
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json)
Hash identifier: oG5+st+uSRYbnxXf5q5lgxhBfcup/v9ggU4FRfJuKV4=
Subject key identifier: 2B:08:B3:6C:AB:81:44:19:8D:C5:A4:BA:53:37:08:0F:6E:AC:D6:D6
Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
Manifest number: 02BC
Signing time: Thu 23 Jul 2026 02:36:21 +0000
Manifest this update: Thu 23 Jul 2026 02:36:20 +0000
Manifest next update: Thu 30 Jul 2026 02:36:20 +0000
Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: yBUuhx1aPmE36aPRZaUcaVjNhdlyL4bb7Iy03BPf9TQ=)
2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Validity
Not Before: Jul 23 02:36:20 2026 GMT
Not After : Jul 30 02:36:20 2026 GMT
Subject: CN=6a617e25-6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:11:2f:fe:25:51:d0:47:d8:7e:90:0b:c9:
23:e3:19:ac:fd:ef:99:73:82:07:50:4e:c5:11:71:
dd:ec:00:fc:8d:eb:cf:61:bd:69:df:c2:94:ca:b9:
3e:d1:70:fa:98:47:f2:2b:3e:f7:ba:10:29:9a:55:
63:a4:11:d5:ff:04:97:f2:0e:4e:3b:0b:67:b9:38:
9a:d1:7b:c1:2f:49:84:97:7d:94:49:3e:3a:61:e4:
66:c9:65:a7:8e:27:c7:18:19:ab:4d:d8:53:e4:4a:
59:35:42:24:47:a1:a1:af:61:5c:92:88:d4:9d:6f:
94:81:b3:c7:16:c9:d7:c9:ff:f1:a3:d4:fd:13:55:
29:5d:f8:d5:f6:04:ec:33:ea:91:91:b6:c8:5b:57:
4e:4b:6a:e2:1e:08:37:5b:27:30:17:8a:78:23:73:
82:e0:f3:7c:b2:e7:18:30:55:8b:f6:ae:69:0e:46:
e4:fd:90:d6:33:7b:66:3e:8c:3f:0c:2c:f0:5b:ed:
5f:9d:eb:db:bd:97:4a:17:4f:2f:78:22:ff:ef:09:
3a:25:5a:71:ff:17:d8:bd:be:03:df:d4:44:e0:15:
c3:76:e3:05:76:61:91:24:a9:ea:fa:97:49:46:f9:
47:9a:ba:ec:0b:7b:84:ab:64:fb:f8:69:fc:15:46:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:B3:6C:AB:81:44:19:8D:C5:A4:BA:53:37:08:0F:6E:AC:D6:D6
X509v3 Authority Key Identifier:
keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:66:f8:c8:53:30:26:17:d4:65:f5:b6:c5:91:2d:e7:c3:23:
cf:55:1e:0c:da:6e:6c:5f:f3:48:be:95:4e:29:9a:2b:b4:89:
a6:96:84:61:c5:02:25:d5:76:ae:fb:1c:aa:9a:05:a6:16:bf:
3b:19:a9:22:05:52:39:eb:46:d2:3b:cc:c0:8c:c5:c2:dc:e5:
92:d4:d7:66:bc:70:b8:0e:30:fd:56:7a:1f:4d:ec:2a:1c:f8:
ed:16:94:fe:67:fb:52:7c:e0:f1:fd:15:fe:26:e3:1c:63:d6:
8d:81:54:82:be:86:fc:e6:a8:68:2d:5e:52:60:4b:77:44:c6:
ac:e7:a2:3c:0b:06:24:e4:4d:a4:d1:3d:1e:a3:3b:80:2b:90:
06:1e:0d:97:b2:bc:82:2e:c0:6c:07:07:04:ab:1c:03:5a:db:
38:65:f8:36:54:13:30:3a:a5:36:24:39:21:1e:11:63:de:82:
01:74:b1:b3:37:1f:5a:43:bf:b3:5a:94:c8:ca:30:df:80:3b:
2a:0f:1f:c3:31:b8:40:cf:a7:42:93:74:0e:60:10:bd:5b:4f:
91:b6:64:94:99:20:d0:5b:5b:62:98:85:33:f4:76:d8:f6:dd:
24:5b:63:0e:9c:77:92:79:41:5a:61:69:bb:f1:86:43:b7:78:
cf:e7:64:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB
MTRCQzdBMkYwHhcNMjYwNzIzMDIzNjIwWhcNMjYwNzMwMDIzNjIwWjAYMRYwFAYD
VQQDEw02YTYxN2UyNS02YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xARL/4lUdBH2H6QC8kj4xms/e+Zc4IHUE7FEXHd7AD8jevPYb1p38KUyrk+
0XD6mEfyKz73uhApmlVjpBHV/wSX8g5OOwtnuTia0XvBL0mEl32UST46YeRmyWWn
jifHGBmrTdhT5EpZNUIkR6Ghr2FckojUnW+UgbPHFsnXyf/xo9T9E1UpXfjV9gTs
M+qRkbbIW1dOS2riHgg3WycwF4p4I3OC4PN8sucYMFWL9q5pDkbk/ZDWM3tmPow/
DCzwW+1fnevbvZdKF08veCL/7wk6JVpx/xfYvb4D39RE4BXDduMFdmGRJKnq+pdJ
RvlHmrrsC3uEq2T7+Gn8FUY2DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsIs2yr
gUQZjcWkulM3CA9urNbWMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy
NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0
WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnGb4yFMwJhfUZfW2xZEt58Mjz1UeDNpubF/zSL6VTimaK7SJppaEYcUCJdV2
rvscqpoFpha/OxmpIgVSOetG0jvMwIzFwtzlktTXZrxwuA4w/VZ6H03sKhz47RaU
/mf7Unzg8f0V/ibjHGPWjYFUgr6G/OaoaC1eUmBLd0TGrOeiPAsGJORNpNE9HqM7
gCuQBh4Nl7K8gi7AbAcHBKscA1rbOGX4NlQTMDqlNiQ5IR4RY96CAXSxszcfWkO/
s1qUyMow34A7Kg8fwzG4QM+nQpN0DmAQvVtPkbZklJkg0FtbYpiFM/R22PbdJFtj
Dpx3knlBWmFpu/GGQ7d4z+dkiA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:58 2026 by rpki-client