
$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier: 84rNE0ZJ0M6210a/nhz5oa3+7U3VKjjaLlGOVo12wWg=
Subject key identifier: B5:83:6A:97:41:4B:37:DD:B2:BA:95:0E:29:62:D3:45:73:3C:2F:89
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number: 062F
Signing time: Wed 22 Jul 2026 23:33:46 +0000
Manifest this update: Wed 22 Jul 2026 23:33:45 +0000
Manifest next update: Wed 29 Jul 2026 23:33:45 +0000
Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: Mb+U2d9Z2toyMDJlrbw3hivv7TfV4l05J0TUyWldIJY=)
2: IUG9L5m58RrR5e-PCCPPJ7bpO1o.asa (hash: WX1vQdXkitB45U5G8/qBobTgRVzuTOaZMPWToidMcRc=)
3: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: LMoK6W32MRhH2sWdtFfKukoaxVo2lgpAN0mzc0aoUcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Validity
Not Before: Jul 22 23:33:45 2026 GMT
Not After : Jul 29 23:33:45 2026 GMT
Subject: CN=6a61535a-fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:43:e5:60:cc:e5:17:84:3e:d1:bc:fb:8a:
d6:01:71:e2:a6:37:e3:0b:3b:e9:27:0d:f5:90:4f:
91:10:4d:70:1d:b8:e6:f0:23:61:0f:9e:e9:e2:f1:
e5:bc:c9:2a:73:0b:2b:cd:dc:0e:e3:9b:44:e5:6a:
e2:c3:ab:1b:b2:c2:f4:0e:04:d0:74:7b:76:c9:cf:
16:2a:8f:aa:9e:fe:8d:79:94:dd:8f:30:58:8a:da:
6c:f9:7d:7e:d3:ee:7a:22:a1:38:68:b9:ce:ed:38:
fd:f2:5a:fa:ce:ed:f6:3a:cf:10:d3:88:83:ba:10:
10:ae:e8:65:79:92:bc:77:b8:3a:94:9c:f0:6d:52:
3e:31:03:12:f8:da:a9:dd:d5:4f:ec:a5:ab:dd:e1:
c1:01:29:f2:67:a2:40:d7:ac:9c:10:0d:ef:76:9a:
49:4a:4f:9f:29:7a:ca:0c:31:65:63:da:ae:a5:69:
04:cf:c0:0b:dd:a5:ef:2b:7d:e7:03:6f:b5:db:69:
b9:09:75:fc:4b:14:24:26:48:c7:c1:cf:ec:e7:c8:
45:dc:06:51:fb:22:e6:ae:d7:67:b9:8b:09:95:5e:
e5:b7:fe:eb:c0:81:37:21:30:83:e2:af:4a:36:9a:
09:9c:57:42:06:5f:af:e1:ed:c8:49:7a:a2:88:8f:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:6A:97:41:4B:37:DD:B2:BA:95:0E:29:62:D3:45:73:3C:2F:89
X509v3 Authority Key Identifier:
keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:01:94:d5:77:f8:59:e6:84:7d:85:fa:00:f1:bf:a9:0a:a2:
4b:7c:06:b6:40:90:21:d3:34:fe:a1:31:bb:49:50:b6:43:23:
60:32:68:b6:9f:5c:36:7d:49:37:38:0c:45:bf:c8:c0:07:91:
21:68:92:07:27:39:76:b1:aa:22:0b:33:ac:c2:7b:70:0c:dd:
b7:f8:d8:f4:df:88:4e:fd:dd:a2:82:8b:01:6e:73:f0:3e:6d:
b9:57:4f:2a:16:39:09:5f:e4:96:0f:90:66:19:2c:9c:b4:a4:
c2:85:1b:5f:06:53:f7:25:c1:f7:2b:ae:5d:c8:a5:66:c5:56:
d4:e1:62:b0:ee:c9:46:de:3d:2c:9a:ed:3d:f0:50:48:2f:58:
c2:6f:fb:2c:4a:f4:9f:7f:59:95:54:12:f1:24:1a:58:dd:a2:
95:06:e8:a1:80:b1:b9:89:8d:73:60:92:f8:ea:0e:a4:5c:e4:
a8:9b:55:2e:26:02:af:de:54:e1:8e:ce:b2:67:bb:c0:19:5d:
09:2f:e0:88:68:60:a8:71:07:64:a1:f9:a1:4c:73:fe:b4:f6:
01:0f:84:41:0e:02:ed:1d:a2:0a:df:8c:d1:f6:6b:68:53:3a:
f3:61:68:e7:43:fd:e6:9d:33:f4:e4:8a:68:ea:b5:2c:33:02:
a1:f0:2e:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3
N0Q4ODhFNzkwHhcNMjYwNzIyMjMzMzQ1WhcNMjYwNzI5MjMzMzQ1WjAYMRYwFAYD
VQQDEw02YTYxNTM1YS1mZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBpD5WDM5ReEPtG8+4rWAXHipjfjCzvpJw31kE+REE1wHbjm8CNhD57p4vHl
vMkqcwsrzdwO45tE5Wriw6sbssL0DgTQdHt2yc8WKo+qnv6NeZTdjzBYitps+X1+
0+56IqE4aLnO7Tj98lr6zu32Os8Q04iDuhAQruhleZK8d7g6lJzwbVI+MQMS+Nqp
3dVP7KWr3eHBASnyZ6JA16ycEA3vdppJSk+fKXrKDDFlY9qupWkEz8AL3aXvK33n
A2+122m5CXX8SxQkJkjHwc/s58hF3AZR+yLmrtdnuYsJlV7lt/7rwIE3ITCD4q9K
NpoJnFdCBl+v4e3ISXqiiI+MhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWDapdB
SzfdsrqVDili00VzPC+JMB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2
MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx
VGdFM09zUHQxTGQzMklqbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzAGU1Xf4WeaEfYX6APG/qQqiS3wGtkCQIdM0/qExu0lQtkMjYDJotp9cNn1J
NzgMRb/IwAeRIWiSByc5drGqIgszrMJ7cAzdt/jY9N+ITv3dooKLAW5z8D5tuVdP
KhY5CV/klg+QZhksnLSkwoUbXwZT9yXB9yuuXcilZsVW1OFisO7JRt49LJrtPfBQ
SC9Ywm/7LEr0n39ZlVQS8SQaWN2ilQbooYCxuYmNc2CS+OoOpFzkqJtVLiYCr95U
4Y7Osme7wBldCS/giGhgqHEHZKH5oUxz/rT2AQ+EQQ4C7R2iCt+M0fZraFM682Fo
50P95p0z9OSKaOq1LDMCofAuLg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:12 2026 by rpki-client