
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier: o8NtPMEjYzv2TRBtOR7i7c7LLrBIazWWyRPZm9UdGCA=
Subject key identifier: 4A:09:CA:DE:93:89:32:D7:F4:B9:D6:28:5F:BB:3A:B7:24:B3:E1:2B
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial: 0425
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number: 0411
Signing time: Thu 23 Jul 2026 01:17:59 +0000
Manifest this update: Thu 23 Jul 2026 01:17:58 +0000
Manifest next update: Thu 30 Jul 2026 01:17:58 +0000
Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: W+q5aHKtRORRDfXUyTA7CKjGloNIk6gUmXDkCOZCQhA=)
2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: znuT/lx1cVo1Y53YyyfaSdImgaQ4zBt/+bOXogW6iF0=)
3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: TWN/2cVZRi9uapuQsJLFYt79FGpaZGSlGK7OEP/EpgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Validity
Not Before: Jul 23 01:17:58 2026 GMT
Not After : Jul 30 01:17:58 2026 GMT
Subject: CN=6a616bc7-a79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:f5:31:0b:ac:77:14:ff:a0:72:2b:9b:97:
31:88:68:48:c7:65:8a:db:d0:10:23:c9:85:59:23:
44:69:0c:92:16:82:8f:21:b0:68:4a:51:5a:dd:fa:
34:36:e6:15:1b:3e:ea:01:ac:9a:2b:b3:d3:c6:07:
52:61:ed:ed:ce:4e:c2:c6:40:de:6a:f2:b1:1e:dd:
f3:8f:fd:05:a4:88:5d:5c:9c:9f:9a:ea:75:f9:cd:
85:14:dc:e4:e5:99:fd:c9:d1:bc:4c:ac:9a:aa:da:
10:7a:16:e7:db:ae:7d:45:53:4d:00:40:02:8d:be:
bb:0c:61:8b:13:cf:80:a9:9a:c8:4d:22:d7:7d:67:
52:fa:00:17:a6:52:25:f1:46:9e:1a:98:c4:6d:39:
4c:89:35:70:0d:9b:60:c7:2e:aa:1c:f6:06:3d:a4:
3c:89:ae:86:54:8b:25:08:dd:fe:f1:d7:1e:73:5a:
71:52:d4:45:aa:98:90:dc:10:ea:a5:1a:4d:b6:ba:
96:f5:cf:7b:71:82:4a:54:10:ff:e0:cc:ff:af:8d:
77:11:a3:77:5e:42:32:5f:b5:c7:d6:2e:6c:86:41:
fb:c2:10:0c:a4:11:87:6b:52:a4:92:15:38:c3:07:
23:97:be:6f:eb:bf:d2:67:54:10:3e:a7:be:50:ba:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:CA:DE:93:89:32:D7:F4:B9:D6:28:5F:BB:3A:B7:24:B3:E1:2B
X509v3 Authority Key Identifier:
keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:e7:4f:88:94:c8:f2:8d:04:9d:41:f7:86:e1:aa:ad:09:
15:e3:91:83:fe:82:18:c5:b1:ef:9b:e5:f9:ae:73:09:8b:c5:
c6:f1:2c:db:a1:03:94:b8:d8:70:db:1d:cc:8f:13:01:4b:36:
6a:ec:6d:79:f9:ff:00:32:a6:3e:78:a2:cf:9c:ca:9e:3e:af:
96:7a:dd:ea:9b:ea:12:7b:9a:cc:23:55:b8:40:11:b8:a8:b2:
12:f9:8f:84:38:a7:e6:25:ba:cc:ab:d1:91:8d:62:da:85:0f:
8c:00:59:d7:5b:f9:57:5e:3d:51:e6:e7:90:db:60:08:ee:32:
30:bc:1d:39:c9:d8:18:d4:73:5f:e9:b8:b8:a2:b4:09:9b:6e:
ec:dc:c0:bc:b6:b6:31:88:f6:fd:5e:c6:ce:f3:b2:9e:ce:8e:
9f:c0:0e:59:c8:58:ec:8b:da:a0:e3:6e:98:61:60:cb:1a:b3:
7e:48:bc:e8:4c:05:9e:49:ef:a8:d7:92:4c:6c:ca:5f:c1:68:
61:28:43:be:e9:cf:24:16:47:e2:02:8f:f7:09:73:27:f1:ad:
44:f1:87:2b:28:15:4b:b8:eb:c4:ee:24:4a:3b:a6:e8:b8:b8:
c4:61:1d:04:d4:c6:7f:84:04:38:d0:11:b1:91:48:68:6b:6e:
f6:53:1c:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB
NUNDNzcyQzAwHhcNMjYwNzIzMDExNzU4WhcNMjYwNzMwMDExNzU4WjAYMRYwFAYD
VQQDEw02YTYxNmJjNy1hNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnH1MQusdxT/oHIrm5cxiGhIx2WK29AQI8mFWSNEaQySFoKPIbBoSlFa3fo0
NuYVGz7qAayaK7PTxgdSYe3tzk7CxkDeavKxHt3zj/0FpIhdXJyfmup1+c2FFNzk
5Zn9ydG8TKyaqtoQehbn2659RVNNAEACjb67DGGLE8+AqZrITSLXfWdS+gAXplIl
8UaeGpjEbTlMiTVwDZtgxy6qHPYGPaQ8ia6GVIslCN3+8dcec1pxUtRFqpiQ3BDq
pRpNtrqW9c97cYJKVBD/4Mz/r413EaN3XkIyX7XH1i5shkH7whAMpBGHa1KkkhU4
wwcjl75v67/SZ1QQPqe+ULpkfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoJyt6T
iTLX9LnWKF+7Orcks+ErMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2
MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE
andGX3BsMUhCNEdsekhjc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACMLnT4iUyPKNBJ1B94bhqq0JFeORg/6CGMWx75vl+a5zCYvFxvEs26EDlLjY
cNsdzI8TAUs2auxtefn/ADKmPniiz5zKnj6vlnrd6pvqEnuazCNVuEARuKiyEvmP
hDin5iW6zKvRkY1i2oUPjABZ11v5V149UebnkNtgCO4yMLwdOcnYGNRzX+m4uKK0
CZtu7NzAvLa2MYj2/V7GzvOyns6On8AOWchY7IvaoONumGFgyxqzfki86EwFnknv
qNeSTGzKX8FoYShDvunPJBZH4gKP9wlzJ/GtRPGHKygVS7jrxO4kSjum6Li4xGEd
BNTGf4QEONARsZFIaGtu9lMcjA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:19 2026 by rpki-client