
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: TvOCJuYhd1SFA3TkDLsjZWynwRxHKGvj3M7qy4ATdb0=
Subject key identifier: 0B:AE:66:73:B3:1C:B2:26:F8:B8:6A:6A:CD:F7:6B:42:59:16:03:A0
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 082D
Signing time: Wed 22 Jul 2026 21:37:31 +0000
Manifest this update: Wed 22 Jul 2026 21:37:30 +0000
Manifest next update: Wed 29 Jul 2026 21:37:30 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: H4+NsjjIurM6L58VTdfYm6RxcSZqNT7mGqzWQDALbNQ=)
2: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: ckkrFHfHPvCjRaJjyuzP7GHAhWSZqQc+qwApdpLN6A8=)
3: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: m6XByjxJzDUTkNjuzEeyi14AtxJwJj6V0wXPEnnJGWs=)
4: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: LHyE9JquxrZVA6+YxqyZyhj2fRXxq3kNX+szFQORjMs=)
5: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: zW47GWJIKBsxxAmlt2jzTuG4DK9SAdUIfdf1Khk40KQ=)
6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 7Dc/p26scQyExOCr6ls3XR465cvStZZWQekkba/lKsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Jul 22 21:37:30 2026 GMT
Not After : Jul 29 21:37:30 2026 GMT
Subject: CN=6a61381b-bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:a1:96:af:c8:dd:f3:a8:83:6f:e7:d1:56:
03:57:ba:4e:b3:52:39:23:20:9a:6d:0d:73:8d:d3:
5c:9e:7d:86:35:60:90:10:8c:d6:b1:22:98:0b:cd:
a3:d5:e5:7e:ef:a3:1c:08:00:cf:56:b0:40:af:f6:
99:fc:82:ab:39:4d:69:04:c7:f1:96:81:60:dc:34:
7e:54:4b:48:fc:f0:12:4f:41:39:7a:a7:72:57:50:
bb:3a:39:d0:4b:07:22:71:17:30:ff:3a:75:99:fb:
4c:7b:66:8e:57:30:3b:4e:dd:d4:46:bb:7d:c9:c3:
f8:aa:d7:b1:b4:55:3b:df:26:33:97:f2:13:04:58:
88:c7:30:f7:91:79:1d:7c:b3:99:58:c4:06:39:5f:
44:11:8a:75:b9:f5:65:6e:db:0d:3e:57:9e:90:2d:
8b:93:5e:0a:a5:23:6f:f0:81:20:7c:27:af:a4:8d:
89:c0:7d:c7:34:66:b4:c6:e0:fe:b4:81:2c:9a:cb:
7b:df:aa:9a:84:6e:54:61:c2:07:20:69:ed:69:39:
e9:d1:a5:1d:77:63:25:50:7e:0b:54:dc:d6:73:4f:
3c:31:1a:fb:df:79:a5:42:da:ad:03:35:d9:34:a7:
e9:76:f5:07:b5:e8:0b:43:0d:49:52:7e:f2:60:fa:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:66:73:B3:1C:B2:26:F8:B8:6A:6A:CD:F7:6B:42:59:16:03:A0
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:6d:a4:d3:e2:c2:a3:82:ad:72:17:16:4b:8b:8d:16:4e:
f6:fa:02:72:f3:27:c5:df:c4:f5:e2:76:c2:1b:75:9e:9b:b5:
25:af:44:de:58:19:f6:ba:2e:e7:c3:fb:ae:01:f9:92:e5:0a:
24:69:d3:57:c0:dc:f4:8e:1e:2e:33:54:49:67:e9:84:4b:bc:
2a:1b:90:9d:29:d5:fd:8a:43:58:25:67:e6:b4:30:0e:07:e3:
88:37:fc:4a:85:f4:92:24:ad:8f:87:bb:2d:8b:49:94:bf:e2:
d3:d8:dc:0c:28:7b:b1:a2:ad:aa:dd:bb:ea:33:aa:d3:99:17:
97:52:e6:e7:6e:de:84:79:a4:e9:50:e5:4c:f0:22:26:21:b6:
99:fa:cf:fa:78:97:e5:1e:82:48:f5:f3:2f:f6:10:17:30:c0:
f7:b3:37:89:d5:08:ae:55:e9:de:c7:8e:e7:85:c2:64:90:08:
5d:a0:98:36:91:08:bd:87:b2:f3:8c:0d:71:0f:a9:c1:be:68:
f9:55:2f:9b:de:b5:10:2a:78:07:e8:d1:30:55:b1:27:8a:44:
2c:ca:8e:d4:af:2b:bd:7b:66:34:3a:a2:d0:e4:44:e0:01:0a:
5e:c9:eb:53:4f:2d:88:44:40:9e:98:56:cb:c3:39:c0:eb:d8:
a7:21:a5:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex
MEEyMTQ3QjIwHhcNMjYwNzIyMjEzNzMwWhcNMjYwNzI5MjEzNzMwWjAYMRYwFAYD
VQQDEw02YTYxMzgxYi1iZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIWhlq/I3fOog2/n0VYDV7pOs1I5IyCabQ1zjdNcnn2GNWCQEIzWsSKYC82j
1eV+76McCADPVrBAr/aZ/IKrOU1pBMfxloFg3DR+VEtI/PAST0E5eqdyV1C7OjnQ
SwcicRcw/zp1mftMe2aOVzA7Tt3URrt9ycP4qtextFU73yYzl/ITBFiIxzD3kXkd
fLOZWMQGOV9EEYp1ufVlbtsNPleekC2Lk14KpSNv8IEgfCevpI2JwH3HNGa0xuD+
tIEsmst736qahG5UYcIHIGntaTnp0aUdd2MlUH4LVNzWc088MRr733mlQtqtAzXZ
NKfpdvUHtegLQw1JUn7yYPommQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuuZnOz
HLIm+Lhqas33a0JZFgOgMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz
MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz
bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARkVtpNPiwqOCrXIXFkuLjRZO9voCcvMnxd/E9eJ2wht1npu1Ja9E3lgZ9rou
58P7rgH5kuUKJGnTV8Dc9I4eLjNUSWfphEu8KhuQnSnV/YpDWCVn5rQwDgfjiDf8
SoX0kiStj4e7LYtJlL/i09jcDCh7saKtqt276jOq05kXl1Lm527ehHmk6VDlTPAi
JiG2mfrP+niX5R6CSPXzL/YQFzDA97M3idUIrlXp3seO54XCZJAIXaCYNpEIvYey
84wNcQ+pwb5o+VUvm961ECp4B+jRMFWxJ4pELMqO1K8rvXtmNDqi0ORE4AEKXsnr
U08tiERAnphWy8M5wOvYpyGlVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:22 2026 by rpki-client