
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: Xyrr+Hp0BVPIwMEvA3j/JMHszEqu2V04VZ6eiCDaHBw=
Subject key identifier: 10:E4:42:88:A7:EE:9C:C3:91:7E:50:66:DD:62:9D:E7:B3:40:50:51
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0475
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 0461
Signing time: Thu 23 Jul 2026 01:03:18 +0000
Manifest this update: Thu 23 Jul 2026 01:03:18 +0000
Manifest next update: Thu 30 Jul 2026 01:03:18 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: E5GlgR9ZHAksagWegAPNIFX0Qp6B9AIi3/aoy5Dw0rA=)
2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Jul 23 01:03:18 2026 GMT
Not After : Jul 30 01:03:18 2026 GMT
Subject: CN=6a616856-0e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:d6:a0:14:67:49:27:7a:a2:7a:a5:a6:c9:
6a:7c:6e:0c:01:a7:07:a3:b0:aa:61:18:3d:f7:6d:
f7:a1:c3:fc:14:49:c5:99:d0:6a:ed:ec:fe:34:94:
5b:30:e2:79:7c:56:65:a6:a0:47:45:5d:4b:49:41:
39:22:94:8e:8d:16:94:fd:18:e9:2f:02:22:76:8d:
29:85:c0:83:c7:64:db:a6:c7:55:ed:bf:6d:2f:f3:
e3:7f:0d:9a:33:d6:20:a9:3e:1e:81:43:27:73:52:
8b:34:b6:72:3f:26:18:13:60:f9:26:bb:bc:e9:05:
74:45:28:26:b0:b1:f6:69:80:0b:bb:2c:f6:fc:74:
40:13:5e:cf:f4:92:c6:ad:1d:84:01:0e:ca:d8:35:
9e:42:4b:9f:2c:20:19:42:7a:18:93:91:f7:dd:14:
2b:4a:5e:05:e9:13:21:51:d8:e8:42:ea:4c:b3:d2:
db:33:10:45:78:be:ae:de:75:56:16:f5:20:1d:96:
b9:f6:91:62:6c:3e:7d:6e:71:8d:bf:91:57:6e:f7:
55:e2:3f:40:19:89:46:01:c7:fa:9d:3c:2c:93:6d:
ab:b0:9a:2c:32:d3:6d:15:84:d8:40:be:7a:76:5b:
22:54:be:5e:36:b1:7c:9e:62:7c:32:4f:ff:9d:d5:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:42:88:A7:EE:9C:C3:91:7E:50:66:DD:62:9D:E7:B3:40:50:51
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:17:24:b1:a1:f6:22:5d:76:0a:01:c2:58:aa:fb:ba:d3:
5f:7d:69:aa:11:df:71:37:7e:0a:0b:45:a2:cc:51:38:87:a6:
c4:d0:82:37:07:70:cb:90:86:4b:30:cd:6f:06:e6:45:6f:4b:
6c:cb:31:bf:f3:ad:68:a2:09:93:30:cb:cc:e9:23:d4:2c:bc:
17:e6:c1:1f:ed:5a:c2:79:70:d1:99:c8:97:2c:50:d0:69:5a:
53:65:42:eb:46:61:73:bd:7b:da:32:65:6f:8f:2a:95:c4:ba:
28:05:52:f6:d5:92:4d:4a:76:63:1a:e9:4b:2a:40:13:15:45:
f4:91:a4:bb:4e:8c:e0:b3:ec:c8:57:1e:b0:4e:6b:d3:59:ca:
dd:33:79:00:dc:3e:54:94:c4:60:08:07:24:ac:c5:4e:96:7b:
13:07:ec:64:16:12:ce:8d:3d:7b:b7:41:43:ed:17:43:46:55:
65:b2:a1:e4:76:2e:20:c8:aa:32:0e:d4:11:03:89:4b:08:a2:
ad:ae:ae:1b:81:f1:66:20:ba:b7:9c:2d:2d:be:11:fc:b7:55:
d7:88:71:c5:21:17:d6:6b:c4:b3:93:68:0d:35:f6:ac:2d:5e:
f7:d9:41:51:c6:21:12:a9:7e:14:69:98:ce:75:0a:99:31:ff:
65:0e:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:39 2026 by rpki-client