
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier: zXsuKBYAnMtP6hQlSVDwskuYMX8Q3DCFGKjViIInTp8=
Subject key identifier: FE:7B:B5:E7:7D:9E:17:67:3B:42:81:EB:49:E8:CD:1E:3C:53:8B:F6
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number: 0109
Signing time: Thu 23 Jul 2026 07:49:55 +0000
Manifest this update: Thu 23 Jul 2026 07:49:55 +0000
Manifest next update: Thu 30 Jul 2026 07:49:55 +0000
Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: Gv3vOVDxY6cPkIJTSg3nKL8b4wS4s7dYtuhuTotH/Ao=)
2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Validity
Not Before: Jul 23 07:49:55 2026 GMT
Not After : Jul 30 07:49:55 2026 GMT
Subject: CN=6a61c7a3-2e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:6d:6f:87:c4:d1:aa:ae:85:9d:3e:61:6d:
4a:46:f7:cd:38:53:da:79:82:bd:a5:37:37:4b:d7:
43:29:25:2d:37:7d:70:68:4f:85:18:24:8f:a8:82:
68:90:15:84:28:10:80:17:c8:d8:81:10:4e:f3:89:
28:b1:63:59:e2:0c:72:76:fa:cc:be:29:4a:5f:ab:
10:f3:d4:f7:49:f9:2d:4b:a7:2f:49:fe:ec:83:73:
73:9e:56:22:f2:80:da:ea:af:e9:82:60:92:67:0c:
16:7c:45:82:33:d8:84:d3:82:95:6f:d2:3e:e8:a8:
5e:09:6d:43:f7:68:9f:fc:e0:e5:33:ac:5c:bc:0a:
2a:81:8e:43:f8:f8:77:e3:8d:90:63:e6:fb:7d:00:
d7:7f:e0:4b:4e:ca:2c:c2:2d:7f:52:38:e8:9c:7b:
49:63:cc:ae:be:a5:a8:b6:25:c4:00:bc:a0:7b:8b:
cf:ec:24:c3:2a:ca:c8:9f:55:f9:0e:13:af:38:99:
69:0c:12:32:0d:8f:49:20:66:94:11:c6:06:42:32:
4a:5b:bd:7d:88:b6:ba:01:07:bd:33:6e:34:8c:43:
da:ab:be:07:f2:8f:23:6c:0f:7c:ae:0b:34:0f:b7:
be:f4:ff:1a:01:bf:28:f1:e9:42:b2:a2:88:85:35:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:B5:E7:7D:9E:17:67:3B:42:81:EB:49:E8:CD:1E:3C:53:8B:F6
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:87:66:91:83:89:33:ce:a2:7a:62:62:02:54:13:bc:f5:
7c:30:62:8a:85:48:a8:14:b0:68:f8:52:ce:ac:59:96:b3:fd:
19:44:45:8a:4d:4f:a0:de:8d:bc:ef:f8:a4:1f:6b:d0:67:41:
d8:d4:32:e3:02:65:82:7e:b0:50:d0:09:53:29:5f:cb:82:0a:
ee:ca:37:db:f8:85:4f:67:ef:5c:dc:a5:38:05:2b:8b:e1:17:
b4:47:b4:e1:0a:11:3c:9d:09:84:5a:6a:47:e5:05:62:0e:dc:
87:34:8b:51:f4:98:fd:fc:32:1b:a1:4c:71:fe:31:f3:3a:00:
2f:30:7b:ab:e2:0d:5c:f1:f7:9a:f4:9b:59:86:24:95:aa:d5:
a6:8d:d4:06:f7:b2:db:be:11:e0:8e:69:a7:0b:24:e1:9c:ac:
66:e5:bc:fe:a8:22:e9:41:a9:d9:39:a1:fc:32:92:e6:11:e6:
24:36:71:bb:0f:e1:8f:e0:d7:cd:26:ad:79:d0:09:ba:33:6a:
c0:c7:90:bf:71:1d:c3:2f:e4:39:03:63:94:ee:ce:fa:b0:a5:
8f:41:e8:3a:b8:17:d4:6d:00:a1:ac:30:e4:b2:b5:b1:c9:d7:
90:2e:17:03:dd:7f:16:49:20:98:43:58:b3:c3:8b:27:84:e8:
d7:6d:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:26 2026 by rpki-client