
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier: icmETS9AGpnetq8UereOBWM7bRtxOMpuBBOc5YC2qJc=
Subject key identifier: 97:63:38:B3:75:E2:B2:93:08:49:69:32:B3:43:B1:59:C0:3F:C4:88
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial: 1549
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number: 151D
Signing time: Fri 24 Jul 2026 01:35:23 +0000
Manifest this update: Fri 24 Jul 2026 01:35:22 +0000
Manifest next update: Fri 31 Jul 2026 01:35:22 +0000
Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: QbIW4cmq8sD+/aKOFEOWTf78LBWNyTh2qvhC4LyV/DM=)
2: 89567AD686F011F19E006003A7EE528E.roa (hash: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=)
3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: uoO9Im5pkYbvz3VL3E29jCslGLRvKNamupOW6QMeXM4=)
4: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: QEZRuL5g83zcIEE/jZzGGZwIsCMj1qeuX3dlcLFnIEA=)
5: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: 8O8JY2NXJlU6iXynIm/TOWGZDFkAjSbZghW1iOqNz4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5449 (0x1549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Validity
Not Before: Jul 24 01:35:22 2026 GMT
Not After : Jul 31 01:35:22 2026 GMT
Subject: CN=6a62c15a-7310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:af:a4:b9:9e:da:a3:2e:d3:15:26:d3:2a:
ef:7c:bc:ad:66:7e:15:2a:23:34:e1:c1:69:0c:25:
f2:a1:a0:d4:57:f1:94:82:1e:d1:03:4c:7f:6d:bf:
b1:14:7f:21:6a:34:0c:68:91:6a:aa:c5:5c:38:e6:
64:be:b4:e0:32:b5:0a:6c:80:ef:1e:a8:54:08:75:
de:d2:1b:c6:98:34:86:83:c3:9c:2d:df:a8:c3:53:
03:32:1c:11:4e:d1:ac:00:14:ea:14:d9:eb:06:5c:
f8:5e:7a:8c:02:84:2b:99:61:23:ac:8b:ba:6f:58:
6e:00:4b:72:8b:8c:e7:53:ce:e2:db:e2:53:37:94:
49:4e:30:c6:2e:ab:1d:4e:80:3c:7c:79:96:bb:e4:
90:cd:8b:bc:85:ea:f8:69:38:61:40:09:0a:c6:88:
fa:46:43:36:91:1b:83:18:1a:c4:30:be:d8:78:89:
08:84:ad:8f:79:f6:fb:af:59:d6:e0:0d:35:77:0d:
88:a6:14:7c:a7:8e:98:eb:70:e7:30:8b:61:29:ea:
cf:7d:35:b2:79:f2:b0:58:1a:2f:62:83:54:f6:39:
63:10:15:9d:50:57:25:fd:43:89:da:ab:82:10:d0:
eb:61:9c:9b:0b:69:de:3f:58:98:bc:c8:6e:1a:f7:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:38:B3:75:E2:B2:93:08:49:69:32:B3:43:B1:59:C0:3F:C4:88
X509v3 Authority Key Identifier:
keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:57:21:43:8e:8a:be:c2:de:b9:08:44:9d:67:fd:84:8d:
17:32:0b:58:c6:a4:c8:c6:cd:da:20:ff:cc:c4:8e:93:dc:dd:
e0:49:be:e1:75:dd:00:84:a6:b6:dd:eb:b6:72:ed:f9:9c:f2:
97:b2:57:1e:47:38:2a:da:64:5b:29:c2:13:fe:9f:c2:ef:47:
8e:1e:d2:59:c7:e0:60:79:76:38:cd:b8:10:06:d1:6f:2f:d6:
11:54:63:4f:bd:fd:66:b3:53:86:7f:79:6b:f1:3c:0a:3a:07:
8f:30:9d:9a:c0:a3:12:4c:3f:a0:82:04:60:e2:e4:18:fa:47:
d2:e4:e9:54:d4:72:88:bf:c8:7e:fd:20:75:4b:2f:f0:bc:09:
97:09:fb:c9:2b:b6:fb:20:a0:ac:88:b6:ca:80:7e:14:42:4c:
28:84:5f:20:d1:e7:38:c9:8e:87:e6:5f:d7:8e:e7:bd:33:b7:
10:8f:48:db:9a:c1:c3:f4:40:b2:f0:fb:f0:c0:70:2c:ae:89:
7e:02:7a:63:61:6f:88:a2:fc:28:52:e4:72:dd:15:50:1f:4d:
53:6b:e7:4c:90:42:47:cb:cd:80:54:22:21:5e:a9:be:82:4e:
41:25:19:6d:e3:c6:de:f2:ce:71:15:d2:56:e3:e3:22:98:e2:
14:4d:5b:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz
NzJDN0UyOTIwHhcNMjYwNzI0MDEzNTIyWhcNMjYwNzMxMDEzNTIyWjAYMRYwFAYD
VQQDEw02YTYyYzE1YS03MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPmvpLme2qMu0xUm0yrvfLytZn4VKiM04cFpDCXyoaDUV/GUgh7RA0x/bb+x
FH8hajQMaJFqqsVcOOZkvrTgMrUKbIDvHqhUCHXe0hvGmDSGg8OcLd+ow1MDMhwR
TtGsABTqFNnrBlz4XnqMAoQrmWEjrIu6b1huAEtyi4znU87i2+JTN5RJTjDGLqsd
ToA8fHmWu+SQzYu8her4aThhQAkKxoj6RkM2kRuDGBrEML7YeIkIhK2Pefb7r1nW
4A01dw2IphR8p46Y63DnMIthKerPfTWyefKwWBovYoNU9jljEBWdUFcl/UOJ2quC
ENDrYZybC2neP1iYvMhuGvefXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdjOLN1
4rKTCElpMrNDsVnAP8SIMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4
M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3
RWtXUlpMV29EWVUzTEg0cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEsdXIUOOir7C3rkIRJ1n/YSNFzILWMakyMbN2iD/zMSOk9zd4Em+4XXdAISm
tt3rtnLt+Zzyl7JXHkc4KtpkWynCE/6fwu9Hjh7SWcfgYHl2OM24EAbRby/WEVRj
T739ZrNThn95a/E8CjoHjzCdmsCjEkw/oIIEYOLkGPpH0uTpVNRyiL/Ifv0gdUsv
8LwJlwn7ySu2+yCgrIi2yoB+FEJMKIRfINHnOMmOh+Zf147nvTO3EI9I25rBw/RA
svD78MBwLK6JfgJ6Y2FviKL8KFLkct0VUB9NU2vnTJBCR8vNgFQiIV6pvoJOQSUZ
bePG3vLOcRXSVuPjIpjiFE1b+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:18 2026 by rpki-client