
$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json)
Hash identifier: lXMDP9CTyVOA6QIvdl3x+gS+GVRH2ETQ/iEdzJECImM=
Subject key identifier: F7:6B:63:71:76:26:67:B2:B7:C8:D7:8A:CB:AC:8E:4C:12:4A:D7:BF
Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
Manifest number: 80
Signing time: Thu 23 Jul 2026 09:39:51 +0000
Manifest this update: Thu 23 Jul 2026 09:39:50 +0000
Manifest next update: Thu 30 Jul 2026 09:39:50 +0000
Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: uChDKAAfpHKMUji3p5X4xeXsvvEPNBDeCnVny81nKhs=)
2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=)
3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 89NQPcLshXPkKgPq6c+ywAb5yirtq9AA9hqm/7FcBQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F
Validity
Not Before: Jul 23 09:39:50 2026 GMT
Not After : Jul 30 09:39:50 2026 GMT
Subject: CN=6a61e167-89a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:e2:84:cf:7c:23:a8:08:8e:e7:92:26:62:
81:60:16:35:cc:ab:52:1f:0f:e8:d8:35:8d:43:7a:
16:93:23:e5:4b:11:f1:d8:a0:ad:93:c5:fc:e2:51:
90:da:b1:36:3b:ce:c7:4b:1f:f1:c1:b5:71:e7:8b:
64:1c:55:14:07:8e:00:bd:36:59:70:a8:ab:eb:ea:
70:d0:94:66:4d:89:86:d6:c3:7c:86:01:9d:f8:3b:
dd:e7:7e:b2:2a:eb:c5:01:cb:7b:07:f5:38:1b:6a:
58:e2:92:b0:2d:d8:85:96:ce:a5:8d:13:84:9e:61:
08:be:fa:4d:33:aa:2d:48:7d:15:5f:81:fe:a7:11:
a5:f1:69:a9:13:4e:0a:28:59:ea:3c:2c:cd:c1:91:
e1:24:8e:b4:fe:40:d5:9f:66:d0:2f:90:d6:f3:71:
69:aa:97:d3:a6:35:7d:28:c0:e2:8f:b0:38:fa:b2:
fb:94:57:7e:18:2b:c2:c0:0c:0d:ff:6d:ed:3f:be:
e5:01:e6:65:68:e3:a4:ad:51:bd:3e:09:61:21:46:
b3:29:9f:33:ce:2a:e8:83:6d:64:0e:43:57:bf:06:
59:2c:2e:5c:4d:86:b3:9a:46:75:ff:87:8b:5e:d2:
40:99:76:97:cd:0a:80:aa:f7:d5:c6:6e:eb:f4:66:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:63:71:76:26:67:B2:B7:C8:D7:8A:CB:AC:8E:4C:12:4A:D7:BF
X509v3 Authority Key Identifier:
keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:cb:91:c3:4e:ca:76:e3:08:58:76:3d:f9:50:7c:75:c3:0c:
da:b0:1c:dd:33:2f:4b:57:ac:be:41:97:39:62:57:fa:aa:bf:
64:1a:fa:b3:d2:15:64:78:14:1c:6d:45:ba:4b:a4:8d:ce:6d:
dd:f6:42:28:f7:fe:1e:ae:d1:67:9c:e0:03:b3:05:b4:e0:94:
bc:af:2c:76:5d:c0:fc:aa:c5:bb:cc:8b:4a:f8:c0:7b:56:6c:
13:f5:8d:20:cc:e1:d1:d9:ee:a6:a9:29:d1:65:b3:80:a5:f5:
40:6f:5a:7a:93:4a:6c:25:1f:29:f4:43:e4:53:5b:de:18:36:
c5:2d:54:9b:21:42:7c:a6:c5:d9:02:9b:e9:86:09:c0:9b:1a:
7b:26:2f:58:3b:31:c5:92:9d:d7:78:ca:20:21:9a:1e:e1:d2:
c8:84:f1:ec:d5:c5:e8:90:b6:99:cd:7d:a5:82:68:e8:ba:85:
18:be:9a:19:98:18:ee:e1:7a:1e:b7:b4:52:2e:52:5a:c8:b6:
13:81:9c:08:ce:96:5f:49:d3:b6:18:7e:0c:69:33:9b:13:c5:
13:26:dc:7c:93:1e:2f:25:27:db:4b:04:26:aa:be:cb:be:03:
0d:93:4f:50:46:46:e9:c2:31:aa:71:0f:f3:eb:8e:12:4f:e7:
b8:7e:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:47 2026 by rpki-client