
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: t3fim8QPPa0nBw4lHfSAhdjNBhLepwbPPAN0yJs/WHg=
Subject key identifier: 39:7F:ED:CA:8D:10:9C:D2:72:12:71:14:A7:6F:06:5A:7A:90:FE:9C
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 0912
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 0904
Signing time: Wed 22 Jul 2026 20:45:56 +0000
Manifest this update: Wed 22 Jul 2026 20:45:56 +0000
Manifest next update: Wed 29 Jul 2026 20:45:56 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: 3NOEq1coEiD3zrrPMBZirrom69VWcJT6Qn8/WnHx+cE=)
2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Jul 22 20:45:56 2026 GMT
Not After : Jul 29 20:45:56 2026 GMT
Subject: CN=6a612c04-9a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:df:48:d6:aa:44:a2:ca:49:c2:22:fb:d9:
88:73:8b:23:48:31:98:10:4e:49:8f:ed:c8:6f:0d:
5f:50:a2:45:48:d5:5a:6e:1d:48:c4:b4:8d:db:17:
bc:5a:65:2d:33:ae:81:a6:e7:00:e1:60:b3:3a:16:
7e:d3:07:77:0b:2e:0f:95:46:a7:7d:2c:03:66:13:
79:92:e4:45:8a:9c:a4:a1:d4:a9:75:58:39:1c:73:
84:03:fd:44:4b:83:a6:de:30:b2:f4:4e:44:d8:32:
c7:7c:ce:bf:ce:95:fa:5c:0c:65:da:4a:ef:10:3d:
3f:8c:86:ac:f5:a5:df:01:80:cf:59:a5:11:aa:a9:
25:95:c9:bb:73:a1:94:59:c8:6a:5e:9b:17:a7:57:
b2:5d:32:de:4e:22:c6:bb:f6:db:63:ac:d4:5e:9d:
d9:01:c4:f1:cf:bb:c7:56:71:7c:68:64:a9:33:1c:
17:2b:86:2f:b1:e5:4a:e6:96:c0:99:78:01:a1:00:
72:ea:d2:28:5f:6c:ac:c7:2e:8b:74:8e:73:6c:df:
79:ee:c7:d9:8c:43:77:02:71:fb:19:15:af:b4:13:
8e:86:03:ac:9b:4b:aa:59:c6:f0:25:67:46:b5:e3:
07:ea:79:78:39:21:b3:ed:ce:95:55:96:1d:13:2b:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:ED:CA:8D:10:9C:D2:72:12:71:14:A7:6F:06:5A:7A:90:FE:9C
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:b7:e4:a7:99:c4:52:2d:38:87:1a:bf:80:92:0f:58:b1:
c6:b5:38:70:04:fd:81:8c:81:4d:13:98:b0:ab:d6:af:63:28:
23:41:75:1d:3f:58:af:52:ed:74:76:54:ac:1a:38:83:c4:0a:
72:a0:c2:21:3e:31:07:7f:62:c5:18:1d:b5:21:3d:7b:49:a8:
12:ea:a7:de:e2:1d:5e:b3:1e:46:e1:e1:61:23:df:1d:00:02:
98:aa:d2:00:e6:c2:7a:00:cd:34:6a:ac:b6:4a:a5:29:91:d5:
15:d2:e2:4f:3a:0a:62:e0:81:e7:ab:9c:0b:e5:4d:e9:bd:e4:
d6:61:6e:b7:51:9f:00:85:93:9d:b8:ae:57:30:d3:2d:1b:06:
af:38:1c:7c:d4:65:ef:ad:6e:0f:42:d8:d8:33:ab:ba:84:2c:
1a:81:f0:1d:c3:0c:1c:19:a4:ec:59:1a:99:4a:65:46:54:8d:
85:c2:23:62:91:87:ac:e8:78:78:ef:c6:16:f3:1f:4a:29:e6:
cc:93:d1:bd:63:9b:66:35:4b:43:0d:8f:ff:c7:5c:d6:c8:62:
34:b2:f3:b5:c6:0e:0c:60:3e:2d:5b:5d:83:9c:5c:44:e9:78:
7c:76:8c:80:ec:56:d0:ed:8b:db:e6:f9:da:43:42:a4:12:ee:
da:3d:bf:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG
MDEzNjQzNTgwHhcNMjYwNzIyMjA0NTU2WhcNMjYwNzI5MjA0NTU2WjAYMRYwFAYD
VQQDEw02YTYxMmMwNC05YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEXfSNaqRKLKScIi+9mIc4sjSDGYEE5Jj+3Ibw1fUKJFSNVabh1IxLSN2xe8
WmUtM66BpucA4WCzOhZ+0wd3Cy4PlUanfSwDZhN5kuRFipykodSpdVg5HHOEA/1E
S4Om3jCy9E5E2DLHfM6/zpX6XAxl2krvED0/jIas9aXfAYDPWaURqqkllcm7c6GU
WchqXpsXp1eyXTLeTiLGu/bbY6zUXp3ZAcTxz7vHVnF8aGSpMxwXK4YvseVK5pbA
mXgBoQBy6tIoX2ysxy6LdI5zbN957sfZjEN3AnH7GRWvtBOOhgOsm0uqWcbwJWdG
teMH6nl4OSGz7c6VVZYdEyujWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl/7cqN
EJzSchJxFKdvBlp6kP6cMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy
MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh
ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG5W35KeZxFItOIcav4CSD1ixxrU4cAT9gYyBTROYsKvWr2MoI0F1HT9Yr1Lt
dHZUrBo4g8QKcqDCIT4xB39ixRgdtSE9e0moEuqn3uIdXrMeRuHhYSPfHQACmKrS
AObCegDNNGqstkqlKZHVFdLiTzoKYuCB56ucC+VN6b3k1mFut1GfAIWTnbiuVzDT
LRsGrzgcfNRl761uD0LY2DOruoQsGoHwHcMMHBmk7FkamUplRlSNhcIjYpGHrOh4
eO/GFvMfSinmzJPRvWObZjVLQw2P/8dc1shiNLLztcYODGA+LVtdg5xcROl4fHaM
gOxW0O2L2+b52kNCpBLu2j2/Hg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:51:59 2026 by rpki-client