
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File: hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier: lrt75KNR6ogye1K8I/zpWQp/kHSGs6LXWeFetbHQtPw=
Subject key identifier: E7:BF:99:96:9A:93:E1:20:3F:0A:87:07:C1:4F:CA:1C:A4:A8:FF:4E
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 07C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number: 07A2
Signing time: Wed 22 Jul 2026 22:09:46 +0000
Manifest this update: Wed 22 Jul 2026 22:09:45 +0000
Manifest next update: Wed 29 Jul 2026 22:09:45 +0000
Files and hashes: 1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: hLtHAvW0GjXK1KjkvEohVM4Zod6cARSw4+VAC1JIinA=)
2: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=)
3: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: U5iX1eh/A7h/afcB70kYZU805bFcTIwmLGeaQFNS1cc=)
4: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: oOJyuxXfX3imbXltRS3IeTJJR7sYKvHpEuMTz6A1stI=)
5: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: w8xPzFRUz74kcsL++i4sKCp2gMLpbIAkAjBNqyS5ZF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Jul 22 22:09:45 2026 GMT
Not After : Jul 29 22:09:45 2026 GMT
Subject: CN=6a613fa9-83cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:84:7f:02:4b:a7:9b:de:be:2e:41:41:3d:
31:c3:8f:a3:29:7e:a7:7b:be:8f:a4:36:eb:99:12:
75:72:9e:b2:91:0d:5f:0c:24:68:8b:73:28:cf:ca:
c5:13:18:48:3b:f6:1a:10:dd:1a:38:9b:57:11:31:
34:cd:e7:ba:ff:d3:41:19:38:71:b6:8e:69:70:24:
00:5e:e3:d8:ce:f9:b8:fd:bb:47:74:a8:42:38:b9:
d7:53:5a:ae:f2:df:09:ae:41:e2:eb:75:04:ef:1f:
e7:57:74:12:0d:de:d8:6c:ec:da:f9:e3:b8:9b:63:
48:46:f2:12:a3:93:05:bb:12:42:3b:e8:84:d5:c8:
2a:d8:64:0c:b5:76:d1:e1:2f:5e:0f:f1:e2:c0:b0:
5f:e6:f2:79:2b:23:63:d5:b7:a4:70:ae:37:33:e2:
ca:37:13:7a:c0:f3:d9:df:ee:66:2e:d8:9f:d5:ea:
cd:7f:ad:70:d8:28:85:8c:65:f3:10:75:5d:82:41:
1c:99:eb:73:b7:8c:f4:d8:37:12:97:83:fb:62:82:
88:54:f6:c8:d1:6d:a1:4a:8d:ed:d5:d5:b2:33:b7:
c5:b7:22:fd:b6:51:4f:4f:ea:c2:5e:27:c8:41:90:
a4:83:ac:25:36:05:f4:22:bb:10:60:48:71:22:f7:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:99:96:9A:93:E1:20:3F:0A:87:07:C1:4F:CA:1C:A4:A8:FF:4E
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:ef:d6:b2:83:1e:d7:7d:24:02:28:04:7d:49:9f:24:db:ab:
28:cd:c0:8c:21:0c:fb:4c:ea:28:c6:6d:2f:79:ae:7d:82:b7:
5c:6a:b8:69:d6:0d:b9:cc:d5:49:5d:94:ba:a7:20:b7:a6:e3:
c3:81:58:3c:b8:f9:1a:1d:dd:58:99:d3:4f:c7:9b:23:3e:ec:
d5:8a:01:b7:38:4f:c3:9b:03:a5:74:98:4e:d4:e4:8d:7d:16:
52:39:58:20:fc:98:86:ed:1c:c7:90:06:7c:36:8a:af:66:cf:
39:4b:e2:43:d7:9d:e6:01:62:e5:e3:3d:f9:e3:14:51:b2:33:
e0:6f:bb:f0:3d:bc:01:6e:3d:d5:fa:ec:4d:ff:c4:07:22:26:
9e:1d:a7:a3:a3:bc:84:44:7a:f9:7e:eb:1b:64:77:12:b8:4b:
f7:6b:d1:78:0f:1a:75:d5:68:89:ec:84:63:cf:92:09:82:e3:
47:57:5b:44:f7:88:ef:1a:8c:58:55:d0:67:75:00:2d:43:22:
d7:22:f7:85:9b:85:f9:ff:5f:54:92:c4:b6:14:e4:c3:2d:6d:
fb:9f:c2:ed:28:65:b7:95:a9:0f:11:4d:bd:59:2b:aa:da:50:
b7:3a:2a:e7:51:b6:01:a7:c8:9a:b3:da:4e:44:90:ad:54:9a:
7b:6e:35:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw
N0I1NEM4NkMwHhcNMjYwNzIyMjIwOTQ1WhcNMjYwNzI5MjIwOTQ1WjAYMRYwFAYD
VQQDEw02YTYxM2ZhOS04M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSeEfwJLp5vevi5BQT0xw4+jKX6ne76PpDbrmRJ1cp6ykQ1fDCRoi3Moz8rF
ExhIO/YaEN0aOJtXETE0zee6/9NBGThxto5pcCQAXuPYzvm4/btHdKhCOLnXU1qu
8t8JrkHi63UE7x/nV3QSDd7YbOza+eO4m2NIRvISo5MFuxJCO+iE1cgq2GQMtXbR
4S9eD/HiwLBf5vJ5KyNj1bekcK43M+LKNxN6wPPZ3+5mLtif1erNf61w2CiFjGXz
EHVdgkEcmetzt4z02DcSl4P7YoKIVPbI0W2hSo3t1dWyM7fFtyL9tlFPT+rCXifI
QZCkg6wlNgX0IrsQYEhxIvfGdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOe/mZaa
k+EgPwqHB8FPyhykqP9OMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG
RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Qzk3OS9FRDYzM0U4NjVGRDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJ
dUU5cGdZOFdvZmNIdFV5R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3u/WsoMe130kAigEfUmfJNurKM3AjCEM+0zqKMZtL3mufYK3XGq4adYNuczV
SV2Uuqcgt6bjw4FYPLj5Gh3dWJnTT8ebIz7s1YoBtzhPw5sDpXSYTtTkjX0WUjlY
IPyYhu0cx5AGfDaKr2bPOUviQ9ed5gFi5eM9+eMUUbIz4G+78D28AW491frsTf/E
ByImnh2no6O8hER6+X7rG2R3ErhL92vReA8addVoieyEY8+SCYLjR1dbRPeI7xqM
WFXQZ3UALUMi1yL3hZuF+f9fVJLEthTkwy1t+5/C7Shlt5WpDxFNvVkrqtpQtzoq
51G2AafImrPaTkSQrVSae2410Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:19 2026 by rpki-client