
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: uZpKHPh7v5h1OOMwBQ19kQAfYwpfETuVpv12Hg9OsvU=
Subject key identifier: 28:15:08:E9:98:4E:04:5E:8B:8E:D3:C4:FA:2C:FA:6F:5E:0C:C1:AC
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: 81
Signing time: Thu 23 Jul 2026 09:33:57 +0000
Manifest this update: Thu 23 Jul 2026 09:33:57 +0000
Manifest next update: Thu 30 Jul 2026 09:33:57 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: pIBOMdoItHSqzg4omVxO9cCjIm0893lBd94wDk5DHs4=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Jul 23 09:33:57 2026 GMT
Not After : Jul 30 09:33:57 2026 GMT
Subject: CN=6a61e005-01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:f1:00:f1:b1:ec:03:2e:17:69:b6:3f:95:
e6:b7:b1:b1:99:ac:b0:f6:5f:36:26:40:ad:ff:98:
a1:09:93:47:cb:15:ab:cc:3c:4c:e9:5c:c3:25:2a:
9b:14:dd:46:35:8d:94:74:7e:35:a2:b5:77:ad:7e:
bc:16:c7:85:6c:98:82:d4:89:80:8e:5a:c0:59:31:
85:e3:8b:82:ce:c9:8f:bd:6a:ae:1f:8b:5e:fc:99:
d0:ec:75:fe:7f:60:0b:6e:a0:d9:9a:dd:77:6c:34:
96:57:99:a8:91:93:cf:16:83:64:ee:87:49:72:08:
6f:e8:27:43:08:ca:72:2b:86:f7:e1:27:ae:87:6e:
08:7e:df:54:4b:7d:68:80:60:84:a7:7e:0a:4a:a4:
9c:75:e7:02:8f:ff:de:c9:9d:08:cb:fb:dd:6d:ab:
e5:e0:d3:ff:46:5f:33:3f:b4:f4:04:ab:54:ba:5c:
f8:79:d6:d1:f7:dc:02:f3:07:48:90:96:02:81:b9:
d0:eb:a0:75:da:7f:cb:0b:ee:f8:cb:ee:80:85:d5:
8a:d5:df:a0:4b:03:2f:c4:15:8b:73:7d:d8:a4:a7:
bf:e0:aa:95:51:c9:83:d4:ae:81:52:d4:6c:ff:14:
7a:84:fc:65:ba:7c:7b:c7:b5:71:4b:40:75:b9:37:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:08:E9:98:4E:04:5E:8B:8E:D3:C4:FA:2C:FA:6F:5E:0C:C1:AC
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a7:60:f0:bb:d9:d8:9e:50:f7:14:cb:b7:a8:d0:e4:8f:1d:
27:23:cc:82:df:d0:c7:2c:26:82:68:ae:dc:16:eb:50:7f:ad:
5f:fc:04:77:fc:5c:be:4b:30:ce:c7:37:c2:c6:88:60:c8:d6:
df:2d:d5:5b:0c:29:aa:c1:d4:e0:29:ee:b6:7f:f3:30:b4:64:
c6:81:54:88:2e:43:f8:04:5a:a5:9e:80:8e:a5:a9:06:39:bb:
c7:73:65:29:97:6e:7d:6b:b5:b3:f5:24:70:7f:74:fa:f4:22:
e4:83:6b:b7:4a:00:4b:67:42:b7:cc:75:74:f3:2f:c3:8d:17:
af:42:69:83:12:74:9c:86:ab:50:00:1e:be:50:85:b4:60:25:
10:5c:31:14:33:c9:10:f9:93:7d:00:52:e6:a9:3d:83:ad:70:
10:59:11:84:d6:c3:97:3b:7b:87:6d:1b:79:59:45:3f:36:31:
95:2a:26:51:43:3e:ea:e1:5b:17:1e:74:d7:39:8a:3b:10:a7:
2c:b3:0d:6d:5a:b3:98:47:9b:a1:b9:6b:dc:78:18:bb:07:37:
5f:5c:b4:cf:ed:fe:49:50:85:db:86:72:ae:b0:42:b3:b5:ae:
91:53:74:1f:f4:1e:5a:b9:d5:97:f0:e5:18:42:b5:3e:8d:c3:
85:74:b7:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZFQTgxMTAvBgNVBAUTKDc3ODQ4ODE0OEUzQUUyRjE0QUQ0MDg1NEY3QTJGQTU5
NTc3NUM1NzUwHhcNMjYwNzIzMDkzMzU3WhcNMjYwNzMwMDkzMzU3WjAYMRYwFAYD
VQQDEw02YTYxZTAwNS0wMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFbxAPGx7AMuF2m2P5Xmt7Gxmayw9l82JkCt/5ihCZNHyxWrzDxM6VzDJSqb
FN1GNY2UdH41orV3rX68FseFbJiC1ImAjlrAWTGF44uCzsmPvWquH4te/JnQ7HX+
f2ALbqDZmt13bDSWV5mokZPPFoNk7odJcghv6CdDCMpyK4b34Seuh24Ift9US31o
gGCEp34KSqScdecCj//eyZ0Iy/vdbavl4NP/Rl8zP7T0BKtUulz4edbR99wC8wdI
kJYCgbnQ66B12n/LC+74y+6AhdWK1d+gSwMvxBWLc33YpKe/4KqVUcmD1K6BUtRs
/xR6hPxlunx7x7VxS0B1uTdpKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgVCOmY
TgRei47TxPos+m9eDMGsMB8GA1UdIwQYMBaAFHeEiBSOOuLxStQIVPei+llXdcV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkVBOC8wNjhFNzY3QUM1
OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi9kNFNJRkk0NjR2RksxQWhVOTZMNldWZDF4
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkVBOC8wNjhFNzY3QUM1OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi9kNFNJRkk0NjR2
RksxQWhVOTZMNldWZDF4WFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN6dg8LvZ2J5Q9xTLt6jQ5I8dJyPMgt/Qxywmgmiu3BbrUH+tX/wEd/xcvksw
zsc3wsaIYMjW3y3VWwwpqsHU4Cnutn/zMLRkxoFUiC5D+ARapZ6AjqWpBjm7x3Nl
KZdufWu1s/UkcH90+vQi5INrt0oAS2dCt8x1dPMvw40Xr0JpgxJ0nIarUAAevlCF
tGAlEFwxFDPJEPmTfQBS5qk9g61wEFkRhNbDlzt7h20beVlFPzYxlSomUUM+6uFb
Fx501zmKOxCnLLMNbVqzmEeboblr3HgYuwc3X1y0z+3+SVCF24ZyrrBCs7WukVN0
H/QeWrnVl/DlGEK1Po3DhXS3BA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:28 2026 by rpki-client