
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier: PoQIVrT+1F6AsSt1JXNll/0RB20D8r9O0mF1gMHvfTQ=
Subject key identifier: C3:DA:0A:D7:82:09:30:44:78:81:19:BA:7F:E6:B2:DA:86:C7:45:0C
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number: 68
Signing time: Thu 23 Jul 2026 09:57:36 +0000
Manifest this update: Thu 23 Jul 2026 09:57:35 +0000
Manifest next update: Thu 30 Jul 2026 09:57:35 +0000
Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: 4+2N8Mu6ITP0TdaeBcrHNJk82PgP63UP6oSe/ItOsAk=)
2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=)
3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Validity
Not Before: Jul 23 09:57:35 2026 GMT
Not After : Jul 30 09:57:35 2026 GMT
Subject: CN=6a61e590-7b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:9a:71:bc:6f:44:ae:f8:6f:57:7a:30:9c:
c3:4a:4b:46:42:6e:bc:f9:57:e6:a7:43:be:b3:f1:
db:1f:52:62:3b:8d:22:05:d1:f2:d2:72:c8:2d:a2:
92:4f:d3:1f:08:28:d5:01:de:9b:92:b9:07:26:ef:
ea:d7:2d:91:12:68:89:14:1c:5e:e9:10:fa:89:2d:
a9:b8:4f:c2:f7:4c:5e:70:8b:14:41:aa:6b:ef:1d:
3f:1f:84:59:1f:4a:46:cc:30:f2:21:e4:dc:64:35:
44:81:d7:95:c1:89:1f:85:b8:44:e7:3f:d1:7a:a3:
ba:af:5d:f3:c5:93:85:b2:72:51:28:fd:05:c4:08:
04:42:22:2f:fc:c4:42:27:82:5a:c8:db:df:71:4b:
c9:2f:92:6c:8b:55:57:8c:33:33:99:7f:a2:c3:f5:
45:11:a7:b5:60:4f:33:2a:a4:65:99:40:d1:19:9d:
71:b2:74:9e:df:fe:21:f6:de:86:3c:bf:ca:9d:ef:
55:c6:f2:42:1d:93:ce:b7:a1:b8:6f:41:12:61:0e:
58:76:d5:41:66:a5:41:48:73:9f:84:4b:19:b3:55:
7c:ed:8a:ee:83:46:d0:57:78:82:b8:e8:50:5e:76:
dc:6d:04:58:38:09:2b:56:4e:40:a9:f4:05:79:e0:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:0A:D7:82:09:30:44:78:81:19:BA:7F:E6:B2:DA:86:C7:45:0C
X509v3 Authority Key Identifier:
keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:35:ce:f9:23:13:8d:98:39:5c:f5:5a:1b:f6:e8:4e:ae:49:
23:b2:34:93:46:a9:96:21:e9:c3:3a:9a:a2:39:bb:9e:da:02:
63:19:b3:c8:c8:e9:b7:f3:c0:5e:b5:c3:5e:ac:16:d2:75:f2:
50:1f:98:a2:e1:17:c6:86:45:a8:b8:df:8f:fe:6b:2e:17:cb:
4b:41:a6:7a:6b:e6:e6:43:e6:37:fe:67:f9:a3:4a:c4:99:ea:
45:fd:23:b5:7e:0d:b0:ee:fe:ad:66:ed:63:3d:17:e9:ce:8b:
e9:c4:a7:70:d1:1f:f2:f7:ba:d9:45:00:e2:76:5d:df:90:58:
cd:ed:d9:fd:1e:ac:7a:3c:f8:6b:93:1e:eb:0c:37:0e:fb:75:
9c:d7:9e:ed:8f:80:05:88:18:65:98:fe:b1:eb:fc:9b:57:f7:
d7:da:1f:3a:54:0a:31:cf:dd:39:0f:73:c1:19:b1:82:39:64:
df:89:70:96:10:28:59:0d:5c:1a:05:64:11:25:ce:f8:97:69:
b2:33:0f:50:5e:19:1a:f9:d6:7e:06:7a:31:55:31:73:7f:63:
28:51:60:06:7a:4d:f1:8f:93:c3:a5:0e:81:20:39:f3:46:28:
8e:15:39:c4:a5:a9:7d:04:12:cb:1b:11:fa:02:4c:4b:7b:42:
8b:16:71:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2
MUM2QTQ2QTAeFw0yNjA3MjMwOTU3MzVaFw0yNjA3MzAwOTU3MzVaMBgxFjAUBgNV
BAMTDTZhNjFlNTkwLTdiMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6rppxvG9ErvhvV3ownMNKS0ZCbrz5V+anQ76z8dsfUmI7jSIF0fLScsgtopJP
0x8IKNUB3puSuQcm7+rXLZESaIkUHF7pEPqJLam4T8L3TF5wixRBqmvvHT8fhFkf
SkbMMPIh5NxkNUSB15XBiR+FuETnP9F6o7qvXfPFk4WyclEo/QXECARCIi/8xEIn
glrI299xS8kvkmyLVVeMMzOZf6LD9UURp7VgTzMqpGWZQNEZnXGydJ7f/iH23oY8
v8qd71XG8kIdk863obhvQRJhDlh21UFmpUFIc5+ESxmzVXztiu6DRtBXeIK46FBe
dtxtBFg4CStWTkCp9AV54Jr1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw9oK14IJ
MER4gRm6f+ay2obHRQwwHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF
NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3
OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv
WTdGWk4xcXRCWkdIR3BHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfNc75IxONmDlc9Vob9uhOrkkjsjSTRqmWIenDOpqiObue2gJjGbPIyOm388Be
tcNerBbSdfJQH5ii4RfGhkWouN+P/msuF8tLQaZ6a+bmQ+Y3/mf5o0rEmepF/SO1
fg2w7v6tZu1jPRfpzovpxKdw0R/y97rZRQDidl3fkFjN7dn9Hqx6PPhrkx7rDDcO
+3Wc157tj4AFiBhlmP6x6/ybV/fX2h86VAoxz905D3PBGbGCOWTfiXCWEChZDVwa
BWQRJc74l2myMw9QXhka+dZ+BnoxVTFzf2MoUWAGek3xj5PDpQ6BIDnzRiiOFTnE
pal9BBLLGxH6AkxLe0KLFnH+
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:04 2026 by rpki-client