
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json)
Hash identifier: vLLHsPhAaar5mh7TTkV1Y+45BUSs9pnFf2wYolUoPY0=
Subject key identifier: 38:22:EB:0A:B1:CD:04:EE:0E:22:27:2C:F3:82:24:27:3D:D2:28:18
Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
Manifest number: 017E
Signing time: Thu 23 Jul 2026 06:06:27 +0000
Manifest this update: Thu 23 Jul 2026 06:06:26 +0000
Manifest next update: Thu 30 Jul 2026 06:06:26 +0000
Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: mNm2BfJBHE9VVQakPAzlWN2LuVDjuk5/vGtQR0VaWo4=)
2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=)
3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Validity
Not Before: Jul 23 06:06:26 2026 GMT
Not After : Jul 30 06:06:26 2026 GMT
Subject: CN=6a61af62-18ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:56:21:21:85:b6:e2:c3:42:b2:46:41:64:
29:ff:db:2b:7d:0a:b0:29:40:85:c8:4f:26:da:13:
20:22:9d:7c:89:3a:b7:33:f1:8c:b0:50:20:54:c5:
5e:86:5f:2c:1c:26:0e:a7:9d:59:53:d3:d8:a3:3c:
bc:37:36:23:b1:88:4a:0c:e6:fd:98:be:5e:36:15:
61:e2:46:f6:6d:23:02:28:5e:19:b1:c5:41:3a:78:
01:41:d8:09:2c:a5:dc:f1:ca:82:17:fe:06:2d:e4:
28:2e:d5:67:bc:f1:49:8a:5c:9d:5d:4d:68:11:6a:
17:eb:f5:87:49:87:2d:67:13:ce:70:23:73:d8:e1:
fa:86:6a:7b:8b:cb:b8:e5:9c:ab:7d:82:ee:fe:f1:
64:86:4e:9b:78:04:c6:4c:6f:4a:4f:19:39:e9:e8:
6d:f8:39:43:b5:58:4b:8e:0a:22:66:a9:35:30:c9:
d3:8c:b0:33:16:80:a4:37:88:5a:70:a4:e6:77:45:
a9:8b:78:88:33:65:dc:ec:4a:b4:40:25:68:b9:26:
ea:80:9b:d4:48:69:19:e0:6d:be:e0:56:aa:ac:fe:
6d:96:de:44:c0:0e:71:52:0f:6f:64:d7:3a:bb:54:
bb:c3:c0:b5:98:d3:7f:1a:84:5d:d3:a1:24:b1:eb:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:EB:0A:B1:CD:04:EE:0E:22:27:2C:F3:82:24:27:3D:D2:28:18
X509v3 Authority Key Identifier:
keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5d:00:ab:48:31:7f:08:4a:cf:1e:e3:66:b0:86:37:17:4e:
b4:59:ad:3b:af:c9:2d:6e:36:2a:01:62:45:7d:85:a7:f8:7a:
5b:f4:d8:ed:4b:36:bf:74:c2:73:0e:ea:ff:de:2c:e9:ae:22:
1e:8b:14:b1:fa:e8:f7:d5:70:0f:a8:e6:58:e7:8a:45:a7:db:
84:1c:4f:f8:d4:45:16:01:73:d9:c5:be:15:27:24:79:fd:9f:
37:03:62:5d:db:ed:f3:47:50:f7:82:43:40:6f:6a:9a:db:0c:
3c:63:86:a2:cd:cf:99:3f:cc:52:ad:45:18:1a:38:67:48:97:
54:3a:ca:14:23:a8:ab:68:0f:c0:e8:43:63:98:3c:3d:b9:bf:
32:fc:fa:57:34:3e:d1:92:ea:2f:8c:b3:60:7b:3e:37:8c:36:
11:64:8b:ba:10:09:79:e6:77:89:69:82:e9:f8:eb:6d:ba:96:
9a:45:45:6d:31:d0:da:a5:07:77:b4:a1:84:9a:ab:f7:67:37:
7e:e4:71:c7:b6:ea:25:35:af:9b:aa:1d:41:64:38:66:8b:83:
56:2b:b2:a3:04:21:3a:ad:db:a3:63:9b:af:53:d2:77:44:82:
47:fe:68:ce:a4:80:2e:87:2d:07:0a:56:da:69:7d:30:4d:df:
85:b6:01:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF
QkY2QzY0MjEwHhcNMjYwNzIzMDYwNjI2WhcNMjYwNzMwMDYwNjI2WjAYMRYwFAYD
VQQDEw02YTYxYWY2Mi0xOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFlWISGFtuLDQrJGQWQp/9srfQqwKUCFyE8m2hMgIp18iTq3M/GMsFAgVMVe
hl8sHCYOp51ZU9PYozy8NzYjsYhKDOb9mL5eNhVh4kb2bSMCKF4ZscVBOngBQdgJ
LKXc8cqCF/4GLeQoLtVnvPFJilydXU1oEWoX6/WHSYctZxPOcCNz2OH6hmp7i8u4
5ZyrfYLu/vFkhk6beATGTG9KTxk56eht+DlDtVhLjgoiZqk1MMnTjLAzFoCkN4ha
cKTmd0Wpi3iIM2Xc7Eq0QCVouSbqgJvUSGkZ4G2+4FaqrP5tlt5EwA5xUg9vZNc6
u1S7w8C1mNN/GoRd06EksesazQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgi6wqx
zQTuDiInLPOCJCc90igYMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw
NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4
RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANF0Aq0gxfwhKzx7jZrCGNxdOtFmtO6/JLW42KgFiRX2Fp/h6W/TY7Us2v3TC
cw7q/94s6a4iHosUsfro99VwD6jmWOeKRafbhBxP+NRFFgFz2cW+FSckef2fNwNi
Xdvt80dQ94JDQG9qmtsMPGOGos3PmT/MUq1FGBo4Z0iXVDrKFCOoq2gPwOhDY5g8
Pbm/Mvz6VzQ+0ZLqL4yzYHs+N4w2EWSLuhAJeeZ3iWmC6fjrbbqWmkVFbTHQ2qUH
d7ShhJqr92c3fuRxx7bqJTWvm6odQWQ4ZouDViuyowQhOq3bo2Obr1PSd0SCR/5o
zqSALoctBwpW2ml9ME3fhbYBPA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:48 2026 by rpki-client