
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: L1t7gA63nv0KwapCGbAOtlUM6GR07gPtvvVa+7wXMmw=
Subject key identifier: 0D:7D:AF:A4:23:4E:B7:96:79:D8:A5:8D:53:6E:8D:22:8D:E0:71:C9
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: 0104
Signing time: Thu 23 Jul 2026 07:54:37 +0000
Manifest this update: Thu 23 Jul 2026 07:54:37 +0000
Manifest next update: Thu 30 Jul 2026 07:54:37 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 1WjDrJXVN6PFTbvNA6ngTEobKEHQ5CK/Qh65Oh2lUWw=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Jul 23 07:54:37 2026 GMT
Not After : Jul 30 07:54:37 2026 GMT
Subject: CN=6a61c8bd-76a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:f0:e0:cc:a1:61:90:37:02:05:51:76:10:
59:1a:02:92:c1:77:45:96:69:49:69:04:60:0a:74:
ba:52:d6:7e:45:ca:15:f7:ab:4c:34:30:71:6e:76:
9c:b8:08:60:29:26:8a:f4:1a:74:b3:41:b5:4e:50:
aa:ff:1d:f8:e7:12:89:9e:96:e2:9a:0f:80:4a:f6:
03:04:05:56:04:bc:fb:06:da:6d:d3:45:3f:c0:96:
10:8c:73:30:b2:70:d0:53:16:29:46:1d:d8:c6:df:
4d:e7:a9:03:32:b5:3d:72:f9:34:d5:ab:90:20:96:
ed:a0:8e:6a:7d:de:47:c9:93:c3:ee:e7:7e:03:5a:
5e:70:62:72:17:ce:e6:86:c3:ef:e4:70:9e:ee:94:
a0:4e:e3:c4:97:a6:3a:38:74:b4:71:ef:be:69:ce:
6c:b4:9b:b1:4d:d2:38:c2:8d:c2:54:8c:f2:2f:bf:
a6:81:57:f3:80:55:9c:2c:77:52:56:04:19:3d:71:
e5:06:01:a5:b6:ea:80:38:66:74:c2:db:cd:29:56:
1b:e4:d3:46:6d:63:d0:d7:f0:26:45:2f:5c:fb:3f:
08:43:59:ca:34:1d:d3:9b:c0:ee:bc:bf:14:e7:ff:
35:99:13:d3:f8:fb:43:b8:c7:cc:7a:4a:8c:2c:30:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:AF:A4:23:4E:B7:96:79:D8:A5:8D:53:6E:8D:22:8D:E0:71:C9
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bd:7c:6e:f9:9d:9e:81:dc:8d:25:63:b5:be:39:98:70:63:
b3:2f:34:08:f1:ef:2e:56:1e:2a:d9:57:56:94:bb:53:12:44:
37:ed:f7:20:63:88:1b:2f:d9:b1:36:c7:16:b1:30:52:f1:af:
24:12:90:5d:c0:0c:1a:c5:6d:77:86:f4:23:34:cb:99:c7:aa:
0a:c9:b8:9d:af:66:b9:09:9b:d6:10:8d:a0:cd:8e:a4:d2:f3:
ce:e2:7d:2f:76:11:ab:ce:f5:b6:a8:e4:97:05:ba:dd:a2:74:
0e:bb:3c:14:84:cf:bd:ed:d0:6d:e1:15:52:c8:59:01:96:47:
90:9d:1d:15:78:09:e1:1a:3d:02:8a:6d:40:73:20:27:90:22:
88:ef:9c:3a:4d:c7:72:3c:63:a4:2f:32:21:fe:d0:1c:88:a9:
1f:6e:7d:aa:87:50:64:6e:d1:72:c5:f1:c1:f9:e4:84:71:53:
3d:eb:46:c5:f6:57:43:ef:da:8c:d9:6a:30:d9:9e:2b:5b:d9:
08:b1:aa:4d:e5:cc:b8:43:52:7b:58:67:df:e4:b9:12:51:94:
2a:9a:eb:da:71:cb:d8:5c:92:f4:50:1d:7d:49:63:51:94:28:
bc:a2:24:2d:d3:df:5b:22:2b:c2:00:38:9c:56:c6:7a:4b:15:
36:13:62:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNkIxMTAvBgNVBAUTKEMxRUU2OUFBNkFBMUFDQkEzMkUxNjc2NERBODFCRjdB
NDE2OEE2MEQwHhcNMjYwNzIzMDc1NDM3WhcNMjYwNzMwMDc1NDM3WjAYMRYwFAYD
VQQDEw02YTYxYzhiZC03NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0/w4MyhYZA3AgVRdhBZGgKSwXdFlmlJaQRgCnS6UtZ+RcoV96tMNDBxbnac
uAhgKSaK9Bp0s0G1TlCq/x345xKJnpbimg+ASvYDBAVWBLz7Btpt00U/wJYQjHMw
snDQUxYpRh3Yxt9N56kDMrU9cvk01auQIJbtoI5qfd5HyZPD7ud+A1pecGJyF87m
hsPv5HCe7pSgTuPEl6Y6OHS0ce++ac5stJuxTdI4wo3CVIzyL7+mgVfzgFWcLHdS
VgQZPXHlBgGltuqAOGZ0wtvNKVYb5NNGbWPQ1/AmRS9c+z8IQ1nKNB3Tm8DuvL8U
5/81mRPT+PtDuMfMekqMLDAOgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA19r6Qj
TreWediljVNujSKN4HHJMB8GA1UdIwQYMBaAFMHuaapqoay6MuFnZNqBv3pBaKYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI2Qi83NUE5MjIzMEZF
M0YxMUVGOEZBMjc3NTJDNEY5QUUwMi93ZTVwcW1xaHJMb3k0V2RrMm9HX2VrRm9w
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3BnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEI2Qi83NUE5MjIzMEZFM0YxMUVGOEZBMjc3NTJDNEY5QUUwMi93ZTVwcW1xaHJM
b3k0V2RrMm9HX2VrRm9wZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArL18bvmdnoHcjSVjtb45mHBjsy80CPHvLlYeKtlXVpS7UxJEN+33IGOIGy/Z
sTbHFrEwUvGvJBKQXcAMGsVtd4b0IzTLmceqCsm4na9muQmb1hCNoM2OpNLzzuJ9
L3YRq871tqjklwW63aJ0Drs8FITPve3QbeEVUshZAZZHkJ0dFXgJ4Ro9AoptQHMg
J5AiiO+cOk3HcjxjpC8yIf7QHIipH259qodQZG7RcsXxwfnkhHFTPetGxfZXQ+/a
jNlqMNmeK1vZCLGqTeXMuENSe1hn3+S5ElGUKprr2nHL2FyS9FAdfUljUZQovKIk
LdPfWyIrwgA4nFbGeksVNhNi7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:53 2026 by rpki-client