
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: 1uWI0wfy3XixMyoP89uOg1/NUm9GRZL0uyyv1NqD/ME=
Subject key identifier: 3B:30:74:20:30:CE:B9:C8:B1:BB:E8:F4:A4:F4:73:EA:05:95:52:C0
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 02B1
Signing time: Wed 22 Jul 2026 16:07:04 +0000
Manifest this update: Wed 22 Jul 2026 16:07:03 +0000
Manifest next update: Wed 29 Jul 2026 16:07:03 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: fUXjLdse685o/oSfz4noCLkzI1JYpc+WbI6z5fQbSzc=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Jul 22 16:07:03 2026 GMT
Not After : Jul 29 16:07:03 2026 GMT
Subject: CN=6a60eaa8-370f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:10:9e:8e:17:79:ee:03:2e:38:bf:4e:21:
f9:1f:c7:aa:f3:05:b8:1a:e0:58:2a:40:29:82:f7:
1c:cd:a3:b6:05:9b:80:10:33:2c:91:53:f4:0a:93:
58:b2:95:66:43:75:3a:61:31:03:83:fc:ce:2e:84:
21:18:9f:3b:01:71:e4:3e:2a:7d:6d:5d:d4:a2:c9:
eb:e7:a4:08:45:48:2d:ab:33:89:8a:97:91:8a:db:
71:af:32:5d:ec:43:3e:a6:e1:24:f1:25:f9:64:6b:
30:ec:cc:cf:ca:99:76:95:97:df:80:d9:d9:f7:1e:
46:38:e4:3a:6f:4d:a5:52:07:5c:2f:c1:e7:fb:84:
ee:a0:43:55:ac:d8:4b:f8:0a:cc:b2:44:6a:27:8d:
60:ba:f5:e0:55:7c:7a:b8:de:3e:ad:68:9c:80:d8:
ac:18:ba:a1:cc:5f:67:ba:16:02:3d:8f:0a:87:f6:
e8:19:4d:32:40:f8:31:19:40:1c:66:27:fc:fb:d1:
31:fe:a0:43:4c:b0:e5:85:67:58:a5:05:9a:99:b0:
5c:4c:af:31:16:9a:b6:82:28:d6:87:0a:a6:81:a8:
6c:26:21:06:17:65:cb:1d:64:34:4e:88:1d:ce:fd:
8f:87:32:6d:f9:a8:e6:a5:5a:05:ef:ce:87:da:15:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:74:20:30:CE:B9:C8:B1:BB:E8:F4:A4:F4:73:EA:05:95:52:C0
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9f:49:6f:ed:8c:18:e9:7a:73:8e:2e:b2:9f:50:73:52:56:
0e:fe:ce:86:e7:72:e5:3b:eb:2e:ff:d2:f4:e9:04:92:4c:1e:
53:ed:0b:ff:57:4b:35:7f:cb:a0:6c:fe:a5:3b:c0:f5:83:d6:
5b:1c:a3:6a:8e:93:4c:e8:84:7f:fe:8d:9a:4c:46:4c:3f:c1:
92:12:5f:a2:14:ed:6c:e1:39:18:0c:b1:95:85:e0:8b:28:56:
ad:24:5a:12:17:95:45:cf:55:88:6c:2f:12:55:26:59:1f:0e:
5f:6a:ed:d2:1a:2e:5a:5c:35:3c:52:67:d5:64:ee:e4:6b:e5:
f7:26:15:fe:65:0f:56:dd:f5:dd:6c:c4:83:92:fb:1b:52:e9:
bf:41:bf:ab:46:24:80:f1:9d:0f:55:02:3d:81:b6:05:80:67:
93:48:c7:95:18:c8:f6:38:02:70:0d:46:5b:19:cb:36:e7:59:
a5:2a:cd:86:e8:a9:be:ab:98:69:3d:a6:dc:9c:56:10:56:8d:
ee:a8:f3:7e:39:f4:8b:aa:75:8c:00:68:46:81:98:55:57:1e:
24:42:d1:37:83:45:b5:54:a7:9f:c0:e0:33:c0:06:c7:7f:fd:
65:d6:65:bd:16:08:eb:ab:2d:3d:4e:69:71:ce:f8:40:64:d5:
3b:31:5a:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5
MDg5NkFCRUIwHhcNMjYwNzIyMTYwNzAzWhcNMjYwNzI5MTYwNzAzWjAYMRYwFAYD
VQQDEw02YTYwZWFhOC0zNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyEQno4Xee4DLji/TiH5H8eq8wW4GuBYKkApgvcczaO2BZuAEDMskVP0CpNY
spVmQ3U6YTEDg/zOLoQhGJ87AXHkPip9bV3Uosnr56QIRUgtqzOJipeRittxrzJd
7EM+puEk8SX5ZGsw7MzPypl2lZffgNnZ9x5GOOQ6b02lUgdcL8Hn+4TuoENVrNhL
+ArMskRqJ41guvXgVXx6uN4+rWicgNisGLqhzF9nuhYCPY8Kh/boGU0yQPgxGUAc
Zif8+9Ex/qBDTLDlhWdYpQWambBcTK8xFpq2gijWhwqmgahsJiEGF2XLHWQ0Togd
zv2PhzJt+ajmpVoF786H2hXjWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDswdCAw
zrnIsbvo9KT0c+oFlVLAMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx
OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu
Ym1hTVI5UkltTUNRaVdxLXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOp9Jb+2MGOl6c44usp9Qc1JWDv7Ohudy5TvrLv/S9OkEkkweU+0L/1dLNX/L
oGz+pTvA9YPWWxyjao6TTOiEf/6NmkxGTD/BkhJfohTtbOE5GAyxlYXgiyhWrSRa
EheVRc9ViGwvElUmWR8OX2rt0houWlw1PFJn1WTu5Gvl9yYV/mUPVt313WzEg5L7
G1Lpv0G/q0YkgPGdD1UCPYG2BYBnk0jHlRjI9jgCcA1GWxnLNudZpSrNhuipvquY
aT2m3JxWEFaN7qjzfjn0i6p1jABoRoGYVVceJELRN4NFtVSnn8DgM8AGx3/9ZdZl
vRYI66stPU5pcc74QGTVOzFaAA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:34 2026 by rpki-client