
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: VhjSEzhStjo+ODEabfn8Dr+cAyxX0P0N9ON3Zh+9cEY=
Subject key identifier: 54:B6:5D:68:A6:21:DD:6F:93:3C:E9:1A:B7:B2:24:7E:A7:B6:8B:91
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 318E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 3187
Signing time: Wed 22 Jul 2026 15:29:49 +0000
Manifest this update: Wed 22 Jul 2026 15:29:49 +0000
Manifest next update: Wed 29 Jul 2026 15:29:49 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: uEASKG9zMHZ9GmhPYGo4i8f3O64/46wyJ2NqkZmTV6Q=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12686 (0x318e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Jul 22 15:29:49 2026 GMT
Not After : Jul 29 15:29:49 2026 GMT
Subject: CN=6a60e1ed-ba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:03:ee:8e:78:03:44:df:7f:46:61:3e:b8:
69:d9:25:86:93:01:6a:2a:c5:aa:ef:cf:f5:6d:51:
c8:80:bd:d8:62:81:ca:e1:0b:e8:a8:f6:7d:9d:66:
3e:f7:dc:93:0b:9c:6d:a0:98:09:05:73:b9:60:d3:
2a:1c:49:c3:c2:a6:8d:0b:fa:78:e7:aa:02:7a:c9:
fe:eb:48:75:bb:c6:02:26:96:11:6a:a2:5e:5e:6f:
ce:58:7b:f4:91:f7:1a:87:f4:ac:f8:34:6a:d7:8f:
9c:80:c9:1d:81:9e:82:c5:ca:fd:4c:74:6a:19:a3:
20:c0:95:aa:b7:ec:59:33:8c:eb:94:3e:4e:f7:43:
9c:d6:6a:18:76:ce:81:30:97:8c:b4:f9:2d:5b:d0:
5b:b3:f8:28:e7:49:3e:1a:1b:8d:91:04:1c:9d:f1:
03:e6:d7:76:1d:b4:21:36:72:c5:25:3d:c3:ec:63:
0f:51:a4:d8:32:23:9c:c8:fd:3f:eb:2c:44:c9:5f:
cb:21:70:a8:d2:9d:b3:d6:68:ec:c5:9c:67:a1:43:
b8:b8:99:52:27:b9:ab:ed:e6:1a:f1:41:ec:55:a1:
2c:78:35:d3:c5:3f:93:ac:66:2b:f2:50:a7:37:7e:
b2:b8:f4:41:f5:41:f4:c0:bc:94:cc:26:7e:93:c6:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:5D:68:A6:21:DD:6F:93:3C:E9:1A:B7:B2:24:7E:A7:B6:8B:91
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:be:8c:a5:68:55:47:23:2a:44:66:c0:3d:41:65:2a:e4:
8d:83:7b:a5:8b:1d:46:d5:69:97:66:44:73:72:6b:1a:c2:04:
38:f3:c0:23:d7:f8:e8:52:33:4f:90:8a:50:eb:62:8b:65:92:
3c:00:86:50:4d:99:66:8d:9a:84:bc:66:88:2c:96:7f:11:62:
ca:3d:9d:53:d6:5c:e8:9b:53:26:c5:a3:a2:90:0b:9b:b6:63:
7f:05:a5:3a:0a:d3:5e:5f:b6:a5:cf:56:06:53:73:a8:e7:d9:
ef:59:a3:02:95:6c:04:61:46:41:af:aa:53:5c:74:b9:c4:ab:
1c:3c:5a:98:83:71:58:5b:d0:4e:c5:f7:50:8a:ae:77:f9:d3:
31:7c:5e:49:ef:71:5d:0a:57:bf:4c:57:eb:9e:19:75:2f:c2:
0d:c2:23:c1:91:50:05:c9:56:d5:84:91:c7:5d:2e:93:d3:73:
03:f2:be:44:c7:be:8c:7d:6f:ed:d0:56:2c:1e:fa:37:76:9a:
cf:b9:3c:2b:d1:90:95:cd:75:55:ee:7d:82:a6:f2:f7:d7:c1:
d4:65:dc:0f:7f:fa:7a:e4:a6:45:68:2a:91:7d:d7:51:1b:28:
51:e1:cb:ff:61:65:34:09:2e:61:2f:94:76:9a:09:b5:76:2b:
4a:e8:b0:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2
NUZEODI5QzcwHhcNMjYwNzIyMTUyOTQ5WhcNMjYwNzI5MTUyOTQ5WjAYMRYwFAYD
VQQDEw02YTYwZTFlZC1iYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAti8D7o54A0Tff0ZhPrhp2SWGkwFqKsWq78/1bVHIgL3YYoHK4QvoqPZ9nWY+
99yTC5xtoJgJBXO5YNMqHEnDwqaNC/p456oCesn+60h1u8YCJpYRaqJeXm/OWHv0
kfcah/Ss+DRq14+cgMkdgZ6Cxcr9THRqGaMgwJWqt+xZM4zrlD5O90Oc1moYds6B
MJeMtPktW9Bbs/go50k+GhuNkQQcnfED5td2HbQhNnLFJT3D7GMPUaTYMiOcyP0/
6yxEyV/LIXCo0p2z1mjsxZxnoUO4uJlSJ7mr7eYa8UHsVaEseDXTxT+TrGYr8lCn
N36yuPRB9UH0wLyUzCZ+k8bmHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFS2XWim
Id1vkzzpGreyJH6ntouRMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG
NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE
anNXVmh0cUxxbFJsX1lLY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfIO+jKVoVUcjKkRmwD1BZSrkjYN7pYsdRtVpl2ZEc3JrGsIEOPPAI9f46FIz
T5CKUOtii2WSPACGUE2ZZo2ahLxmiCyWfxFiyj2dU9Zc6JtTJsWjopALm7ZjfwWl
OgrTXl+2pc9WBlNzqOfZ71mjApVsBGFGQa+qU1x0ucSrHDxamINxWFvQTsX3UIqu
d/nTMXxeSe9xXQpXv0xX654ZdS/CDcIjwZFQBclW1YSRx10uk9NzA/K+RMe+jH1v
7dBWLB76N3aaz7k8K9GQlc11Ve59gqby99fB1GXcD3/6euSmRWgqkX3XURsoUeHL
/2FlNAkuYS+UdpoJtXYrSuiwwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:25 2026 by rpki-client