
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier: cu4z/zw9oapaVHRlkBcSIRPKSy/vBhlrPKN8hN7dN5I=
Subject key identifier: D2:29:31:A4:CE:FA:27:6C:D1:DA:B0:44:C3:45:35:A7:16:3F:6E:B4
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 0510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number: 04F4
Signing time: Thu 23 Jul 2026 00:36:26 +0000
Manifest this update: Thu 23 Jul 2026 00:36:26 +0000
Manifest next update: Thu 30 Jul 2026 00:36:26 +0000
Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: cTE02SL/Q9Ba8/sR1XPeCt7PuccECGTBa+3MI4Pp2wk=)
2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Validity
Not Before: Jul 23 00:36:26 2026 GMT
Not After : Jul 30 00:36:26 2026 GMT
Subject: CN=6a61620a-0a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:50:cc:91:0b:b4:8a:3c:38:e2:c5:65:be:
7a:5d:b4:5b:27:47:3c:56:49:41:be:c0:97:c7:98:
79:33:c8:88:c2:62:c3:b3:91:57:1e:5e:f6:5a:bc:
10:07:f2:e8:4f:85:bc:74:81:ea:9e:bb:85:d9:59:
c0:bf:4d:47:72:b0:50:8e:b2:33:5b:f8:64:f7:6d:
af:62:5d:71:80:ac:58:8b:7a:b1:62:56:58:00:eb:
49:41:8a:27:c9:26:26:f5:65:dc:3f:41:ca:c5:5f:
f6:56:4f:70:c1:b1:12:bd:0d:7b:18:65:c3:f3:93:
a3:78:b0:f1:bc:34:27:22:30:d5:4e:37:d2:c9:0d:
79:2f:60:22:17:70:a0:ed:7f:cf:76:e3:c6:6b:6e:
67:da:a4:5b:b4:fa:3d:b4:f8:9f:69:d4:79:c4:7d:
c0:c7:c4:f0:cb:ab:78:a9:c0:e1:eb:1c:e4:ff:00:
37:3a:13:69:f6:e1:0e:84:fd:11:df:00:6d:d7:a0:
22:58:ff:92:82:0f:f2:ee:0b:c0:b1:c8:d4:7a:e9:
2c:09:ce:28:18:9d:b8:02:41:9a:fd:3c:30:a7:d9:
07:05:6d:71:fa:b7:e8:b2:0c:6a:6c:d2:b0:55:36:
f7:45:e6:65:ba:8b:2f:b7:df:a9:dd:0d:7c:61:9c:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:31:A4:CE:FA:27:6C:D1:DA:B0:44:C3:45:35:A7:16:3F:6E:B4
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:08:17:5e:66:08:b1:ca:bf:a3:ca:b6:03:e2:c5:e8:45:
f0:29:e1:11:7f:36:e3:2b:06:89:57:66:ea:7c:ea:0c:f1:13:
26:33:25:dd:21:3a:b6:6e:90:3e:4d:4f:2f:36:8a:ef:00:3e:
98:73:c2:e6:9d:b6:67:8c:76:7d:37:4c:b1:a4:a0:79:1c:c4:
1c:f0:c4:2b:fc:f5:1a:c7:07:fb:05:48:1a:a0:e8:e1:40:4a:
4c:c6:41:32:8e:6d:06:b8:38:a9:8c:43:fd:5e:11:52:57:51:
54:07:f5:6b:cf:a4:ba:40:9a:19:3b:bb:e5:71:34:46:af:29:
c2:68:b7:c7:f3:d2:92:14:f4:1c:82:37:54:2c:da:b8:ab:6b:
93:53:a3:6c:a2:cd:62:dd:bd:23:f2:5b:e3:6e:65:1b:49:9d:
18:17:23:10:ee:1a:f7:08:19:88:d6:05:26:2b:8b:5e:e6:d0:
56:7d:13:15:2e:e2:6d:bc:b6:c1:15:ec:c9:e1:d0:82:a3:bd:
d8:b6:38:3d:2e:9a:96:09:78:43:bb:5e:bb:78:ec:fb:63:2d:
92:81:8c:32:a1:52:f2:1e:e4:36:95:84:e1:e0:ed:72:a0:ae:
ab:7e:e1:f6:f4:95:82:84:27:31:f5:52:c7:47:1c:86:ac:b0:
1d:6d:7f:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE
NTBCMDExNTcwHhcNMjYwNzIzMDAzNjI2WhcNMjYwNzMwMDAzNjI2WjAYMRYwFAYD
VQQDEw02YTYxNjIwYS0wYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4BQzJELtIo8OOLFZb56XbRbJ0c8VklBvsCXx5h5M8iIwmLDs5FXHl72WrwQ
B/LoT4W8dIHqnruF2VnAv01HcrBQjrIzW/hk922vYl1xgKxYi3qxYlZYAOtJQYon
ySYm9WXcP0HKxV/2Vk9wwbESvQ17GGXD85OjeLDxvDQnIjDVTjfSyQ15L2AiF3Cg
7X/PduPGa25n2qRbtPo9tPifadR5xH3Ax8Twy6t4qcDh6xzk/wA3OhNp9uEOhP0R
3wBt16AiWP+Sgg/y7gvAscjUeuksCc4oGJ24AkGa/Twwp9kHBW1x+rfosgxqbNKw
VTb3ReZluosvt9+p3Q18YZxh1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIpMaTO
+ids0dqwRMNFNacWP260MB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0
NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl
OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARK8IF15mCLHKv6PKtgPixehF8CnhEX824ysGiVdm6nzqDPETJjMl3SE6tm6Q
Pk1PLzaK7wA+mHPC5p22Z4x2fTdMsaSgeRzEHPDEK/z1GscH+wVIGqDo4UBKTMZB
Mo5tBrg4qYxD/V4RUldRVAf1a8+kukCaGTu75XE0Rq8pwmi3x/PSkhT0HII3VCza
uKtrk1OjbKLNYt29I/Jb425lG0mdGBcjEO4a9wgZiNYFJiuLXubQVn0TFS7ibby2
wRXsyeHQgqO92LY4PS6algl4Q7teu3js+2MtkoGMMqFS8h7kNpWE4eDtcqCuq37h
9vSVgoQnMfVSx0cchqywHW1//g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:49 2026 by rpki-client