
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier: 1i0sJ5SRIs0Tii/0rlO+qpPGjXbkJORYffWaZGonJlA=
Subject key identifier: 69:D5:76:BE:AA:D8:FF:BD:B4:99:9C:71:C8:BE:5D:E1:24:ED:21:37
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0C85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number: 0C21
Signing time: Fri 24 Jul 2026 19:16:45 +0000
Manifest this update: Fri 24 Jul 2026 19:16:45 +0000
Manifest next update: Fri 31 Jul 2026 19:16:45 +0000
Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: PkpiT0HUE8VVQKGaNyVRtfjTBpk7vbURF6w0OiJ09Ko=)
2: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: iHncQlzb704Umur42ElwW4bGPSOVnnYc0muryAxJjrc=)
3: AEDB1D3475DE11F1B0B3EF026FA30FBC.roa (hash: YDJ8Qkf524XwlEk4TBOaQaaYctJIr8EgzCOvwyJrIM8=)
4: 80C33BD4227811F190F6266DA4833773.roa (hash: 3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=)
5: 65F1D4D27B4711F19E9575A595A30FBC.roa (hash: j1KSZGnBJFImlCboNtO/7BW4Ss7Y/vqy8d8BNTY/u1c=)
6: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=)
7: 09534036847011F0A17FCE63C4F9AE02.roa (hash: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=)
8: 701DFED0219D11F1B09B7EBF113D8C67.roa (hash: 3bsqhgLSGJ0jySaUj0UoaU5+UCc3YemslUryYMqMd14=)
9: B0D1967C75DE11F1B0B3EF026FA30FBC.roa (hash: BbiChF6SCYai4IgXuQnZsuKwnZh6TKyuuRyPn5NnFys=)
10: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (hash: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=)
11: BB46A670849811F08EA6E444C4F9AE02.roa (hash: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM=)
12: B1D05CAC75DE11F1B0B3EF026FA30FBC.roa (hash: 58VxQi4kdt0KNatAs8ssP+0cLBCzRpsqHJy3Xk3Ojwg=)
13: AFD801FC75DE11F1B0B3EF026FA30FBC.roa (hash: FIv/UqMj3b7PrNE/9xZtwaSpC7LHThvbYEHO+luhr4g=)
14: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (hash: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Jul 24 19:16:45 2026 GMT
Not After : Jul 31 19:16:45 2026 GMT
Subject: CN=6a63ba1d-4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:56:f3:12:78:ce:32:3e:29:3b:ad:86:3d:
2a:e1:88:56:5e:8f:de:34:82:52:8f:0c:12:9f:df:
b7:e5:5c:53:97:cd:da:b6:99:cb:45:4d:03:4e:02:
b4:04:b8:5c:3e:1d:2b:63:20:ab:71:4a:70:1c:cf:
e3:cf:2d:d3:ff:03:03:59:08:4e:dd:c1:85:52:b1:
aa:f6:8e:c8:09:d9:d4:74:ea:30:09:8b:50:71:1b:
d5:89:15:01:69:b4:72:4d:e5:5e:cc:9e:cf:d1:a5:
15:f1:75:30:6e:38:00:d0:28:a1:39:f2:58:74:46:
1b:82:2c:02:c9:f8:46:24:ae:6d:b8:9e:62:86:6a:
bd:81:10:a6:fe:17:b4:9f:3a:1b:9f:52:62:6f:9e:
88:ff:ba:01:fb:44:c1:a0:84:ae:3a:12:77:14:66:
14:24:be:6e:ed:1b:c9:41:d7:37:8d:a4:7d:19:e9:
8c:f6:c2:ee:38:15:d9:c7:59:0c:41:04:95:69:64:
7c:08:79:88:96:6d:c6:cc:6b:c6:ec:f7:cb:f2:78:
53:9b:80:3d:44:61:9b:80:12:5a:b5:0f:ca:4c:d1:
aa:47:bb:d6:45:67:44:51:20:88:84:80:f2:6c:7d:
57:42:06:5c:9a:62:81:2b:62:40:95:35:23:ef:a8:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:76:BE:AA:D8:FF:BD:B4:99:9C:71:C8:BE:5D:E1:24:ED:21:37
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:34:fe:7c:12:92:7b:3c:91:b8:0d:d9:19:08:b3:ea:5a:a1:
04:15:ad:3c:f3:a1:6a:dd:8b:ee:43:6a:2e:0c:5d:07:ca:4f:
4d:14:29:79:8d:3c:0c:bd:cc:be:62:eb:84:51:24:29:3c:cb:
a5:d4:68:fc:24:6c:b7:6f:59:ef:78:1b:8f:84:ff:63:6e:5b:
9a:c5:36:50:64:ef:02:9e:9b:2f:a0:3e:af:8f:d6:0a:c2:24:
3f:a5:ff:8e:64:10:58:b8:37:b1:19:68:27:3b:dc:8d:d6:14:
f8:ca:bf:69:a6:b5:6a:58:5c:19:29:24:b9:8c:13:61:97:02:
84:57:53:3c:47:47:a3:f5:20:0e:2d:f8:61:7e:0f:8d:b7:ae:
8e:80:19:71:77:ec:2f:47:8f:1a:46:54:70:20:43:ab:18:e2:
a0:4c:fe:b7:98:10:25:7c:7f:bd:38:cd:5a:29:cc:cb:9e:e8:
5d:09:93:e9:ee:df:72:e5:12:59:18:96:df:36:25:6a:c1:c2:
ee:a0:2c:53:27:05:83:5d:b7:6c:eb:41:74:d2:72:6a:b2:f5:
e7:be:a6:39:6b:df:57:b3:82:c4:d8:32:87:0e:93:64:9e:89:
36:7b:64:a2:2f:5d:2c:00:b6:5a:1f:97:5c:3a:cd:d2:8a:81:
c4:75:58:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG
NTA5RUE2RUUwHhcNMjYwNzI0MTkxNjQ1WhcNMjYwNzMxMTkxNjQ1WjAYMRYwFAYD
VQQDEw02YTYzYmExZC00ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9dW8xJ4zjI+KTuthj0q4YhWXo/eNIJSjwwSn9+35VxTl83atpnLRU0DTgK0
BLhcPh0rYyCrcUpwHM/jzy3T/wMDWQhO3cGFUrGq9o7ICdnUdOowCYtQcRvViRUB
abRyTeVezJ7P0aUV8XUwbjgA0CihOfJYdEYbgiwCyfhGJK5tuJ5ihmq9gRCm/he0
nzobn1Jib56I/7oB+0TBoISuOhJ3FGYUJL5u7RvJQdc3jaR9GemM9sLuOBXZx1kM
QQSVaWR8CHmIlm3GzGvG7PfL8nhTm4A9RGGbgBJatQ/KTNGqR7vWRWdEUSCIhIDy
bH1XQgZcmmKBK2JAlTUj76gTHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnVdr6q
2P+9tJmccci+XeEk7SE3MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx
NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5
eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVDT+fBKSezyRuA3ZGQiz6lqhBBWtPPOhat2L7kNqLgxdB8pPTRQpeY08DL3M
vmLrhFEkKTzLpdRo/CRst29Z73gbj4T/Y25bmsU2UGTvAp6bL6A+r4/WCsIkP6X/
jmQQWLg3sRloJzvcjdYU+Mq/aaa1alhcGSkkuYwTYZcChFdTPEdHo/UgDi34YX4P
jbeujoAZcXfsL0ePGkZUcCBDqxjioEz+t5gQJXx/vTjNWinMy57oXQmT6e7fcuUS
WRiW3zYlasHC7qAsUycFg123bOtBdNJyarL1576mOWvfV7OCxNgyhw6TZJ6JNntk
oi9dLAC2Wh+XXDrN0oqBxHVY+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:11 2026 by rpki-client