
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier: iFXL4awNiDn6mo/G2GO8KvU/o/Vceg8wn3+t2QpTfD8=
Subject key identifier: 7D:0C:32:54:5D:70:89:CB:37:39:62:69:77:40:DA:1A:61:AF:20:63
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 0735
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number: 0718
Signing time: Wed 22 Jul 2026 22:44:09 +0000
Manifest this update: Wed 22 Jul 2026 22:44:08 +0000
Manifest next update: Wed 29 Jul 2026 22:44:08 +0000
Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: FZq36WnVKgGB9NNCWhfhzTgUgoSZZ4r3A5zEKpaiZx4=)
2: 3BD522E27EAF11F1AD3956B567A30FBC.roa (hash: mlnAl1IpbI+Gu2EUhn4HWE9P+hbIJZwcPBC54TT0gKs=)
3: 3D0E47EC7EAF11F1AD3956B567A30FBC.roa (hash: hwBBWpZCce93zQCmTKn/kHh0n1NiFx0Q0/r/Ql0rGy8=)
4: 3B31153A7EAF11F1AD3956B567A30FBC.roa (hash: +FSo/bLhL935Bd0K6YMZLsxFgcC1GeAnpkcOFnacIto=)
5: 3C74428C7EAF11F1AD3956B567A30FBC.roa (hash: 6LZ4bPT9bZsQt1NMk36EUX/7nrjtc4AN+ODrl8tZWGg=)
6: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (hash: 6zIL5/XoQTIyk3Jr0VGLPqv9G9qbae/PYGD1mNfyaeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845 (0x735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Jul 22 22:44:08 2026 GMT
Not After : Jul 29 22:44:08 2026 GMT
Subject: CN=6a6147b9-025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:74:d0:59:43:25:53:83:df:f3:32:4f:c7:
ff:d2:49:b6:6e:4e:63:cf:4e:c5:42:70:88:72:ce:
28:a6:31:71:0a:b5:ef:d8:c8:e4:19:22:4b:65:de:
02:66:57:e3:4f:1b:05:e5:d4:b5:de:a0:2c:44:57:
7b:43:1c:d0:de:fb:b3:a0:29:db:15:c1:25:93:50:
b2:e3:6e:ed:49:9b:7b:83:06:44:f6:a8:19:31:79:
ef:5e:9a:10:75:41:29:6b:4b:da:48:f5:58:a8:2d:
62:7f:6a:27:78:b9:a4:cd:e3:c8:2b:6b:2b:a2:4b:
cf:9e:55:8d:de:99:09:0e:a1:d7:17:23:19:1a:39:
58:2b:22:b7:b8:6b:24:a7:8c:13:76:75:f9:33:b9:
44:ea:ee:df:b9:8e:de:23:06:83:1d:a4:c7:ce:53:
a3:a0:ca:7d:97:6c:2d:bf:34:5e:56:27:f1:cc:0f:
38:1c:c7:f6:27:b1:9a:cb:96:d5:3d:d1:f1:f2:61:
b2:fd:b8:4b:93:49:4f:91:89:1f:2f:0a:d6:ad:39:
82:4d:fd:4b:cd:4e:6e:f9:70:49:8c:72:d6:b0:85:
f4:c9:79:4c:5f:32:a9:7e:72:7c:6a:c7:18:f6:00:
6c:72:c3:20:ee:c2:27:3e:f5:d8:5b:38:23:6b:a9:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:32:54:5D:70:89:CB:37:39:62:69:77:40:DA:1A:61:AF:20:63
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:7c:11:29:9b:5a:33:72:28:a3:be:3e:13:9a:1a:d2:ec:
82:f4:20:d5:e6:d4:9f:a8:3e:28:7e:30:0f:97:f3:4f:7e:33:
d7:8b:3e:0a:f2:b5:ef:20:2b:0f:19:73:9b:3e:86:1b:fc:fa:
4d:66:42:61:d0:f8:aa:65:84:af:27:27:2e:3b:7a:52:5f:37:
ad:29:59:30:4e:d6:65:b6:37:0b:55:a1:7f:9e:67:e4:86:d8:
89:83:70:90:5b:53:7b:33:60:b1:d2:db:bd:00:53:43:57:3a:
0e:df:e6:cb:bf:17:2e:b6:07:98:1c:12:8a:c1:23:f9:30:ad:
48:f3:60:da:f8:b6:03:fd:42:ff:9c:eb:b5:d8:0b:83:02:e9:
b0:b9:45:a0:27:d0:db:89:fd:d3:49:77:6b:fd:0e:09:b9:4a:
75:83:d7:dd:da:c0:b6:00:98:d7:34:11:9d:e8:df:de:47:56:
40:31:66:8c:ff:06:b8:d4:e7:0a:fa:75:9a:c8:5c:cd:fd:74:
cd:8f:cd:bb:e5:34:98:65:eb:37:22:66:97:c0:e0:cf:f7:b6:
85:02:94:bb:a6:36:f5:72:1b:14:e9:ca:90:ab:54:88:02:55:
bc:3f:0c:51:bf:26:12:2b:6e:10:df:e7:f9:0a:ac:e7:26:7e:
e5:da:27:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjYwNzIyMjI0NDA4WhcNMjYwNzI5MjI0NDA4WjAYMRYwFAYD
VQQDEw02YTYxNDdiOS0wMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3sp00FlDJVOD3/MyT8f/0km2bk5jz07FQnCIcs4opjFxCrXv2MjkGSJLZd4C
ZlfjTxsF5dS13qAsRFd7QxzQ3vuzoCnbFcElk1Cy427tSZt7gwZE9qgZMXnvXpoQ
dUEpa0vaSPVYqC1if2oneLmkzePIK2srokvPnlWN3pkJDqHXFyMZGjlYKyK3uGsk
p4wTdnX5M7lE6u7fuY7eIwaDHaTHzlOjoMp9l2wtvzReVifxzA84HMf2J7Gay5bV
PdHx8mGy/bhLk0lPkYkfLwrWrTmCTf1LzU5u+XBJjHLWsIX0yXlMXzKpfnJ8ascY
9gBscsMg7sInPvXYWzgja6nNMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0MMlRd
cInLNzliaXdA2hphryBjMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4
VHhTUzBHTGJEWkdVNmZVSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATct8ESmbWjNyKKO+PhOaGtLsgvQg1ebUn6g+KH4wD5fzT34z14s+CvK17yAr
Dxlzmz6GG/z6TWZCYdD4qmWErycnLjt6Ul83rSlZME7WZbY3C1Whf55n5IbYiYNw
kFtTezNgsdLbvQBTQ1c6Dt/my78XLrYHmBwSisEj+TCtSPNg2vi2A/1C/5zrtdgL
gwLpsLlFoCfQ24n900l3a/0OCblKdYPX3drAtgCY1zQRnejf3kdWQDFmjP8GuNTn
Cvp1mshczf10zY/Nu+U0mGXrNyJml8Dgz/e2hQKUu6Y29XIbFOnKkKtUiAJVvD8M
Ub8mEituEN/n+Qqs5yZ+5donSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:00:24 2026 by rpki-client