
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: ctYWXrn/3YeB/Br84ghIkjqkPrntdsB1kyMlGOu6oqI=
Subject key identifier: 63:7F:D9:E3:86:F8:28:D7:BE:76:16:E2:D5:95:66:B9:83:EC:5F:42
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 0280
Signing time: Thu 23 Jul 2026 03:39:28 +0000
Manifest this update: Thu 23 Jul 2026 03:39:28 +0000
Manifest next update: Thu 30 Jul 2026 03:39:28 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: 2KzhlO/T2RNpY0hqVKOiB+aoahynxHNI8nbYqbR1HL8=)
2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
3: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
4: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
7: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Jul 23 03:39:28 2026 GMT
Not After : Jul 30 03:39:28 2026 GMT
Subject: CN=6a618cf0-ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:d6:10:3a:88:9b:9e:2b:99:5d:28:f5:b1:
fa:06:ed:6b:a2:54:77:95:b5:49:88:77:c8:ac:92:
e7:bb:8f:bf:60:d2:3c:43:39:09:49:27:57:da:81:
7d:e1:05:22:c5:46:db:a5:ac:ec:2f:82:6c:ec:eb:
e1:9f:57:5a:d7:51:97:83:86:59:f5:04:1d:64:ec:
ec:6f:06:71:dc:f0:ab:d9:58:ed:d7:ea:3f:f3:ac:
1c:af:ea:58:16:bf:f8:0c:19:5b:8f:19:dc:3f:b0:
b8:28:c0:13:0e:cb:8c:3e:30:74:6c:92:ab:eb:61:
d6:16:90:52:e8:e4:5b:2c:61:4c:ff:5a:b7:cc:bf:
9c:27:b9:47:05:ec:4b:31:df:41:d4:54:b7:10:fe:
aa:18:d5:79:32:93:b3:93:e8:dd:0f:4e:25:76:78:
5c:a3:33:49:f7:68:a8:52:c2:b8:e2:9d:3d:92:82:
b3:ac:38:c7:27:d0:70:eb:de:0d:a2:51:b0:e1:3b:
61:89:b4:07:42:e0:70:5b:0a:cb:5f:4d:79:86:b0:
ef:a5:49:df:44:1d:d6:33:b8:b3:b0:10:13:0f:a7:
c9:d2:25:68:05:67:c4:ea:29:5a:8b:9f:9c:4c:6e:
ac:80:be:49:28:21:08:b0:7e:41:14:39:c3:5d:de:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7F:D9:E3:86:F8:28:D7:BE:76:16:E2:D5:95:66:B9:83:EC:5F:42
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:db:1f:1a:4f:a5:ae:03:ed:07:ce:16:68:2f:be:34:a5:fb:
b3:2e:25:63:e7:32:a7:50:f7:a8:be:3a:cd:a3:4b:32:53:3b:
fd:52:09:b5:7b:33:fe:4b:64:e2:86:fe:10:93:5f:20:8b:e4:
da:f5:b2:18:47:b6:07:ca:28:53:8d:bc:24:80:ae:3a:f7:3b:
fd:38:fa:d9:91:a9:50:1e:e0:84:48:6a:7c:f1:89:9b:6a:a9:
11:6b:b6:0a:ce:87:a5:f1:75:6c:53:ce:15:24:3f:78:f5:55:
ec:c9:0e:1c:d5:67:15:31:c1:e3:57:c4:66:80:d9:33:c4:57:
c8:4a:7a:da:b8:65:4c:f1:a9:45:72:c6:28:8a:53:f0:97:cb:
f0:78:71:93:e5:9a:7e:fc:b1:b7:03:b0:af:25:f4:af:ba:19:
58:2d:46:01:ea:22:a4:4d:bc:8b:29:44:0a:43:54:0c:d3:04:
e4:61:ce:ec:39:92:5d:66:bc:43:d9:17:af:40:2e:83:9e:db:
b9:5a:aa:0e:83:01:f0:09:47:cc:f9:70:be:88:66:ac:43:9c:
b5:ce:1d:c5:19:41:d8:ea:dd:83:7c:60:a1:da:b1:0a:c2:6f:
16:ad:f4:55:53:3e:e3:b7:4b:ef:27:b8:78:57:6a:fb:b3:e6:
83:f2:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:42 2026 by rpki-client