
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
File: sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json)
Hash identifier: iXQE33+IpgtTZoHWfkvA0qFdI55VMq8VQTlphD7IzNg=
Subject key identifier: 00:47:11:04:53:09:02:29:3C:02:59:16:B8:D0:13:C8:85:A0:65:47
Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Certificate issuer: /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
Manifest number: 67
Signing time: Thu 23 Jul 2026 09:59:24 +0000
Manifest this update: Thu 23 Jul 2026 09:59:23 +0000
Manifest next update: Thu 30 Jul 2026 09:59:23 +0000
Files and hashes: 1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: CDMx227eKPRE3MpjOyrNeMmXJqNTWuUT+KRBKQrgQ98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Validity
Not Before: Jul 23 09:59:23 2026 GMT
Not After : Jul 30 09:59:23 2026 GMT
Subject: CN=6a61e5fc-c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:01:26:7c:e4:7d:09:69:d6:0f:87:f8:00:
7c:aa:c4:1f:89:dd:50:91:72:24:cd:f7:6e:d9:30:
64:c6:10:98:a8:5a:80:d0:ec:b1:7d:13:bd:d5:b2:
85:08:08:aa:57:50:e6:55:fc:e3:1b:f0:e9:31:2a:
1d:70:0a:06:ad:7b:2f:a3:ac:3a:0b:dc:c9:e7:7f:
07:95:b8:85:b9:77:3a:d9:8a:86:39:73:0d:e0:fc:
5e:2f:1f:73:7e:44:be:02:ca:09:4e:5a:14:17:43:
c9:31:73:57:a4:6e:f3:ae:40:1b:4d:90:c3:3b:bf:
da:a8:44:f1:95:78:ab:d7:ff:28:a7:a2:2c:93:0a:
e1:87:b6:0f:73:ac:65:10:50:e5:54:14:8e:1a:26:
1c:ea:99:41:bf:62:47:9a:c2:a9:2b:88:5c:72:d1:
d8:14:28:c5:84:41:32:db:ca:da:c5:2f:4e:22:67:
ab:26:16:1d:cf:c0:f5:7e:a6:40:62:ce:48:dc:70:
c9:93:89:12:a6:c8:d8:b9:29:bf:d2:be:09:0a:e1:
8b:1a:08:37:a2:d7:ca:59:3f:bc:f6:72:a9:e7:98:
94:b6:bc:a5:1a:05:f8:0a:33:5c:17:1c:f6:63:a1:
0c:74:5f:df:63:06:3c:d4:f9:4b:24:7f:9c:5c:cb:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:11:04:53:09:02:29:3C:02:59:16:B8:D0:13:C8:85:A0:65:47
X509v3 Authority Key Identifier:
keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:32:c9:0a:09:f1:1f:81:99:01:d4:3e:e6:32:4c:91:64:09:
70:be:01:bd:6e:06:44:7d:12:3c:9a:8e:2a:24:c8:06:06:19:
aa:69:df:48:18:b4:36:ed:a1:2b:b1:6c:a2:88:fa:ce:f9:cc:
3d:a4:eb:a3:71:ff:7e:d9:2b:2b:2f:d9:b3:67:8b:e0:da:57:
3e:fa:78:b6:9e:e4:e5:78:db:a3:ae:e4:1a:1e:7f:61:8d:c6:
13:82:0f:88:68:22:52:19:46:2c:67:e1:fd:09:f0:fd:50:b4:
42:95:3c:e3:84:51:57:ca:d7:2e:6f:52:40:18:46:a9:54:fd:
38:ed:01:6f:02:9c:e2:e7:27:ad:12:aa:bf:b1:3a:77:82:68:
ac:02:74:e7:c8:5a:4b:5a:ba:50:c5:d2:3c:13:91:2a:74:6f:
da:8d:a4:21:34:6b:3a:01:35:64:28:d3:bf:1b:cc:ac:d9:4d:
a2:53:d5:a8:ef:28:cc:03:1e:e8:dd:30:2f:0f:90:4a:6d:92:
1f:f3:97:6f:53:79:74:5f:53:a0:d0:67:95:de:cc:96:84:ad:
b1:91:79:11:86:b4:c0:00:d9:20:b2:22:c8:24:92:10:df:fb:
58:60:61:15:66:3a:96:e9:a3:36:80:76:a5:cd:6a:d9:ee:d3:
ca:bd:92:44
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0NGNDExMC8GA1UEBRMoQjExQTIyNTZEQTNENURCMzhGM0U3RTlCNTlDQjc0NjJD
OUU3QjJBNjAeFw0yNjA3MjMwOTU5MjNaFw0yNjA3MzAwOTU5MjNaMBgxFjAUBgNV
BAMTDTZhNjFlNWZjLWM4ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdHwEmfOR9CWnWD4f4AHyqxB+J3VCRciTN927ZMGTGEJioWoDQ7LF9E73VsoUI
CKpXUOZV/OMb8OkxKh1wCgatey+jrDoL3MnnfweVuIW5dzrZioY5cw3g/F4vH3N+
RL4CyglOWhQXQ8kxc1ekbvOuQBtNkMM7v9qoRPGVeKvX/yinoiyTCuGHtg9zrGUQ
UOVUFI4aJhzqmUG/YkeawqkriFxy0dgUKMWEQTLbytrFL04iZ6smFh3PwPV+pkBi
zkjccMmTiRKmyNi5Kb/SvgkK4YsaCDei18pZP7z2cqnnmJS2vKUaBfgKM1wXHPZj
oQx0X99jBjzU+Uskf5xcy8+3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAEcRBFMJ
Aik8AlkWuNATyIWgZUcwHwYDVR0jBBgwFoAUsRoiVto9XbOPPn6bWct0YsnnsqYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQ0Y0L0EyNDQxQkQ4RjBG
MTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJPUFBuNmJXY3QwWXNubnNx
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvc1JvaVZ0bzlYYk9QUG42YldjdDBZc25uc3FZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
Q0Y0L0EyNDQxQkQ4RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJP
UFBuNmJXY3QwWXNubnNxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC2MskKCfEfgZkB1D7mMkyRZAlwvgG9bgZEfRI8mo4qJMgGBhmqad9IGLQ27aEr
sWyiiPrO+cw9pOujcf9+2SsrL9mzZ4vg2lc++ni2nuTleNujruQaHn9hjcYTgg+I
aCJSGUYsZ+H9CfD9ULRClTzjhFFXytcub1JAGEapVP047QFvApzi5yetEqq/sTp3
gmisAnTnyFpLWrpQxdI8E5EqdG/ajaQhNGs6ATVkKNO/G8ys2U2iU9Wo7yjMAx7o
3TAvD5BKbZIf85dvU3l0X1Og0GeV3syWhK2xkXkRhrTAANkgsiLIJJIQ3/tYYGEV
ZjqW6aM2gHalzWrZ7tPKvZJE
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:59 2026 by rpki-client