
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier: 3WEzpghEitls0b4rRKEPhmCNj6s+oEVlUOxLNK+79NM=
Subject key identifier: A1:73:52:8C:CB:BA:73:54:A2:37:1F:D9:D6:2C:79:FC:66:BB:AD:D2
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 09:26:38 +0000
Manifest this update: Thu 23 Jul 2026 09:26:37 +0000
Manifest next update: Thu 30 Jul 2026 09:26:37 +0000
Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: wegtzjxs28H3oXAH6QJ7rE/8LmZAVKJaz60grrJPDYo=)
2: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: QR8q+ALVePxBSGtk9U7glKgvftSJmjU/0bwUblLugJQ=)
3: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: ZuP0uWcegjrbhw4CUiK7NSueNS7Vvex1xTz8Rpwula0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: Jul 23 09:26:37 2026 GMT
Not After : Jul 30 09:26:37 2026 GMT
Subject: CN=6a61de4e-8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:79:6c:b5:63:a8:7a:02:4d:5a:5b:7e:a3:
80:b2:60:1b:3c:c1:60:0d:5b:32:e0:42:e0:80:07:
1c:14:df:ce:7f:b5:3f:cf:ab:7d:46:8c:2e:3e:d0:
0d:41:2d:33:16:16:a0:2e:29:77:91:d1:72:54:37:
f6:1c:b0:32:95:fb:8a:bc:b9:8a:b9:43:00:1e:07:
81:2b:c9:7a:e2:8f:52:2c:1d:05:69:14:d5:c8:be:
b3:f6:d0:47:4c:85:3a:36:c0:50:b6:a0:d6:97:71:
ab:58:7a:52:28:87:bb:38:91:d8:62:15:cb:7a:43:
c8:b2:1a:ac:90:24:06:8c:27:bc:2f:6f:bd:50:1e:
4d:41:42:24:4f:8e:54:36:32:5e:79:ec:29:0d:41:
ac:66:a4:6f:1a:74:d4:9b:25:84:3e:9c:65:9e:8f:
b5:03:86:63:35:bb:bf:ca:22:f5:32:ed:40:93:d5:
84:ba:01:ab:e6:46:ee:dd:dd:78:9f:73:86:8d:86:
8e:b1:a5:1d:b6:50:35:27:2a:fa:6c:f2:b5:5b:1d:
15:21:9a:83:e0:54:97:13:fb:36:1f:6b:ce:64:96:
37:0f:cb:a9:c3:74:82:b2:90:96:01:0b:65:c7:30:
c7:cd:0e:01:6c:7c:5b:82:37:6e:64:7b:d8:66:00:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:52:8C:CB:BA:73:54:A2:37:1F:D9:D6:2C:79:FC:66:BB:AD:D2
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:53:fa:78:5d:8c:16:80:75:72:74:31:e0:b1:09:8f:47:db:
0e:72:35:ce:9a:18:c5:9e:f5:e1:a5:49:ae:6f:01:28:9c:73:
3f:ba:94:89:09:c0:c5:4f:57:f9:40:c7:c1:7f:a6:e1:9c:14:
88:41:3b:9f:2c:c9:af:e0:e1:b2:71:c2:3a:8d:9f:fc:03:ae:
d7:55:9b:41:f9:31:c8:d9:1d:9b:f1:04:a1:7f:57:24:48:00:
61:c9:f5:89:f0:fb:fb:df:b3:4a:b2:f3:95:d5:9f:64:25:13:
a1:ff:93:93:c5:7c:b3:d4:73:f3:47:34:33:61:77:86:76:f9:
2b:6a:f0:c0:24:d0:c7:66:60:31:23:20:32:e8:7d:5e:9b:b5:
45:57:43:df:e0:7a:79:12:18:8c:10:07:80:d6:de:01:1c:5c:
48:d6:55:16:26:f8:72:8e:39:7a:2b:19:32:80:d6:a4:45:3a:
00:ea:b1:14:c4:5c:e0:3a:8a:29:8c:ca:3c:bd:5f:d4:38:ef:
50:34:f2:0a:9a:c2:1b:14:8f:a4:bc:d4:66:8a:5f:6b:79:5c:
cc:5d:f0:c9:de:3b:9d:0f:20:b0:55:1e:d2:7a:2c:8d:e1:e4:
21:50:23:bd:a2:b2:63:ab:77:e2:70:26:ed:f5:d3:58:13:14:
6c:95:c3:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC
RjkwQzg4N0QwHhcNMjYwNzIzMDkyNjM3WhcNMjYwNzMwMDkyNjM3WjAYMRYwFAYD
VQQDEw02YTYxZGU0ZS04YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFp5bLVjqHoCTVpbfqOAsmAbPMFgDVsy4ELggAccFN/Of7U/z6t9RowuPtAN
QS0zFhagLil3kdFyVDf2HLAylfuKvLmKuUMAHgeBK8l64o9SLB0FaRTVyL6z9tBH
TIU6NsBQtqDWl3GrWHpSKIe7OJHYYhXLekPIshqskCQGjCe8L2+9UB5NQUIkT45U
NjJeeewpDUGsZqRvGnTUmyWEPpxlno+1A4ZjNbu/yiL1Mu1Ak9WEugGr5kbu3d14
n3OGjYaOsaUdtlA1Jyr6bPK1Wx0VIZqD4FSXE/s2H2vOZJY3D8upw3SCspCWAQtl
xzDHzQ4BbHxbgjduZHvYZgBm+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFzUozL
unNUojcf2dYsefxmu63SMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5
MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhi
ellRblVKYzRveFNfa01pSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1FP6eF2MFoB1cnQx4LEJj0fbDnI1zpoYxZ714aVJrm8BKJxzP7qUiQnAxU9X
+UDHwX+m4ZwUiEE7nyzJr+DhsnHCOo2f/AOu11WbQfkxyNkdm/EEoX9XJEgAYcn1
ifD7+9+zSrLzldWfZCUTof+Tk8V8s9Rz80c0M2F3hnb5K2rwwCTQx2ZgMSMgMuh9
Xpu1RVdD3+B6eRIYjBAHgNbeARxcSNZVFib4co45eisZMoDWpEU6AOqxFMRc4DqK
KYzKPL1f1DjvUDTyCprCGxSPpLzUZopfa3lczF3wyd47nQ8gsFUe0nosjeHkIVAj
vaKyY6t34nAm7fXTWBMUbJXD6g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:29 2026 by rpki-client