
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier: jdt9jy/xQIxI3cQgBfCpbPrYPFc+O1nNmMLSDpz9NUE=
Subject key identifier: 82:03:D7:63:97:EE:02:89:1F:CB:EB:EB:69:0B:52:E0:B9:22:5E:91
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial: 1C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number: 1C03
Signing time: Wed 22 Jul 2026 16:18:37 +0000
Manifest this update: Wed 22 Jul 2026 16:18:36 +0000
Manifest next update: Wed 29 Jul 2026 16:18:36 +0000
Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: r5crd0W5p2B0tmh994ogXOMfEDxT+nfph43+x7CTUXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7172 (0x1c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Validity
Not Before: Jul 22 16:18:36 2026 GMT
Not After : Jul 29 16:18:36 2026 GMT
Subject: CN=6a60ed5d-55a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:51:40:83:62:ad:0c:dd:7f:63:bb:13:0a:
69:b0:cf:3f:f8:15:ec:4d:77:2f:f5:35:f5:8a:5b:
fc:0c:c4:3e:61:99:cf:6d:22:22:d0:5f:13:b4:6d:
de:9a:52:10:ba:77:9d:39:78:76:89:98:8e:10:8b:
78:14:e7:68:30:3e:7b:73:c2:4f:d4:d6:f5:a4:61:
01:d2:60:6c:45:a9:e7:7e:c1:6d:d4:21:b6:e0:e7:
7b:91:b5:55:6d:b8:1a:f3:5f:44:e1:80:5b:1f:3d:
1a:70:f9:84:95:75:a2:2e:bf:45:b4:31:11:14:22:
ae:b2:d1:d4:af:71:1c:83:c3:44:bd:60:82:06:40:
96:70:46:34:b4:7a:e4:b8:f4:85:ad:a3:ff:b8:8f:
37:07:ca:b3:69:0a:85:c2:13:77:8d:28:c0:5d:a2:
8c:79:5e:ab:ec:1c:82:74:22:3e:12:79:5a:cf:91:
81:83:33:62:b7:1d:e1:8f:7f:46:7e:d8:46:6c:34:
7d:d5:8f:f5:e4:aa:1b:19:f2:13:df:e1:3e:9c:e7:
9c:94:81:28:8e:31:ab:e5:5b:c1:cc:7d:d1:5f:0c:
bf:69:a0:26:97:30:83:8c:27:84:61:6c:dc:35:d7:
ba:36:ee:9e:5c:1a:c7:61:04:98:50:58:7b:9f:ef:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:D7:63:97:EE:02:89:1F:CB:EB:EB:69:0B:52:E0:B9:22:5E:91
X509v3 Authority Key Identifier:
keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:12:61:75:be:63:66:6e:d0:3f:58:6e:32:4d:10:34:fa:76:
4a:d0:27:ad:48:c6:91:98:90:d0:de:7f:63:2a:23:48:97:61:
23:ff:41:02:de:cd:1b:7a:1b:96:2b:38:53:e9:1b:ab:a6:bd:
21:29:3f:af:c4:6d:79:da:2b:6e:9c:0a:d1:9e:b4:d3:f4:ef:
88:c1:b6:ae:d6:f7:25:a2:62:c3:2c:29:74:aa:ed:89:61:d7:
82:48:b4:1a:55:7d:53:bd:30:39:b9:3e:17:d6:38:83:ad:71:
e0:f1:48:38:00:f2:3e:6e:94:13:6c:a6:7a:22:5b:bc:33:ec:
97:31:4c:07:15:0b:1f:57:4c:84:07:09:b4:e5:66:f1:22:ec:
e1:3d:87:25:54:5b:e7:d9:62:4b:cb:2e:ad:14:58:ce:c4:7b:
e0:1e:29:0e:42:09:95:c3:e0:27:c2:5f:d1:70:29:1f:16:86:
a0:b7:96:6f:50:03:03:a9:ea:5f:62:c9:e7:21:44:8e:9b:63:
05:d0:45:a3:22:8b:22:6b:75:46:86:ac:3f:d7:fb:3b:7b:c8:
34:03:3a:6e:bc:8b:ce:d8:d2:dd:08:c8:96:b2:8f:c1:fe:56:
b3:ff:3e:71:e9:f2:28:03:b2:3a:40:79:38:19:f0:20:bf:d9:
dc:fe:f4:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC
MkNERDU2RUYwHhcNMjYwNzIyMTYxODM2WhcNMjYwNzI5MTYxODM2WjAYMRYwFAYD
VQQDEw02YTYwZWQ1ZC01NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZNRQINirQzdf2O7EwppsM8/+BXsTXcv9TX1ilv8DMQ+YZnPbSIi0F8TtG3e
mlIQunedOXh2iZiOEIt4FOdoMD57c8JP1Nb1pGEB0mBsRannfsFt1CG24Od7kbVV
bbga819E4YBbHz0acPmElXWiLr9FtDERFCKustHUr3Ecg8NEvWCCBkCWcEY0tHrk
uPSFraP/uI83B8qzaQqFwhN3jSjAXaKMeV6r7ByCdCI+Enlaz5GBgzNitx3hj39G
fthGbDR91Y/15KobGfIT3+E+nOeclIEojjGr5VvBzH3RXwy/aaAmlzCDjCeEYWzc
Nde6Nu6eXBrHYQSYUFh7n+9JvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIID12OX
7gKJH8vr62kLUuC5Il6RMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2
NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m
ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApxJhdb5jZm7QP1huMk0QNPp2StAnrUjGkZiQ0N5/YyojSJdhI/9BAt7NG3ob
lis4U+kbq6a9ISk/r8RtedorbpwK0Z600/TviMG2rtb3JaJiwywpdKrtiWHXgki0
GlV9U70wObk+F9Y4g61x4PFIOADyPm6UE2ymeiJbvDPslzFMBxULH1dMhAcJtOVm
8SLs4T2HJVRb59liS8surRRYzsR74B4pDkIJlcPgJ8Jf0XApHxaGoLeWb1ADA6nq
X2LJ5yFEjptjBdBFoyKLImt1RoasP9f7O3vINAM6bryLztjS3QjIlrKPwf5Ws/8+
cenyKAOyOkB5OBnwIL/Z3P70vQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:11 2026 by rpki-client