
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier: nWWJfJDQ97vs1I0Rx+3+U5n0LM8+9iLt4L0iXvyYvII=
Subject key identifier: 4F:49:1A:65:0C:B9:32:49:1E:50:A4:58:95:94:6E:5E:CF:D2:51:16
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number: 118B
Signing time: Wed 22 Jul 2026 17:42:17 +0000
Manifest this update: Wed 22 Jul 2026 17:42:17 +0000
Manifest next update: Wed 29 Jul 2026 17:42:17 +0000
Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: 0G7XgCS5eBGAUR3bPHHOUnYFeSqdV+6Y8ITIwiQHkzs=)
2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: FdVP/EbnoWbW+SwswO9IBvz4Tx/t0gGhpNr1OdlhBmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Validity
Not Before: Jul 22 17:42:17 2026 GMT
Not After : Jul 29 17:42:17 2026 GMT
Subject: CN=6a6100f9-4d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:91:0f:32:b0:26:c4:01:dd:dd:b7:69:5f:
ac:da:6a:f1:51:be:2c:0d:21:56:9e:7e:d8:a9:5d:
ad:c2:dd:df:59:80:0b:2e:57:89:c6:7d:f9:9c:31:
02:a9:90:57:aa:5e:16:e2:b9:39:eb:dd:a0:db:3a:
f5:a2:df:29:ba:d5:95:33:dc:07:b3:aa:2c:a5:26:
9d:f3:51:ec:da:c1:c7:f2:32:73:2f:3c:a7:17:c6:
f6:dd:1c:b7:29:65:41:3d:86:fc:43:b0:f7:8f:50:
c8:40:37:f7:44:9e:4e:05:bc:ba:03:ab:7c:5d:6b:
64:57:7c:7a:cf:cd:65:d6:5a:61:64:06:00:e7:d3:
fa:54:bc:9f:65:2b:ab:8a:c8:9d:14:4b:9b:43:da:
ba:f4:89:c8:8d:37:6b:e7:7a:bf:b3:fd:72:76:76:
0f:90:4b:2a:b3:b5:ec:ea:6f:aa:2b:ef:aa:6c:8f:
c3:4d:d1:18:43:fc:9e:07:44:f8:32:96:0c:c2:b6:
5c:5e:16:ca:20:83:03:eb:50:ef:43:a1:8b:4c:98:
cc:a6:a3:e0:c7:21:2f:58:b6:25:9c:c0:99:ae:7a:
09:d8:f8:84:cd:d1:da:52:59:06:e6:82:74:27:2e:
73:28:d0:41:e7:ab:92:36:8e:a9:b7:3b:22:14:72:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:1A:65:0C:B9:32:49:1E:50:A4:58:95:94:6E:5E:CF:D2:51:16
X509v3 Authority Key Identifier:
keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2d:10:28:d4:1b:58:f8:e5:03:c9:6f:b8:31:5d:cc:6d:7f:
7f:7d:fa:44:6c:45:03:9c:7e:18:50:6c:be:a9:93:73:34:f8:
09:da:5f:3a:e5:8c:a1:32:0a:f1:c4:7c:31:fc:6f:4d:25:3b:
04:fd:a7:cb:b2:d2:74:c8:f4:b7:0f:26:d8:0c:50:c1:bb:d4:
42:d3:2c:3d:f1:c8:7a:9f:65:1e:42:b8:17:b6:ad:2e:74:f3:
58:22:8b:5b:d7:fb:32:4d:09:23:83:32:6c:dc:79:d8:76:2c:
c1:02:ef:fe:3a:9f:35:68:f5:84:b0:6e:81:c8:49:e8:7d:5b:
6c:9e:5d:cc:db:40:0d:d4:81:17:41:a2:55:05:b5:a8:9e:33:
00:3d:c4:3e:33:38:7a:6c:a3:21:7d:4d:7c:e9:66:52:2b:e9:
35:c9:9b:8d:f7:3e:34:5e:7d:d6:b8:3f:b9:b2:b1:ee:67:9e:
a4:72:b9:93:ad:4d:0b:3d:a4:dd:ae:08:20:32:77:67:96:14:
1a:ab:b3:ef:89:79:b0:31:ae:6d:36:a8:39:96:44:a8:52:e1:
08:20:7f:6b:6e:23:f5:61:5b:3c:15:71:d5:79:27:62:a4:f7:
a7:45:43:10:f4:61:03:c5:ce:ae:12:44:1e:1d:c7:8f:b1:af:
c0:e1:d6:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE
MkY2MjMxQTQwHhcNMjYwNzIyMTc0MjE3WhcNMjYwNzI5MTc0MjE3WjAYMRYwFAYD
VQQDEw02YTYxMDBmOS00ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqd2RDzKwJsQB3d23aV+s2mrxUb4sDSFWnn7YqV2twt3fWYALLleJxn35nDEC
qZBXql4W4rk5692g2zr1ot8putWVM9wHs6ospSad81Hs2sHH8jJzLzynF8b23Ry3
KWVBPYb8Q7D3j1DIQDf3RJ5OBby6A6t8XWtkV3x6z81l1lphZAYA59P6VLyfZSur
isidFEubQ9q69InIjTdr53q/s/1ydnYPkEsqs7Xs6m+qK++qbI/DTdEYQ/yeB0T4
MpYMwrZcXhbKIIMD61DvQ6GLTJjMpqPgxyEvWLYlnMCZrnoJ2PiEzdHaUlkG5oJ0
Jy5zKNBB56uSNo6ptzsiFHKoiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9JGmUM
uTJJHlCkWJWUbl7P0lEWMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx
RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp
UU9FNVE1V2x6TVRTOWlNYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvS0QKNQbWPjlA8lvuDFdzG1/f336RGxFA5x+GFBsvqmTczT4CdpfOuWMoTIK
8cR8MfxvTSU7BP2ny7LSdMj0tw8m2AxQwbvUQtMsPfHIep9lHkK4F7atLnTzWCKL
W9f7Mk0JI4MybNx52HYswQLv/jqfNWj1hLBugchJ6H1bbJ5dzNtADdSBF0GiVQW1
qJ4zAD3EPjM4emyjIX1NfOlmUivpNcmbjfc+NF591rg/ubKx7meepHK5k61NCz2k
3a4IIDJ3Z5YUGquz74l5sDGubTaoOZZEqFLhCCB/a24j9WFbPBVx1XknYqT3p0VD
EPRhA8XOrhJEHh3Hj7GvwOHWZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:24 2026 by rpki-client