
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: dWwE+zkAxAkE4FFF629CUZ+3IfQo+bw0/WOww1rn18g=
Subject key identifier: A5:85:EC:73:70:D6:30:0A:E6:3A:5F:8C:74:25:8B:0C:21:5C:51:60
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 07B8
Signing time: Wed 22 Jul 2026 22:35:20 +0000
Manifest this update: Wed 22 Jul 2026 22:35:19 +0000
Manifest next update: Wed 29 Jul 2026 22:35:19 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 7qp5rJVrTpbwgWPUdzufGKh7XhAkuvH+ykIqQResKz0=)
2: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
3: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
4: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
6: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
8: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
9: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jul 22 22:35:19 2026 GMT
Not After : Jul 29 22:35:19 2026 GMT
Subject: CN=6a6145a8-371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:86:c2:c1:89:f9:72:2a:93:be:96:36:0f:
bf:23:58:c2:d0:c5:35:25:10:68:c5:7b:e5:41:57:
4a:0a:4f:6f:92:ad:79:0e:ad:6d:63:d2:21:6e:8a:
20:04:e4:e2:51:00:f7:13:41:7c:d5:f7:52:1e:f4:
17:37:be:17:22:87:6c:1c:22:78:db:d7:01:2f:63:
fc:eb:ca:34:6a:5b:e0:a6:23:d4:50:22:e7:0e:e4:
e8:00:65:c2:2b:95:58:d4:f9:45:34:4d:a8:93:9a:
54:f0:ca:80:ba:1f:d6:7d:ee:1d:e6:40:9e:6f:38:
0e:d8:ac:1e:90:f1:39:2c:e7:73:bd:64:1a:e4:eb:
63:a1:0c:12:f2:2c:7e:3e:de:24:63:a1:34:e4:57:
0a:cd:ea:5a:ba:0e:df:4b:4a:44:b0:35:49:80:5b:
4c:9d:a0:c1:be:80:ae:e5:d9:72:6e:a9:9b:e7:52:
5b:d4:c3:b4:f5:6e:c5:99:a3:41:83:83:be:7a:05:
c9:02:55:69:36:ff:75:cb:13:f3:67:1d:cf:f9:fe:
0a:79:6e:cd:26:86:38:45:a7:ac:69:1e:f2:5c:61:
94:29:c2:c2:20:04:97:4b:4c:9c:ba:8e:d5:95:c7:
02:bd:5d:1d:1e:08:ca:28:fc:36:96:37:d3:7e:eb:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:EC:73:70:D6:30:0A:E6:3A:5F:8C:74:25:8B:0C:21:5C:51:60
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:e1:57:5d:e9:3b:d3:51:8d:d8:2e:e0:32:49:d5:95:0c:
96:8a:b0:34:ba:9e:87:07:cb:8a:0b:8e:b9:02:52:bf:29:a2:
45:d1:48:f2:c6:88:ac:b3:24:62:54:d6:bb:1a:62:ae:8d:26:
b4:7f:1a:8a:22:c0:9e:2d:c5:53:75:51:51:a2:79:62:e7:13:
4c:6c:38:c9:7b:94:9f:a1:e0:46:c7:82:47:4e:d2:97:7d:b0:
e0:7c:c3:3a:69:12:4f:ac:3b:dc:56:89:fe:4f:08:ea:f6:63:
8c:e6:af:61:85:6b:80:5b:d3:b1:f4:22:8b:2d:d5:8f:a3:7a:
b1:55:c2:66:18:a5:3e:17:ee:e5:1a:03:ec:79:17:61:fb:19:
f3:53:47:41:4c:71:c6:9f:3b:25:63:07:64:ea:62:98:8d:22:
06:b0:16:00:c8:27:4c:29:9a:f1:bc:2d:32:83:7a:65:b6:d0:
1b:2b:0f:c4:8b:b7:8a:64:70:c5:3c:5b:1a:e1:e8:db:dd:dd:
96:af:48:b7:8f:6b:77:44:59:6e:b4:ad:8a:74:34:13:1e:96:
ad:2c:16:cc:9a:74:d4:09:04:e2:ac:82:66:6f:b5:7c:4f:78:
fb:d4:3c:16:7b:44:fc:00:cb:bd:4d:56:a7:73:29:0f:f7:16:
2d:83:8a:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjYwNzIyMjIzNTE5WhcNMjYwNzI5MjIzNTE5WjAYMRYwFAYD
VQQDEw02YTYxNDVhOC0zNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuc+GwsGJ+XIqk76WNg+/I1jC0MU1JRBoxXvlQVdKCk9vkq15Dq1tY9Ihboog
BOTiUQD3E0F81fdSHvQXN74XIodsHCJ429cBL2P868o0alvgpiPUUCLnDuToAGXC
K5VY1PlFNE2ok5pU8MqAuh/Wfe4d5kCebzgO2KwekPE5LOdzvWQa5OtjoQwS8ix+
Pt4kY6E05FcKzepaug7fS0pEsDVJgFtMnaDBvoCu5dlybqmb51Jb1MO09W7FmaNB
g4O+egXJAlVpNv91yxPzZx3P+f4KeW7NJoY4RaesaR7yXGGUKcLCIASXS0ycuo7V
lccCvV0dHgjKKPw2ljfTfusUuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWF7HNw
1jAK5jpfjHQliwwhXFFgMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0
ejBhTFgwbHFrYXV3NUl6NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW4XhV13pO9NRjdgu4DJJ1ZUMloqwNLqehwfLiguOuQJSvymiRdFI8saIrLMk
YlTWuxpiro0mtH8aiiLAni3FU3VRUaJ5YucTTGw4yXuUn6HgRseCR07Sl32w4HzD
OmkST6w73FaJ/k8I6vZjjOavYYVrgFvTsfQiiy3Vj6N6sVXCZhilPhfu5RoD7HkX
YfsZ81NHQUxxxp87JWMHZOpimI0iBrAWAMgnTCma8bwtMoN6ZbbQGysPxIu3imRw
xTxbGuHo293dlq9It49rd0RZbrStinQ0Ex6WrSwWzJp01AkE4qyCZm+1fE94+9Q8
FntE/ADLvU1Wp3MpD/cWLYOKZg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:32 2026 by rpki-client