
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier: vIOINbsO6P73/ueBwgkcSugimBkM98t373TxYUAbTV8=
Subject key identifier: 15:8C:53:06:FE:5E:B7:10:6A:84:35:39:6F:6E:A2:A8:AA:29:F5:47
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number: 0122
Signing time: Thu 23 Jul 2026 07:25:32 +0000
Manifest this update: Thu 23 Jul 2026 07:25:31 +0000
Manifest next update: Thu 30 Jul 2026 07:25:31 +0000
Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: HmYqt6p+A1WL/cWzUmm+C+JdtBy6E1voGbQTajfVrXI=)
2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: 4hDTlCGLeED2V5NneVQ9VwBSF0HWPTNuGKERbuoxtX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Validity
Not Before: Jul 23 07:25:31 2026 GMT
Not After : Jul 30 07:25:31 2026 GMT
Subject: CN=6a61c1ec-88c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:e6:59:4f:69:b2:c7:37:eb:da:37:78:e3:
0a:b7:96:68:5b:3a:0e:d7:10:aa:f4:04:e0:24:6b:
db:10:ac:19:09:a6:4c:2d:7f:06:bb:b3:61:bd:31:
23:7c:32:64:a9:9c:25:ef:c5:e6:56:f6:16:8b:b9:
07:34:19:06:7e:95:9b:69:b8:d5:d0:b4:08:0d:0c:
2c:b2:5c:d3:fa:33:fa:58:40:fa:0a:7e:2e:9b:f7:
9d:a2:5e:dc:ca:92:0b:a1:c3:1f:27:9d:5b:07:9d:
56:7d:0b:84:6d:83:03:20:7c:ad:1c:d5:93:2b:3e:
2c:8a:d7:2d:0a:b1:f3:d6:2c:57:ef:0d:51:54:a8:
33:76:04:57:b5:45:3c:92:a0:63:f9:3b:d3:63:0c:
b8:67:b6:12:45:b2:6b:ff:47:12:99:0a:5b:d7:9c:
f2:e8:80:97:77:89:18:f6:db:1a:fe:28:53:a1:85:
9f:aa:a8:0e:b2:17:9d:65:ec:1b:91:ec:fa:17:62:
24:96:4b:2b:e8:14:1c:9c:e0:95:df:5d:58:95:a8:
fa:b4:59:00:0e:35:ef:f7:c1:34:eb:59:a0:3a:a8:
c3:71:69:47:c9:c1:0d:2c:6b:e9:48:eb:d0:81:47:
33:15:d3:98:8c:d0:47:9f:03:b8:9b:a1:43:31:95:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:53:06:FE:5E:B7:10:6A:84:35:39:6F:6E:A2:A8:AA:29:F5:47
X509v3 Authority Key Identifier:
keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a0:e7:b1:46:21:47:12:d0:3b:2b:21:1d:77:8f:b8:4b:77:
be:eb:e7:fe:b8:12:9b:c2:7c:fc:af:aa:a3:98:6e:bf:00:1d:
af:99:f8:98:ae:76:45:af:65:10:08:dd:20:59:0e:a8:d7:63:
d4:8c:8b:06:84:d4:d9:cf:ae:6f:36:6c:56:e2:7b:8c:41:66:
2e:d8:3b:4d:67:1d:aa:82:15:c1:95:09:7f:05:83:09:ef:2f:
a6:4a:c3:81:80:3c:c1:c1:63:ad:a7:13:f0:96:05:96:52:5d:
6c:8d:67:70:d6:15:87:95:96:57:70:ea:d1:8c:0c:48:2b:5e:
d4:5a:fc:fe:0e:0d:d8:66:2a:4d:77:07:44:a2:dd:07:93:d8:
05:05:e3:bc:62:bb:65:45:2c:d9:3a:41:c7:05:b6:a6:07:7c:
02:95:aa:5e:60:ce:e6:aa:e9:a7:ab:8c:ed:6f:8c:c2:6e:a9:
ef:96:3d:28:95:30:58:fb:c1:1e:33:10:86:bf:a3:6d:84:6a:
2f:cf:45:8b:b9:31:b8:94:13:75:da:81:3f:e1:94:be:8d:97:
cf:b9:01:3c:90:46:7f:c0:df:ee:58:23:6d:d3:49:91:79:08:
0f:a9:93:77:0b:c5:95:20:c6:3d:46:f7:d5:a1:78:09:8b:f3:
9e:ae:c4:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQwNEYxMTAvBgNVBAUTKEZFN0NDOEQxMkM4Q0I5NDBEMDZFQUVEQjVCMEFENDNE
MDUwMzYyRjEwHhcNMjYwNzIzMDcyNTMxWhcNMjYwNzMwMDcyNTMxWjAYMRYwFAYD
VQQDEw02YTYxYzFlYy04OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAir3mWU9pssc369o3eOMKt5ZoWzoO1xCq9ATgJGvbEKwZCaZMLX8Gu7NhvTEj
fDJkqZwl78XmVvYWi7kHNBkGfpWbabjV0LQIDQwsslzT+jP6WED6Cn4um/edol7c
ypILocMfJ51bB51WfQuEbYMDIHytHNWTKz4sitctCrHz1ixX7w1RVKgzdgRXtUU8
kqBj+TvTYwy4Z7YSRbJr/0cSmQpb15zy6ICXd4kY9tsa/ihToYWfqqgOshedZewb
kez6F2Iklksr6BQcnOCV311Ylaj6tFkADjXv98E061mgOqjDcWlHycENLGvpSOvQ
gUczFdOYjNBHnwO4m6FDMZV8WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWMUwb+
XrcQaoQ1OW9uoqiqKfVHMB8GA1UdIwQYMBaAFP58yNEsjLlA0G6u21sK1D0FA2Lx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDA0Ri9ENUQwRkVCNENC
RjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVVRFFicTdiV3dyVVBRVURZ
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDA0Ri9ENUQwRkVCNENCRjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVV
RFFicTdiV3dyVVBRVURZdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArKDnsUYhRxLQOyshHXePuEt3vuvn/rgSm8J8/K+qo5huvwAdr5n4mK52Ra9l
EAjdIFkOqNdj1IyLBoTU2c+ubzZsVuJ7jEFmLtg7TWcdqoIVwZUJfwWDCe8vpkrD
gYA8wcFjracT8JYFllJdbI1ncNYVh5WWV3Dq0YwMSCte1Fr8/g4N2GYqTXcHRKLd
B5PYBQXjvGK7ZUUs2TpBxwW2pgd8ApWqXmDO5qrpp6uM7W+Mwm6p75Y9KJUwWPvB
HjMQhr+jbYRqL89Fi7kxuJQTddqBP+GUvo2Xz7kBPJBGf8Df7lgjbdNJkXkID6mT
dwvFlSDGPUb31aF4CYvznq7Erw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:08 2026 by rpki-client