
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: YuzKpVULi8yt8KGvhQ5OLIV12+sTCYXr6s+fLEmas7I=
Subject key identifier: 6A:72:52:D5:4B:06:FB:17:BF:26:E2:A5:35:00:BE:C6:84:5D:93:EC
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 09:27:00 +0000
Manifest this update: Thu 23 Jul 2026 09:27:00 +0000
Manifest next update: Thu 30 Jul 2026 09:27:00 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: LMt0X562TkiR39mfmY0DWzEYSWa3h7pOVUZ+yHKeLqI=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Jul 23 09:27:00 2026 GMT
Not After : Jul 30 09:27:00 2026 GMT
Subject: CN=6a61de64-f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:f6:f4:1d:af:cb:24:a2:c0:8f:a1:24:58:
35:48:dd:6e:4b:5c:eb:12:f9:4d:18:a8:73:ae:43:
1f:60:6c:43:ea:93:3b:36:3d:5a:e2:19:bc:cb:41:
f2:2b:9f:e7:76:7e:73:ee:fa:ae:ec:c5:1c:24:19:
82:69:f5:ed:be:b7:55:37:ac:52:3a:39:24:39:bc:
d7:33:b8:92:06:2d:ea:b2:7c:6f:18:84:95:ee:fb:
a2:02:ed:55:62:cf:e7:60:51:f3:61:11:8b:15:13:
2d:b6:23:ad:5c:1c:f5:a8:4e:99:9e:13:12:0a:ca:
b0:90:34:39:e1:d2:0f:23:47:53:4c:08:71:40:b8:
c7:ac:b8:a8:ee:01:6a:59:25:e8:1f:39:16:15:55:
fd:1c:79:38:ef:a4:f7:02:fa:2c:a9:d6:b3:cb:c7:
62:3a:c2:45:6e:be:d0:31:c5:83:8f:15:02:de:33:
35:e6:35:57:9d:5b:ca:c0:09:ee:17:6a:1c:e6:3f:
ed:39:96:f9:74:3c:0e:1d:35:c3:46:f7:48:d3:05:
52:40:d6:0f:a3:02:54:fa:ec:5d:3e:35:35:67:68:
97:f7:07:25:70:4a:ae:c7:e0:b6:89:56:b9:e8:3c:
44:c8:3f:79:cc:6d:9a:e4:cc:fb:82:99:8a:e7:90:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:52:D5:4B:06:FB:17:BF:26:E2:A5:35:00:BE:C6:84:5D:93:EC
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:54:6e:19:35:a0:33:1f:3b:00:c3:e3:ef:31:8b:66:ea:ef:
df:4e:cf:f8:6d:ec:35:57:12:d7:11:bb:22:b6:d4:e3:f7:f3:
b2:e9:1e:63:4f:de:0a:b4:b5:44:c7:7c:18:bd:5d:72:4b:8d:
23:7a:42:d5:d4:47:f3:60:87:52:1c:ab:2e:42:89:37:1c:2d:
e7:f1:d4:c9:aa:1a:25:43:c8:f8:62:d8:0e:23:23:75:ed:b4:
9f:bc:fc:6d:d9:5d:74:6d:95:96:fa:a3:30:96:04:7d:1b:f6:
f5:af:f3:95:2e:8f:4e:6c:c7:ff:d2:57:ad:c8:e3:4d:07:b6:
6b:1c:f1:b9:d2:8c:ac:68:94:21:9b:b9:e5:cf:2b:5b:01:f8:
ad:71:a0:ba:7b:e2:39:97:ed:16:a5:38:d7:88:01:9b:66:e0:
f6:ed:6e:e0:66:5a:42:9e:a2:29:85:10:71:4c:4e:07:67:b0:
fa:22:f6:43:31:12:67:80:2e:a4:90:49:f0:8d:19:74:96:75:
7d:d1:63:1a:5b:f5:e1:13:c9:b2:9a:a9:65:2d:22:c8:e9:f8:
ae:a8:d8:21:1d:27:ef:12:cd:7e:bb:a2:6c:d3:43:b6:93:87:
42:a6:de:54:86:b0:10:5f:a4:ac:a6:d9:b2:96:99:8b:f5:d8:
4d:a4:35:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDRDQxMTAvBgNVBAUTKDNGOEYzODYzMEY0RDNENzBFREQ5RTVDOTFFMzZFQzQ4
RUZCOUZENjIwHhcNMjYwNzIzMDkyNzAwWhcNMjYwNzMwMDkyNzAwWjAYMRYwFAYD
VQQDEw02YTYxZGU2NC1mNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkjf29B2vyySiwI+hJFg1SN1uS1zrEvlNGKhzrkMfYGxD6pM7Nj1a4hm8y0Hy
K5/ndn5z7vqu7MUcJBmCafXtvrdVN6xSOjkkObzXM7iSBi3qsnxvGISV7vuiAu1V
Ys/nYFHzYRGLFRMttiOtXBz1qE6ZnhMSCsqwkDQ54dIPI0dTTAhxQLjHrLio7gFq
WSXoHzkWFVX9HHk476T3Avosqdazy8diOsJFbr7QMcWDjxUC3jM15jVXnVvKwAnu
F2oc5j/tOZb5dDwOHTXDRvdI0wVSQNYPowJU+uxdPjU1Z2iX9wclcEqux+C2iVa5
6DxEyD95zG2a5Mz7gpmK55CCbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpyUtVL
BvsXvybipTUAvsaEXZPsMB8GA1UdIwQYMBaAFD+POGMPTT1w7dnlyR427Ejvuf1i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNENC9ERTUzMTA4MEI5
NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9QNDg0WXc5TlBYRHQyZVhKSGpic1NPLTVf
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9XSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNENC9ERTUzMTA4MEI5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi9QNDg0WXc5TlBY
RHQyZVhKSGpic1NPLTVfV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoFRuGTWgMx87AMPj7zGLZurv307P+G3sNVcS1xG7IrbU4/fzsukeY0/eCrS1
RMd8GL1dckuNI3pC1dRH82CHUhyrLkKJNxwt5/HUyaoaJUPI+GLYDiMjde20n7z8
bdlddG2VlvqjMJYEfRv29a/zlS6PTmzH/9JXrcjjTQe2axzxudKMrGiUIZu55c8r
WwH4rXGgunviOZftFqU414gBm2bg9u1u4GZaQp6iKYUQcUxOB2ew+iL2QzESZ4Au
pJBJ8I0ZdJZ1fdFjGlv14RPJspqpZS0iyOn4rqjYIR0n7xLNfruibNNDtpOHQqbe
VIawEF+krKbZspaZi/XYTaQ1tA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:37 2026 by rpki-client