
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: oizp/LUt8b4DEo+HPT6MYBLTX6Cb5w/54ygOJK1/5wo=
Subject key identifier: 63:62:09:82:A8:50:4D:45:C8:75:FF:F3:55:46:36:93:1E:B1:04:35
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 0231
Signing time: Thu 23 Jul 2026 03:51:50 +0000
Manifest this update: Thu 23 Jul 2026 03:51:50 +0000
Manifest next update: Thu 30 Jul 2026 03:51:50 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: Dkc9wmuVs2uQ6GnIR3ks6PAiaBK7+a+fb9+31K9U71M=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Jul 23 03:51:50 2026 GMT
Not After : Jul 30 03:51:50 2026 GMT
Subject: CN=6a618fd6-aefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:6d:d3:33:bd:3d:23:03:8c:cf:43:2c:c6:
fe:1a:df:d0:73:26:f8:2a:bb:89:13:e1:99:21:d9:
b2:50:05:3d:35:31:7d:b7:ad:db:b2:f3:37:e6:b6:
d8:e7:03:28:b6:1d:d2:7f:3c:48:c5:df:a5:90:75:
db:36:b0:f5:8d:c9:2f:d1:59:f9:1f:38:32:80:2a:
5c:c4:3c:d3:b2:29:6b:2b:72:64:6d:69:ef:0a:b5:
07:88:d7:80:1e:0a:94:42:29:da:59:36:da:4b:ff:
15:b4:7c:bf:79:25:49:60:cb:4f:78:8f:26:77:cb:
e0:59:52:1e:4f:7f:ef:0d:80:74:29:34:73:89:38:
90:f5:10:3e:a5:8e:1d:6e:8f:5e:3a:c0:ae:ea:29:
e3:12:99:76:71:6f:eb:d9:dc:14:f8:07:d4:04:3e:
d1:db:a5:06:24:14:c2:3e:2a:8f:1d:d9:32:70:c1:
5c:74:4c:24:48:c5:fc:43:03:71:ef:79:b4:b7:29:
2c:08:fb:d9:58:3a:9b:8f:3e:10:ed:14:1f:0c:ce:
07:1d:d5:a3:21:92:7c:a6:02:5a:bd:da:62:0e:f0:
8a:f7:44:89:ed:17:c4:8c:cd:57:5a:67:27:8b:90:
5a:e6:6b:52:34:90:c1:16:a5:81:a2:ad:f9:40:56:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:09:82:A8:50:4D:45:C8:75:FF:F3:55:46:36:93:1E:B1:04:35
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:cc:e6:ef:41:28:f4:50:5d:3a:bc:f2:33:c2:85:0b:4f:
a0:d7:14:af:e0:92:d4:a7:05:21:2b:4b:88:f9:7a:81:4e:d4:
55:31:14:eb:d7:a8:20:21:2c:72:aa:27:57:e3:e1:44:e0:5a:
e6:49:fb:33:97:10:fe:84:7c:5b:3b:6c:91:cb:74:df:9c:9f:
a4:2e:62:a1:11:1b:75:9e:b6:48:02:7b:95:51:fb:a0:1a:b7:
0c:42:48:16:15:61:91:f4:aa:5c:1b:5f:39:d3:38:b1:76:e4:
d9:cc:cb:5d:43:cd:4f:94:82:20:27:bf:73:c4:b7:47:8c:c7:
f1:1f:a1:25:56:3a:7f:1f:1d:a2:10:d9:7a:fc:92:bb:f7:45:
27:26:1d:76:25:7f:fe:2f:7e:2d:9f:cd:fb:b8:f1:f5:bd:a1:
fe:18:90:ef:8d:50:f4:7c:ac:59:c6:88:11:de:e5:59:ff:33:
b2:23:83:26:d4:14:3b:ef:1b:cb:8d:2b:a6:dc:06:83:b7:a6:
58:26:17:ea:37:67:87:a9:1a:40:21:37:ff:0c:01:9a:74:d3:
d4:85:5f:23:80:21:ff:e5:ad:88:25:4a:11:97:a0:9c:96:82:
39:da:61:b5:5d:39:6d:da:a8:6a:5e:6f:9f:e0:e5:fa:6a:3f:
d5:aa:64:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND
OEJGREEwRTcwHhcNMjYwNzIzMDM1MTUwWhcNMjYwNzMwMDM1MTUwWjAYMRYwFAYD
VQQDEw02YTYxOGZkNi1hZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstlt0zO9PSMDjM9DLMb+Gt/Qcyb4KruJE+GZIdmyUAU9NTF9t63bsvM35rbY
5wMoth3SfzxIxd+lkHXbNrD1jckv0Vn5HzgygCpcxDzTsilrK3JkbWnvCrUHiNeA
HgqUQinaWTbaS/8VtHy/eSVJYMtPeI8md8vgWVIeT3/vDYB0KTRziTiQ9RA+pY4d
bo9eOsCu6injEpl2cW/r2dwU+AfUBD7R26UGJBTCPiqPHdkycMFcdEwkSMX8QwNx
73m0tyksCPvZWDqbjz4Q7RQfDM4HHdWjIZJ8pgJavdpiDvCK90SJ7RfEjM1XWmcn
i5Ba5mtSNJDBFqWBoq35QFYyHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNiCYKo
UE1FyHX/81VGNpMesQQ1MB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG
NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du
MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeZTM5u9BKPRQXTq88jPChQtPoNcUr+CS1KcFIStLiPl6gU7UVTEU69eoICEs
cqonV+PhROBa5kn7M5cQ/oR8Wztskct035yfpC5ioREbdZ62SAJ7lVH7oBq3DEJI
FhVhkfSqXBtfOdM4sXbk2czLXUPNT5SCICe/c8S3R4zH8R+hJVY6fx8dohDZevyS
u/dFJyYddiV//i9+LZ/N+7jx9b2h/hiQ741Q9HysWcaIEd7lWf8zsiODJtQUO+8b
y40rptwGg7emWCYX6jdnh6kaQCE3/wwBmnTT1IVfI4Ah/+WtiCVKEZegnJaCOdph
tV05bdqoal5vn+Dl+mo/1apkqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:21 2026 by rpki-client