: Sun 26 Jul 2026 23:43:39 +0000
Manifest this update: Sun 26 Jul 2026 23:43:39 +0000
Manifest next update: Sun 02 Aug 2026 23:43:39 +0000
Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: nbL/RZKMg+c7aw4EgfpZY61KZSyobJIYDFwqZUnmT9U=)
2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Jul 26 23:43:39 2026 GMT
Not After : Aug 2 23:43:39 2026 GMT
Subject: CN=6a669bab-5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:44:1a:c8:48:ab:ea:ab:0e:5e:b5:09:3e:
4f:14:25:0b:2a:57:2d:d6:e0:3b:07:e9:c4:f5:bf:
91:96:02:92:d7:fd:67:7b:83:2d:1b:98:25:4c:97:
60:d6:cb:f3:8b:c9:77:78:86:9e:a9:6f:10:29:cd:
73:fc:6e:1b:fa:61:57:c1:e3:9b:28:06:c2:db:a0:
f4:54:eb:9d:c3:da:cb:61:6f:c8:31:e8:7f:43:51:
78:16:93:1e:b9:8d:84:ea:16:72:ed:23:fe:be:4e:
ea:8f:79:dd:73:08:6f:8f:fe:e5:59:df:99:cc:ef:
12:67:35:8c:7d:1e:8b:15:ef:98:52:a6:7f:12:48:
24:99:27:3d:c5:f3:f2:89:24:9c:2b:f1:87:54:97:
40:5f:40:ab:0d:a3:61:0f:04:23:41:4f:af:99:95:
e7:73:b1:63:73:a2:25:d2:94:a5:df:10:d1:52:5e:
9e:b9:ba:e3:54:5a:db:e3:a0:cb:d5:c6:a0:66:a0:
36:d6:4f:d6:b4:d6:13:26:4d:15:29:1a:d8:d4:43:
fa:42:de:b2:31:3c:66:d6:04:5f:ad:de:ef:83:54:
07:c5:70:77:c6:f1:9f:44:4a:34:6d:d2:66:e7:94:
ce:85:7a:a2:ac:d2:6b:9f:1b:cb:53:3a:e3:23:4b:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:91:A8:61:01:80:1E:10:08:14:55:57:63:3A:58:5D:B9:C4:7D
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:a4:5d:8c:44:3f:d2:8d:9d:e1:e8:cf:6a:68:25:be:b9:a2:
d5:02:99:d7:c5:b6:39:22:7e:d1:c4:f3:e0:6a:47:8c:9d:39:
4c:35:b8:b6:27:44:61:f8:54:a4:fd:fc:b4:a5:03:2f:ea:0a:
2b:c1:4a:b6:09:10:b4:35:36:a5:d0:79:2c:69:32:8f:91:70:
0d:9c:fd:ff:9a:a7:27:4d:b3:aa:0f:5b:18:dc:cd:a2:f9:70:
17:9c:9d:0d:62:f6:c8:53:c9:58:5b:07:cd:b8:58:a7:72:17:
d9:30:05:00:a4:87:66:f7:be:1f:be:b3:e0:cb:d7:81:20:7b:
22:7b:b9:ef:17:79:67:bd:4f:c6:c7:ec:b6:9d:7d:ac:f2:fb:
4b:6c:34:18:e1:c6:1b:e3:83:79:94:98:ac:5c:7f:bf:bf:11:
e0:b8:97:d5:d2:54:a7:ef:9b:7a:ac:dc:11:70:f4:5b:dc:ef:
9f:1f:67:45:ee:d6:c4:07:a0:f0:e4:17:63:fd:18:0e:a7:fa:
48:5d:e9:7e:d7:4b:b6:32:78:1e:5b:c5:ac:49:e8:64:4b:29:
1a:9d:e5:37:2c:cf:65:4b:39:d9:36:c3:fe:8c:68:f9:25:98:
27:bb:36:e8:93:33:3a:f6:6a:e3:84:e9:3d:6f:0e:e1:21:2e:
2b:5f:28:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF
QTVCNDU2RDMwHhcNMjYwNzI2MjM0MzM5WhcNMjYwODAyMjM0MzM5WjAYMRYwFAYD
VQQDEw02YTY2OWJhYi01NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAweVEGshIq+qrDl61CT5PFCULKlct1uA7B+nE9b+RlgKS1/1ne4MtG5glTJdg
1svzi8l3eIaeqW8QKc1z/G4b+mFXweObKAbC26D0VOudw9rLYW/IMeh/Q1F4FpMe
uY2E6hZy7SP+vk7qj3ndcwhvj/7lWd+ZzO8SZzWMfR6LFe+YUqZ/EkgkmSc9xfPy
iSScK/GHVJdAX0CrDaNhDwQjQU+vmZXnc7Fjc6Il0pSl3xDRUl6eubrjVFrb46DL
1cagZqA21k/WtNYTJk0VKRrY1EP6Qt6yMTxm1gRfrd7vg1QHxXB3xvGfREo0bdJm
55TOhXqirNJrnxvLUzrjI0sOXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHakahh
AYAeEAgUVVdjOlhducR9MB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC
NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl
THZvVS1qV3RwYjNxVzBWdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlaRdjEQ/0o2d4ejPamglvrmi1QKZ18W2OSJ+0cTz4GpHjJ05TDW4tidEYfhU
pP38tKUDL+oKK8FKtgkQtDU2pdB5LGkyj5FwDZz9/5qnJ02zqg9bGNzNovlwF5yd
DWL2yFPJWFsHzbhYp3IX2TAFAKSHZve+H76z4MvXgSB7Inu57xd5Z71Pxsfstp19
rPL7S2w0GOHGG+ODeZSYrFx/v78R4LiX1dJUp++beqzcEXD0W9zvnx9nRe7WxAeg
8OQXY/0YDqf6SF3pftdLtjJ4HlvFrEnoZEspGp3lNyzPZUs52TbD/oxo+SWYJ7s2
6JMzOvZq44TpPW8O4SEuK18oCQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:04 2026 by rpki-client