
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier: HVeBoxB3kro8feeSz1HIWDjQ9yz5TGb/iKDo20286rQ=
Subject key identifier: 7A:04:02:03:26:25:13:B4:3C:F6:A8:F6:F3:9C:A9:45:F4:DE:51:F1
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number: 0567
Signing time: Wed 22 Jul 2026 20:49:49 +0000
Manifest this update: Wed 22 Jul 2026 20:49:48 +0000
Manifest next update: Wed 29 Jul 2026 20:49:48 +0000
Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: cVliv5w5Au5/ejgG8TReQ4273WcrjwOxB6m8mqqkULM=)
2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Jul 22 20:49:48 2026 GMT
Not After : Jul 29 20:49:48 2026 GMT
Subject: CN=6a612ced-2ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:33:e2:89:09:cb:73:77:9e:65:79:d8:04:
3c:32:46:58:58:c9:95:d2:59:4c:b0:ea:7e:21:03:
a0:64:74:75:17:25:73:b5:b3:a6:4d:d0:48:a7:8d:
e7:ef:fe:38:d9:4f:6e:39:1c:c6:b1:25:e9:ab:05:
e8:86:67:44:76:7f:5f:71:77:8a:39:f0:61:12:d6:
8b:7e:bf:e9:99:0e:c5:49:0a:92:a4:26:41:ca:e5:
65:42:46:b6:f8:8a:0c:ad:aa:34:e1:ad:3b:20:93:
07:45:d7:86:a6:d8:60:91:3e:eb:b2:09:5b:2d:01:
dd:a2:27:35:f7:9f:03:a3:eb:34:fd:b8:2d:64:21:
e3:14:72:88:f9:63:7c:ef:9c:b0:0c:f3:d0:c5:71:
77:36:b1:21:89:83:0a:72:cc:09:75:8a:ee:71:3a:
50:e7:93:9f:1c:ab:4f:67:c3:0e:99:30:42:fc:fd:
64:10:43:ab:bc:6a:29:78:7c:d7:64:69:81:73:6d:
6c:5e:90:76:36:a9:b2:c1:a0:60:46:ba:70:a6:ba:
6b:6c:be:f9:5b:c5:d4:8f:a2:98:0c:d6:fe:ed:d8:
19:b1:a0:91:80:81:ef:c8:c1:c2:b2:27:85:43:9f:
a3:c9:97:02:40:24:3d:1e:eb:c6:7d:b9:1d:36:61:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:02:03:26:25:13:B4:3C:F6:A8:F6:F3:9C:A9:45:F4:DE:51:F1
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0c:01:f8:42:13:c0:1b:9d:44:6a:fe:dd:31:f3:9e:17:69:
a6:7e:19:53:1e:be:78:84:d7:a8:0f:17:18:70:88:8f:bb:13:
83:cd:dd:ed:61:98:51:8f:f2:2d:66:7c:75:e9:18:2c:79:a2:
13:3a:19:c3:22:ae:00:9b:56:62:d9:79:12:f5:94:db:30:dc:
ed:a1:e5:d6:52:52:1a:f7:c4:c5:08:e3:db:8a:5b:10:4e:ca:
f9:6e:dc:41:58:ad:d3:d7:e7:af:24:03:88:87:15:ae:12:10:
a1:89:51:83:cd:a3:e9:e5:dd:fb:1c:e5:f0:43:7c:3f:f0:36:
62:b9:78:01:1a:88:96:e9:6d:b3:dc:fe:ae:02:81:d9:44:f2:
a5:7e:d1:da:28:a5:4e:21:14:34:4c:5e:46:bf:f3:12:51:0b:
a6:5c:23:8e:10:f5:2f:62:49:1c:91:f8:0b:da:cb:40:15:13:
ec:90:59:6e:36:a5:4c:76:ff:68:de:5d:89:9a:ae:aa:71:ae:
06:07:0a:aa:2d:15:a6:30:0f:f2:e7:a1:80:80:4b:d3:02:25:
c6:10:0c:98:4e:61:e9:cd:23:0b:e3:a2:7b:b5:62:5e:8a:33:
a9:4b:83:15:6c:5f:32:11:2d:74:b3:06:b7:a0:09:39:7c:ee:
e0:36:41:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3
RkVEQzAzOUEwHhcNMjYwNzIyMjA0OTQ4WhcNMjYwNzI5MjA0OTQ4WjAYMRYwFAYD
VQQDEw02YTYxMmNlZC0yZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7kz4okJy3N3nmV52AQ8MkZYWMmV0llMsOp+IQOgZHR1FyVztbOmTdBIp43n
7/442U9uORzGsSXpqwXohmdEdn9fcXeKOfBhEtaLfr/pmQ7FSQqSpCZByuVlQka2
+IoMrao04a07IJMHRdeGpthgkT7rsglbLQHdoic1958Do+s0/bgtZCHjFHKI+WN8
75ywDPPQxXF3NrEhiYMKcswJdYrucTpQ55OfHKtPZ8MOmTBC/P1kEEOrvGopeHzX
ZGmBc21sXpB2NqmywaBgRrpwprprbL75W8XUj6KYDNb+7dgZsaCRgIHvyMHCsieF
Q5+jyZcCQCQ9HuvGfbkdNmExDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoEAgMm
JRO0PPao9vOcqUX03lHxMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3
RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ
R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAngwB+EITwBudRGr+3THznhdppn4ZUx6+eITXqA8XGHCIj7sTg83d7WGYUY/y
LWZ8dekYLHmiEzoZwyKuAJtWYtl5EvWU2zDc7aHl1lJSGvfExQjj24pbEE7K+W7c
QVit09fnryQDiIcVrhIQoYlRg82j6eXd+xzl8EN8P/A2Yrl4ARqIlults9z+rgKB
2UTypX7R2iilTiEUNExeRr/zElELplwjjhD1L2JJHJH4C9rLQBUT7JBZbjalTHb/
aN5diZquqnGuBgcKqi0VpjAP8uehgIBL0wIlxhAMmE5h6c0jC+Oie7ViXoozqUuD
FWxfMhEtdLMGt6AJOXzu4DZBYg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:29 2026 by rpki-client