
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: Wmd2Da1Rz6QB/nPjbHZgQxFuRFNBkPbWfxjsMVVj8jk=
Subject key identifier: E1:5C:72:50:8F:DC:1A:8A:4D:B2:3A:60:A2:92:A2:D9:DC:0B:72:12
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 09F2
Signing time: Wed 22 Jul 2026 20:14:32 +0000
Manifest this update: Wed 22 Jul 2026 20:14:31 +0000
Manifest next update: Wed 29 Jul 2026 20:14:31 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: jGUr5g1sZj/eblihrWylxKnD1FYMcOW606Vp7SRArU0=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: RChnlqhk/AdCL7WNTqOscOAo8EiLEWYXjeVnfDLTqaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: Jul 22 20:14:31 2026 GMT
Not After : Jul 29 20:14:31 2026 GMT
Subject: CN=6a6124a8-f1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:76:03:33:41:be:c8:94:11:7f:40:27:b5:
ca:0e:9e:b7:18:d0:72:25:41:a7:2c:af:1c:f1:fa:
74:2c:56:ef:3f:ad:1b:8c:02:32:f0:ea:e2:2d:2e:
fa:79:94:4c:38:7a:d4:43:e3:ea:e0:d6:04:cb:6d:
a4:00:a2:8b:44:31:d9:29:c6:bc:73:b7:3c:ce:2e:
06:4d:fd:85:3b:2d:00:14:f5:f6:eb:97:71:35:3e:
9a:0a:72:59:50:d6:03:f8:59:4f:c9:b1:6d:c9:39:
44:70:a2:6d:50:1b:29:ce:e8:12:c8:5f:1f:5a:b0:
0a:76:f6:0b:69:22:23:ca:9d:ef:15:02:de:8c:b2:
18:f2:2a:d9:d0:59:0c:e9:3e:38:87:96:59:7b:4b:
34:76:b5:1e:66:be:02:36:6b:20:ba:27:35:81:4b:
8f:7f:d2:80:cf:55:56:a1:f1:c5:22:50:4f:5f:0e:
bd:d1:d1:ac:77:72:19:1a:19:7f:37:8f:55:15:a6:
55:32:a0:6e:9d:f5:93:d8:f3:04:56:0e:14:82:c1:
c6:99:15:1f:a2:21:df:fe:03:b7:8b:e9:71:8c:64:
41:ff:30:78:44:67:31:22:49:e4:d6:2e:35:f0:21:
2f:32:bc:b3:45:a0:4d:5f:a5:b2:1d:6c:ff:f5:cd:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:72:50:8F:DC:1A:8A:4D:B2:3A:60:A2:92:A2:D9:DC:0B:72:12
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:40:12:25:1b:b5:ed:6e:f2:e4:a9:fa:93:79:97:91:ca:34:
e8:a5:47:b4:5a:fe:92:47:54:f2:39:8a:ea:77:47:96:c7:be:
33:04:2e:a8:0f:83:27:cb:3e:66:06:2b:18:22:66:af:53:11:
8f:36:63:47:65:22:c0:99:5f:cb:0d:32:22:01:7e:47:a3:5e:
0a:f6:84:80:a4:1e:d3:5b:c9:58:32:8d:8f:2b:ac:4b:6a:18:
1e:9e:71:76:9b:43:4f:d9:34:dc:40:53:6a:24:2c:00:69:66:
84:f8:d9:84:e0:b7:5c:a3:cf:53:13:a6:79:d2:35:20:d0:27:
d3:0e:ae:d0:16:c8:57:fc:d0:c5:76:98:48:19:55:42:c9:5a:
8a:4a:1d:2a:94:68:ef:ed:78:59:22:9a:84:25:50:c6:3a:50:
93:56:ba:fc:c9:15:e7:b6:24:d3:5e:66:23:69:12:35:89:c6:
b9:a8:8e:62:de:6c:99:29:71:0e:1b:d9:dd:a8:8e:10:7d:c3:
03:5f:38:83:98:7d:2c:be:5f:f3:f4:59:bc:d3:9e:75:86:56:
2c:25:d9:5f:dd:a9:23:f0:ae:60:ae:96:a1:05:a6:b6:2a:0f:
34:01:3d:53:1e:d4:30:06:40:f9:79:d5:a2:2a:77:28:9f:5c:
da:7c:e5:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjYwNzIyMjAxNDMxWhcNMjYwNzI5MjAxNDMxWjAYMRYwFAYD
VQQDEw02YTYxMjRhOC1mMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXB2AzNBvsiUEX9AJ7XKDp63GNByJUGnLK8c8fp0LFbvP60bjAIy8OriLS76
eZRMOHrUQ+Pq4NYEy22kAKKLRDHZKca8c7c8zi4GTf2FOy0AFPX265dxNT6aCnJZ
UNYD+FlPybFtyTlEcKJtUBspzugSyF8fWrAKdvYLaSIjyp3vFQLejLIY8irZ0FkM
6T44h5ZZe0s0drUeZr4CNmsguic1gUuPf9KAz1VWofHFIlBPXw690dGsd3IZGhl/
N49VFaZVMqBunfWT2PMEVg4UgsHGmRUfoiHf/gO3i+lxjGRB/zB4RGcxIknk1i41
8CEvMryzRaBNX6WyHWz/9c097wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFcclCP
3BqKTbI6YKKSotncC3ISMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1
enBnTFhibDNGRi1NR2Nna3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACUASJRu17W7y5Kn6k3mXkco06KVHtFr+kkdU8jmK6ndHlse+MwQuqA+DJ8s+
ZgYrGCJmr1MRjzZjR2UiwJlfyw0yIgF+R6NeCvaEgKQe01vJWDKNjyusS2oYHp5x
dptDT9k03EBTaiQsAGlmhPjZhOC3XKPPUxOmedI1INAn0w6u0BbIV/zQxXaYSBlV
QslaikodKpRo7+14WSKahCVQxjpQk1a6/MkV57Yk015mI2kSNYnGuaiOYt5smSlx
DhvZ3aiOEH3DA184g5h9LL5f8/RZvNOedYZWLCXZX92pI/CuYK6WoQWmtioPNAE9
Ux7UMAZA+XnVoip3KJ9c2nzlXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:06 2026 by rpki-client