
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json)
Hash identifier: IOqJ0QWM9ak/Z8sMjN7PvRHZbEsIBaarZFZIqWQZA9w=
Subject key identifier: B0:26:8F:6A:DB:11:BC:FA:F4:37:5E:8E:4B:2B:19:8F:13:91:66:83
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 05A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
Manifest number: 058D
Signing time: Thu 23 Jul 2026 00:02:47 +0000
Manifest this update: Thu 23 Jul 2026 00:02:46 +0000
Manifest next update: Thu 30 Jul 2026 00:02:46 +0000
Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: Je7GPdZib+u4NSy0NLNts6lyrVACXaxMZG1issFVekQ=)
2: 565F5E1A387E11F1A4D7FBEEB8833773.roa (hash: uVFuYghb1LT6hL248WccUadEJgQTd5E3SYeXzFBWWIA=)
3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Chq3dYly7My4Q8PklpLWnHQt3rosp5Ahuq1dGPO+d4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
Validity
Not Before: Jul 23 00:02:46 2026 GMT
Not After : Jul 30 00:02:46 2026 GMT
Subject: CN=6a615a27-e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:29:0f:84:e1:1a:0e:35:ee:73:0c:c7:44:
b0:d3:9a:02:84:5f:f7:da:a5:ea:db:94:6e:95:79:
4c:64:d7:b8:b4:ba:09:a7:6a:f9:02:75:bf:3e:c8:
37:57:9b:29:34:36:b2:78:37:3f:88:4e:e2:db:83:
e7:99:86:c1:02:24:94:81:10:ef:c7:b1:c2:2e:7a:
55:10:51:67:f0:31:b0:bf:f7:13:2a:61:d8:89:38:
5c:ab:3a:63:68:3a:9f:8c:61:12:f8:2d:11:2d:27:
da:f6:d3:cf:9f:9b:4c:9a:f2:5b:20:ae:af:79:7a:
58:2b:71:52:30:3f:82:f4:dc:f9:0e:24:7d:c7:f2:
5d:ed:1b:61:a6:97:7c:72:e7:d1:1a:27:4c:31:94:
45:28:e8:3b:fd:44:4a:47:34:d6:da:99:24:76:17:
bf:ef:95:9b:ce:57:70:b1:5f:be:57:de:87:12:13:
06:c9:3b:26:62:16:14:30:ba:b5:68:76:b8:10:cc:
d5:6b:82:3a:70:f7:2b:03:b4:27:ca:1b:de:66:d1:
23:56:d9:87:0c:a5:bb:5e:9d:d9:dc:a9:a0:bf:f6:
9d:f7:d8:80:9d:f3:7e:bd:66:35:37:a5:cb:ae:1e:
07:c8:7b:01:a5:9c:63:d8:c2:63:07:f4:ea:64:d0:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:8F:6A:DB:11:BC:FA:F4:37:5E:8E:4B:2B:19:8F:13:91:66:83
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:23:82:ca:e3:f5:6a:4c:15:1d:f9:e3:e8:94:e5:a9:e7:
0e:5a:ab:0f:85:a8:81:46:25:42:51:1b:16:8b:55:bd:4a:ce:
27:b7:0c:6a:d9:d4:c2:7c:8a:98:e8:25:c1:fb:4e:a3:24:20:
2a:ae:89:0f:a8:07:56:1c:5c:85:57:03:64:e5:82:05:f5:20:
76:02:3c:d9:c6:2f:e9:01:03:87:6f:66:e3:b8:29:56:94:60:
54:ef:52:22:de:9c:96:fb:c9:a5:44:2e:90:27:2a:66:ba:e3:
6f:af:f7:dd:2d:1a:53:18:c6:cd:40:8e:02:8b:59:a6:4c:ad:
64:30:0f:21:ac:83:d6:30:85:d0:ea:5a:6a:f6:2b:8f:ad:84:
5f:e1:12:14:c6:4e:bc:57:01:64:c3:4a:4a:22:5a:ec:44:da:
0c:55:83:b7:77:90:d1:39:a9:5c:ed:d8:4e:d4:4d:a7:85:56:
7c:d9:f7:cf:9a:1d:00:89:e2:03:e8:95:95:35:3d:7f:11:0e:
df:69:c5:e4:58:42:4d:72:44:10:af:72:06:2c:32:6c:f4:50:
ab:6c:11:c2:19:9e:a5:e8:05:47:1a:dc:a9:fc:e4:83:57:86:
33:fa:c3:ea:3c:83:33:50:45:50:c3:b9:5e:47:a4:67:3b:ac:
fc:82:c2:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB
MjE0MzcyMjEwHhcNMjYwNzIzMDAwMjQ2WhcNMjYwNzMwMDAwMjQ2WjAYMRYwFAYD
VQQDEw02YTYxNWEyNy1lN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIEpD4ThGg417nMMx0Sw05oChF/32qXq25RulXlMZNe4tLoJp2r5AnW/Psg3
V5spNDayeDc/iE7i24PnmYbBAiSUgRDvx7HCLnpVEFFn8DGwv/cTKmHYiThcqzpj
aDqfjGES+C0RLSfa9tPPn5tMmvJbIK6veXpYK3FSMD+C9Nz5DiR9x/Jd7Rthppd8
cufRGidMMZRFKOg7/URKRzTW2pkkdhe/75WbzldwsV++V96HEhMGyTsmYhYUMLq1
aHa4EMzVa4I6cPcrA7QnyhveZtEjVtmHDKW7Xp3Z3Kmgv/ad99iAnfN+vWY1N6XL
rh4HyHsBpZxj2MJjB/TqZNAgHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAmj2rb
Ebz69DdejksrGY8TkWaDMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw
QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf
MFhXLUF2U1VsbWlpRkRjaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM3ojgsrj9WpMFR354+iU5annDlqrD4WogUYlQlEbFotVvUrOJ7cMatnUwnyK
mOglwftOoyQgKq6JD6gHVhxchVcDZOWCBfUgdgI82cYv6QEDh29m47gpVpRgVO9S
It6clvvJpUQukCcqZrrjb6/33S0aUxjGzUCOAotZpkytZDAPIayD1jCF0OpaavYr
j62EX+ESFMZOvFcBZMNKSiJa7ETaDFWDt3eQ0TmpXO3YTtRNp4VWfNn3z5odAIni
A+iVlTU9fxEO32nF5FhCTXJEEK9yBiwybPRQq2wRwhmepegFRxrcqfzkg1eGM/rD
6jyDM1BFUMO5XkekZzus/ILCbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:11 2026 by rpki-client