
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json)
Hash identifier: tUVCyUIpALkS57zYZplPfyHkvKnTwgODwSIMA6sLvF8=
Subject key identifier: EA:D4:13:BA:14:CB:CF:FF:C4:E8:7D:B7:98:1B:99:C0:A8:78:FB:46
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial: 0CB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
Manifest number: 0CAD
Signing time: Wed 22 Jul 2026 18:48:25 +0000
Manifest this update: Wed 22 Jul 2026 18:48:25 +0000
Manifest next update: Wed 29 Jul 2026 18:48:25 +0000
Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: b2baNMUaBPuMCs9OWZOia+idnQVwcvAxCPApJrwVxSg=)
2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: BNIFm55B08Bbs0Bkol6koWZAIFo7mgipfcEIOPi+WrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Validity
Not Before: Jul 22 18:48:25 2026 GMT
Not After : Jul 29 18:48:25 2026 GMT
Subject: CN=6a611079-c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:58:06:f3:05:a7:9e:b0:1f:9a:f4:3d:20:
d4:91:21:f0:30:11:ca:d6:0e:68:6f:d2:99:6f:5f:
82:6b:6a:03:13:c0:d6:25:7e:2d:7b:2a:aa:15:cf:
13:b6:76:0c:5c:29:36:97:b9:ce:cb:65:80:a0:75:
b9:4f:93:8f:0f:e8:45:87:f9:66:80:93:46:18:2e:
45:2d:15:3f:fd:7b:e7:30:68:de:b9:b3:30:36:5d:
44:0b:7b:87:71:13:4e:81:34:7b:a1:5e:7c:d6:4e:
50:ee:79:c1:f2:0a:af:2a:80:58:ac:f1:83:46:d6:
46:5d:94:5e:6c:ee:cd:da:3f:f0:91:b8:3b:bf:e8:
42:4e:ef:f4:7e:ad:cb:0a:c1:89:08:6a:85:6d:38:
c5:d3:57:4d:3e:3b:e9:85:c9:0e:69:10:b9:5b:b4:
a9:dc:63:96:b9:be:b5:e1:ea:0e:4a:be:6b:b2:8a:
25:58:b4:16:c4:f0:48:0c:96:9b:06:21:64:09:a0:
d3:c4:a1:d8:00:eb:00:f4:2a:9d:8c:e4:b3:5d:b9:
00:44:8e:4a:b1:28:d5:ec:05:35:7c:0b:9c:ca:b8:
7f:54:53:9b:5d:d3:ca:e5:f2:3e:3d:f8:8a:6b:6c:
9e:df:13:ab:57:d2:cd:a5:54:d7:07:02:e9:db:cb:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:13:BA:14:CB:CF:FF:C4:E8:7D:B7:98:1B:99:C0:A8:78:FB:46
X509v3 Authority Key Identifier:
keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1b:83:b6:ba:cb:d9:d4:04:80:48:cf:7b:07:1f:b9:9b:db:
c6:1a:3a:d0:58:67:69:ac:ec:cb:96:f7:6c:8c:f1:9a:42:ee:
7c:04:0d:88:fe:00:55:41:fc:55:bd:e0:b0:62:9e:dd:b0:17:
12:5e:8a:9c:79:3c:81:37:a8:8e:c8:34:4d:4f:2e:ae:31:cf:
b6:7e:f2:00:92:14:2a:a9:42:12:2d:3a:3c:64:af:91:bf:5f:
75:5c:7d:10:57:78:89:d1:56:96:2e:b5:f6:e7:72:09:ea:e4:
3b:cf:af:ab:42:24:13:fd:08:1b:ad:87:82:09:fc:98:9e:a4:
d2:8f:35:3a:b7:e6:40:bf:25:6f:c4:f5:08:c1:ef:db:bc:9d:
09:81:e7:ce:0b:28:6c:bf:8f:29:f9:93:1e:81:bd:c8:0a:a6:
1f:8f:75:4f:63:12:87:94:f9:8f:85:26:e3:9c:61:e5:4c:8f:
db:61:aa:3b:a4:97:33:9d:e5:a7:1f:20:5c:ca:08:f3:c7:96:
38:9f:e4:04:4c:0f:26:f6:8a:05:26:45:91:45:4f:ef:a0:21:
74:88:e7:64:0f:69:a1:a6:c4:d7:e4:e3:46:2f:c8:dc:3b:6b:
a5:33:58:09:b1:0c:2a:c6:3b:38:fa:4f:b4:61:03:81:dd:96:
4d:b7:32:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1
REZCODdEMUUwHhcNMjYwNzIyMTg0ODI1WhcNMjYwNzI5MTg0ODI1WjAYMRYwFAYD
VQQDEw02YTYxMTA3OS1jMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+BYBvMFp56wH5r0PSDUkSHwMBHK1g5ob9KZb1+Ca2oDE8DWJX4teyqqFc8T
tnYMXCk2l7nOy2WAoHW5T5OPD+hFh/lmgJNGGC5FLRU//XvnMGjeubMwNl1EC3uH
cRNOgTR7oV581k5Q7nnB8gqvKoBYrPGDRtZGXZRebO7N2j/wkbg7v+hCTu/0fq3L
CsGJCGqFbTjF01dNPjvphckOaRC5W7Sp3GOWub614eoOSr5rsoolWLQWxPBIDJab
BiFkCaDTxKHYAOsA9CqdjOSzXbkARI5KsSjV7AU1fAucyrh/VFObXdPK5fI+PfiK
a2ye3xOrV9LNpVTXBwLp28vKAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrUE7oU
y8//xOh9t5gbmcCoePtGMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB
NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o
ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBuDtrrL2dQEgEjPewcfuZvbxho60Fhnaazsy5b3bIzxmkLufAQNiP4AVUH8
Vb3gsGKe3bAXEl6KnHk8gTeojsg0TU8urjHPtn7yAJIUKqlCEi06PGSvkb9fdVx9
EFd4idFWli619udyCerkO8+vq0IkE/0IG62Hggn8mJ6k0o81OrfmQL8lb8T1CMHv
27ydCYHnzgsobL+PKfmTHoG9yAqmH491T2MSh5T5j4Um45xh5UyP22GqO6SXM53l
px8gXMoI88eWOJ/kBEwPJvaKBSZFkUVP76AhdIjnZA9poabE1+TjRi/I3DtrpTNY
CbEMKsY7OPpPtGEDgd2WTbcysA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:48 2026 by rpki-client