
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier: p4rq3tx4RptLIHo9C3RKpBvgIjSLV30y7f0plJthroY=
Subject key identifier: 85:A7:80:DF:E2:A0:A2:C6:FB:4D:FC:A4:7B:3B:E1:64:EA:67:E1:36
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number: 072A
Signing time: Sun 26 Jul 2026 22:24:13 +0000
Manifest this update: Sun 26 Jul 2026 22:24:13 +0000
Manifest next update: Sun 02 Aug 2026 22:24:13 +0000
Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: jA+g8LDWdWGALvPv1lpJzfv7tQaLZYwxHEhxwXYvZ5w=)
2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: N9eG1bQhX1YdCDkzKaSF+f+WLANX5CsAn9fANFhO8B8=)
3: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: p9oLeg7LyY+vlGNticT0e8fg65yu3rD7mdYWF8Pyt1o=)
4: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=)
5: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: /IhoZrHLS7mKMxuodlFyZTmLLtfy6GDD39NpDwvO+Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Jul 26 22:24:13 2026 GMT
Not After : Aug 2 22:24:13 2026 GMT
Subject: CN=6a66890d-b576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:7b:29:12:c0:c2:f1:67:e1:22:ca:cd:98:
40:d7:3b:66:39:0f:f5:ca:26:c4:66:10:2c:07:47:
4f:27:6d:a8:d0:79:d4:b8:82:60:76:d8:3c:1b:a4:
4a:ad:79:5b:52:07:22:f9:1e:92:57:a7:aa:96:48:
ec:bf:5d:10:89:6d:19:e6:c6:fe:5d:47:e7:62:e6:
38:84:e9:05:00:8f:85:bd:f5:18:86:ef:d0:d2:54:
e0:76:18:10:1f:e3:ae:01:50:3d:dd:cd:50:3a:4c:
22:60:24:98:91:c2:0f:64:af:b1:8b:c1:91:aa:81:
a9:81:56:69:b3:52:81:6d:8f:35:a9:6c:46:34:99:
c3:7a:5a:35:7c:72:8d:52:96:e8:04:76:98:37:85:
7f:58:fa:2e:e2:54:88:cf:03:de:ef:c4:f6:c3:38:
8a:36:1c:7b:5e:d4:f5:37:0a:67:22:d7:17:c4:9f:
39:2d:4c:87:da:ae:c4:35:61:c3:61:0d:1a:ae:22:
7a:49:40:85:c0:2d:41:ce:a3:60:68:73:e5:85:03:
8f:c4:e3:ce:2a:77:c6:45:f6:70:35:eb:16:4f:86:
1c:53:30:00:5f:ac:1f:bf:29:15:c8:20:54:75:92:
09:08:34:c1:da:bd:36:a2:f4:a6:6d:cf:51:25:02:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A7:80:DF:E2:A0:A2:C6:FB:4D:FC:A4:7B:3B:E1:64:EA:67:E1:36
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:65:20:8d:35:46:32:a1:87:fd:99:3a:3c:f5:1d:fa:91:
9a:da:bd:4a:18:f7:6a:cb:97:84:ff:cc:af:c9:9c:07:be:32:
77:a9:3b:f6:29:a5:00:6e:0b:9f:94:81:6c:2d:67:f6:2c:98:
65:05:74:b0:a1:73:cf:66:52:07:2f:ad:8a:85:bc:cd:57:84:
f3:3f:8d:d0:58:ba:17:89:9d:ab:18:31:e1:df:52:c0:4a:e3:
09:a7:34:c1:b5:28:e4:82:8b:00:60:1c:5a:04:fa:37:55:67:
ba:c3:aa:ab:17:fb:20:73:f1:d8:a0:19:8a:1d:34:57:43:f7:
88:92:a9:4b:73:0e:17:2e:46:95:96:d0:98:4c:25:f2:c0:1c:
8a:74:53:21:f2:ff:84:c4:76:59:24:8a:4d:9d:6d:0a:8a:2c:
84:ce:d4:ac:89:7e:e5:9d:1f:c4:15:ed:f6:c0:24:df:5f:df:
03:31:09:15:e9:77:9d:94:0d:7b:ee:a2:3e:b2:48:56:97:66:
ad:10:bd:da:da:43:bf:46:09:bb:d5:57:ea:9b:33:7b:28:e2:
60:c5:04:a3:f0:c6:60:c0:1f:f1:67:81:62:f2:06:bf:d2:e3:
62:35:0f:3b:82:f7:5c:1f:44:45:79:a5:c7:38:28:6b:71:7b:
eb:5e:70:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjYwNzI2MjIyNDEzWhcNMjYwODAyMjIyNDEzWjAYMRYwFAYD
VQQDEw02YTY2ODkwZC1iNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjJ7KRLAwvFn4SLKzZhA1ztmOQ/1yibEZhAsB0dPJ22o0HnUuIJgdtg8G6RK
rXlbUgci+R6SV6eqlkjsv10QiW0Z5sb+XUfnYuY4hOkFAI+FvfUYhu/Q0lTgdhgQ
H+OuAVA93c1QOkwiYCSYkcIPZK+xi8GRqoGpgVZps1KBbY81qWxGNJnDelo1fHKN
UpboBHaYN4V/WPou4lSIzwPe78T2wziKNhx7XtT1NwpnItcXxJ85LUyH2q7ENWHD
YQ0ariJ6SUCFwC1BzqNgaHPlhQOPxOPOKnfGRfZwNesWT4YcUzAAX6wfvykVyCBU
dZIJCDTB2r02ovSmbc9RJQKDAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWngN/i
oKLG+038pHs74WTqZ+E2MB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw
TURiUnh5M1V3S2ZDcE9LYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJu1lII01RjKhh/2ZOjz1HfqRmtq9Shj3asuXhP/Mr8mcB74yd6k79imlAG4L
n5SBbC1n9iyYZQV0sKFzz2ZSBy+tioW8zVeE8z+N0Fi6F4mdqxgx4d9SwErjCac0
wbUo5IKLAGAcWgT6N1VnusOqqxf7IHPx2KAZih00V0P3iJKpS3MOFy5GlZbQmEwl
8sAcinRTIfL/hMR2WSSKTZ1tCooshM7UrIl+5Z0fxBXt9sAk31/fAzEJFel3nZQN
e+6iPrJIVpdmrRC92tpDv0YJu9VX6pszeyjiYMUEo/DGYMAf8WeBYvIGv9LjYjUP
O4L3XB9ERXmlxzgoa3F7615wbw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:34 2026 by rpki-client