
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier: 7aQ/uL2ZqMsxLesNAh9gY8rM5PEao2CgT1/s4IGfin0=
Subject key identifier: 38:29:E0:48:69:47:4D:40:E7:9E:30:0A:78:93:C9:4D:B3:A8:00:A1
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 0956
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number: 094A
Signing time: Wed 22 Jul 2026 20:37:31 +0000
Manifest this update: Wed 22 Jul 2026 20:37:31 +0000
Manifest next update: Wed 29 Jul 2026 20:37:31 +0000
Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: YV7ZLNXp5P9RKx+k3484cDK8j3n/JfLX9Zw+Zi1RyRg=)
2: 1FB57044282911F18EC27654C4833773.roa (hash: tvgwjpZx2kCjR2qHWsoqJbARDpqCYop4rB7GvFRI6Uk=)
3: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: CR2jSan4WVvbilZ1W676Y7qalg7FKVHGW317Tr8xfUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Validity
Not Before: Jul 22 20:37:31 2026 GMT
Not After : Jul 29 20:37:31 2026 GMT
Subject: CN=6a612a0b-833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:5a:1e:a3:e4:32:8d:e0:cb:ca:f3:2d:78:
d5:ad:d0:be:3d:f9:e5:04:f4:15:87:81:4f:17:cd:
50:bf:0e:cd:03:21:62:ed:f8:80:b4:af:8b:16:22:
3e:b1:61:f6:bc:e3:66:e6:72:4d:91:c7:04:62:d3:
53:12:13:92:cb:86:f8:c1:53:c3:77:a1:4b:71:30:
68:66:af:51:2a:01:59:d3:4d:3c:86:dc:da:47:6d:
14:5a:ab:aa:03:b9:ab:29:12:35:d0:6e:ea:49:fc:
64:e4:89:60:55:bc:78:6d:19:90:bf:53:2c:c6:7b:
7b:43:4e:c5:ec:0c:2b:3d:c1:f9:02:f6:a7:29:37:
33:8d:08:3b:58:b4:32:5b:19:91:8f:d3:5a:2d:c6:
21:80:3a:92:43:63:3d:c0:1d:d6:b1:9d:0d:af:94:
87:68:27:86:34:0c:15:bb:bb:1f:52:38:61:3d:cc:
22:f7:83:e6:1a:f8:78:fb:19:f3:d3:c0:89:da:67:
12:ad:0f:62:02:9b:31:b3:e6:d1:62:90:1e:a8:4f:
50:64:fb:3b:a5:bf:ca:7d:eb:9d:48:db:fd:63:dc:
c3:26:85:7a:ef:02:81:9a:f4:88:8e:d1:c3:6f:63:
36:37:ad:77:10:6b:23:60:3c:bd:6f:66:5e:b1:a0:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:E0:48:69:47:4D:40:E7:9E:30:0A:78:93:C9:4D:B3:A8:00:A1
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:53:42:3a:a2:11:6a:7e:dd:d8:e5:ce:03:da:55:7a:d8:
45:f5:ff:08:76:1c:fe:2a:cd:04:eb:bb:0a:74:5c:93:a2:cd:
d9:19:68:df:78:71:34:13:02:bc:57:11:4c:d8:35:f0:06:44:
1b:72:a1:c3:e1:a0:0b:7f:9d:0b:db:6b:c6:cc:ad:08:4b:29:
87:74:6b:20:20:29:39:ac:b6:fe:ec:50:56:5e:46:37:94:d6:
84:d2:7c:03:ff:6a:e2:fb:54:c3:50:7b:8a:b3:48:12:21:8f:
1f:ec:2a:ad:95:fa:e7:a1:7e:56:5f:73:fc:25:0f:6d:35:b6:
19:78:99:d7:34:e3:a3:d4:53:0b:88:a8:11:9e:06:d2:38:32:
77:ff:c4:e9:5d:ec:48:9b:01:94:db:89:8d:1e:e0:ce:5a:cb:
92:6e:5a:50:de:11:bc:8c:1d:41:0a:aa:e5:1c:56:54:d9:01:
e7:e3:f8:e9:bb:ea:72:fd:8b:73:75:74:1e:f5:d5:88:39:48:
c7:57:46:99:ee:ee:c8:f0:26:1b:80:68:e7:b6:e3:a1:13:16:
9d:33:a6:1b:4a:f8:b8:04:5a:cf:dd:7a:e5:dc:b7:6d:96:5b:
aa:64:2f:c2:ec:e2:82:92:60:4d:9a:82:b5:35:eb:d2:2d:fc:
04:5d:06:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3
RUE3QTRGMDIwHhcNMjYwNzIyMjAzNzMxWhcNMjYwNzI5MjAzNzMxWjAYMRYwFAYD
VQQDEw02YTYxMmEwYi04MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIRaHqPkMo3gy8rzLXjVrdC+PfnlBPQVh4FPF81Qvw7NAyFi7fiAtK+LFiI+
sWH2vONm5nJNkccEYtNTEhOSy4b4wVPDd6FLcTBoZq9RKgFZ0008htzaR20UWquq
A7mrKRI10G7qSfxk5IlgVbx4bRmQv1Msxnt7Q07F7AwrPcH5AvanKTczjQg7WLQy
WxmRj9NaLcYhgDqSQ2M9wB3WsZ0Nr5SHaCeGNAwVu7sfUjhhPcwi94PmGvh4+xnz
08CJ2mcSrQ9iApsxs+bRYpAeqE9QZPs7pb/KfeudSNv9Y9zDJoV67wKBmvSIjtHD
b2M2N613EGsjYDy9b2ZesaDbOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgp4Ehp
R01A554wCniTyU2zqAChMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0
QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw
dExwampOeUhuQXAtcDZUd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkPVTQjqiEWp+3djlzgPaVXrYRfX/CHYc/irNBOu7CnRck6LN2Rlo33hxNBMC
vFcRTNg18AZEG3Khw+GgC3+dC9trxsytCEsph3RrICApOay2/uxQVl5GN5TWhNJ8
A/9q4vtUw1B7irNIEiGPH+wqrZX656F+Vl9z/CUPbTW2GXiZ1zTjo9RTC4ioEZ4G
0jgyd//E6V3sSJsBlNuJjR7gzlrLkm5aUN4RvIwdQQqq5RxWVNkB5+P46bvqcv2L
c3V0HvXViDlIx1dGme7uyPAmG4Bo57bjoRMWnTOmG0r4uARaz9165dy3bZZbqmQv
wuzigpJgTZqCtTXr0i38BF0GNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:53 2026 by rpki-client