
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: cKk6fB+1snNvfHuO2j/A1FkbF1vKnf5lWc+tNSd1XRA=
Subject key identifier: 43:DB:2F:DA:38:71:07:06:A8:8F:AF:17:39:66:91:58:6F:25:34:82
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 08EC
Signing time: Wed 22 Jul 2026 20:47:48 +0000
Manifest this update: Wed 22 Jul 2026 20:47:47 +0000
Manifest next update: Wed 29 Jul 2026 20:47:47 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: OLXeBbRa8oKdliYOGGJ4RnDU+WF9jjPc7w737KxDaOQ=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Jul 22 20:47:47 2026 GMT
Not After : Jul 29 20:47:47 2026 GMT
Subject: CN=6a612c74-f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:07:8d:96:45:15:e1:4e:b3:04:fa:a6:9a:
87:4b:4c:bd:be:8d:10:21:d5:ae:8c:93:47:03:99:
6c:ff:de:48:46:db:62:13:3f:a8:43:50:30:73:e4:
fd:06:50:54:11:b1:e6:c4:db:45:85:4e:96:d5:f8:
01:e2:3c:39:2a:89:2f:60:aa:d7:30:25:87:80:f2:
cc:b6:a8:5c:90:91:35:66:07:c8:0c:bf:98:3b:b3:
2a:ce:f5:60:eb:19:59:79:e1:c9:ef:7f:24:5f:2a:
f4:95:7d:5a:fe:af:48:6b:4c:23:8d:c6:ab:8d:57:
e9:77:a5:30:b7:a5:75:08:d4:be:bf:ed:0a:b2:f5:
40:30:d2:0f:9d:5c:e2:f4:ad:4a:0f:1c:c0:25:df:
b5:a9:9e:e6:83:65:84:1a:16:38:b6:6c:d1:7d:4b:
76:1f:da:0a:eb:fa:fd:57:9c:0c:cb:1d:78:a5:e8:
a7:85:61:23:b2:61:9b:20:24:32:35:e6:28:48:53:
5e:51:ff:68:5b:4b:06:fd:a3:0c:8b:38:e6:a7:82:
26:00:db:9c:84:a7:aa:55:fa:75:50:38:5a:fc:c2:
8a:95:1f:ae:c7:20:e5:cc:f0:1e:ac:d5:1a:00:64:
af:94:9e:21:70:10:90:29:8d:f6:4c:4d:76:e4:88:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:2F:DA:38:71:07:06:A8:8F:AF:17:39:66:91:58:6F:25:34:82
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0b:82:a6:ed:ce:3e:d8:31:57:fe:f9:fe:13:e7:50:20:6e:
33:fa:6c:dc:bb:53:23:4e:b9:a2:04:b1:c4:5c:63:15:ca:8e:
51:ad:cc:9f:b7:bd:5a:50:6a:70:b1:55:75:c5:8e:95:28:9e:
63:f6:93:c3:84:4a:fd:01:69:8e:f3:be:f9:21:c4:7e:fa:c5:
11:5f:cb:fa:88:df:b9:18:1e:3f:9e:c5:e4:cc:be:43:22:69:
97:9d:23:44:16:8f:51:f9:65:84:17:32:22:de:86:98:f9:89:
d9:ee:bd:0f:33:85:7d:c6:14:41:f4:14:d8:6f:1e:7c:4d:7f:
b5:97:4b:84:e5:d0:bc:f2:e0:8a:91:54:d0:8a:c9:43:21:df:
70:93:e6:38:b5:d7:2e:2f:f7:e3:2a:e2:68:49:be:25:f9:18:
92:97:03:67:15:49:6b:ce:f9:a5:f5:21:0c:f0:b3:e1:3b:08:
7e:6e:8b:bd:6b:1f:68:dd:79:e7:20:bf:e5:6a:79:7b:ca:ee:
d0:87:fe:58:4b:c1:75:7b:21:7f:dc:8e:7f:fe:b0:1f:8f:ce:
ac:86:35:24:69:86:6b:9b:ee:4f:80:e4:f5:46:c5:37:bf:fc:
67:c0:d8:1f:cc:ac:90:a6:63:f4:d8:62:0d:79:dd:9f:59:73:
25:08:61:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG
NTlBQ0RDMUEwHhcNMjYwNzIyMjA0NzQ3WhcNMjYwNzI5MjA0NzQ3WjAYMRYwFAYD
VQQDEw02YTYxMmM3NC1mNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mcHjZZFFeFOswT6ppqHS0y9vo0QIdWujJNHA5ls/95IRttiEz+oQ1Awc+T9
BlBUEbHmxNtFhU6W1fgB4jw5KokvYKrXMCWHgPLMtqhckJE1ZgfIDL+YO7MqzvVg
6xlZeeHJ738kXyr0lX1a/q9Ia0wjjcarjVfpd6Uwt6V1CNS+v+0KsvVAMNIPnVzi
9K1KDxzAJd+1qZ7mg2WEGhY4tmzRfUt2H9oK6/r9V5wMyx14peinhWEjsmGbICQy
NeYoSFNeUf9oW0sG/aMMizjmp4ImANuchKeqVfp1UDha/MKKlR+uxyDlzPAerNUa
AGSvlJ4hcBCQKY32TE125IjiJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPbL9o4
cQcGqI+vFzlmkVhvJTSCMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB
QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG
TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANwuCpu3OPtgxV/75/hPnUCBuM/ps3LtTI065ogSxxFxjFcqOUa3Mn7e9WlBq
cLFVdcWOlSieY/aTw4RK/QFpjvO++SHEfvrFEV/L+ojfuRgeP57F5My+QyJpl50j
RBaPUfllhBcyIt6GmPmJ2e69DzOFfcYUQfQU2G8efE1/tZdLhOXQvPLgipFU0IrJ
QyHfcJPmOLXXLi/34yriaEm+JfkYkpcDZxVJa875pfUhDPCz4TsIfm6LvWsfaN15
5yC/5Wp5e8ru0If+WEvBdXshf9yOf/6wH4/OrIY1JGmGa5vuT4Dk9UbFN7/8Z8DY
H8yskKZj9NhiDXndn1lzJQhh0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:22 2026 by rpki-client