
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: ovsabxFEOglkmghJRk/dtiAaZ2ikzjzENRnyb4fIoZ8=
Subject key identifier: 58:1E:13:9F:AE:45:35:4D:3B:82:CA:60:66:F9:09:08:11:9C:A9:D4
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0D9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0D80
Signing time: Fri 24 Jul 2026 18:13:21 +0000
Manifest this update: Fri 24 Jul 2026 18:13:20 +0000
Manifest next update: Fri 31 Jul 2026 18:13:20 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: JGu2Yto28n8mxG6z9aJ9qUGxWCQVe1wNnF1U7try8fw=)
2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
3: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=)
4: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3482 (0xd9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Jul 24 18:13:20 2026 GMT
Not After : Jul 31 18:13:20 2026 GMT
Subject: CN=6a63ab41-f472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:70:31:91:67:76:15:7a:3a:63:c2:b8:44:
fd:50:c0:d6:b8:33:75:49:b4:c1:98:ea:b6:cb:0a:
24:f0:1d:3d:4a:72:30:17:8a:80:f0:ca:fd:82:1b:
04:b8:f4:93:40:b3:60:40:37:a2:29:d5:6e:82:44:
8f:69:ed:10:55:65:57:d1:dc:c5:e2:b1:aa:0a:d3:
e8:18:24:20:c7:04:e1:e6:5b:ee:1f:cd:6f:dc:81:
ab:8a:95:06:18:3f:ed:d6:79:dd:f5:69:cc:73:96:
99:65:f6:3b:fa:4c:30:13:4a:09:b1:bb:b6:28:0c:
68:c1:c0:2d:ff:85:78:35:65:68:b1:30:bf:66:3b:
33:25:64:ea:27:ca:05:43:76:73:fb:95:f0:7d:ea:
4a:9e:a4:26:88:2c:f6:35:67:4f:8e:73:d0:58:07:
a9:ec:6a:d1:15:1c:43:4d:f9:96:e7:a2:bd:18:f4:
8e:35:a0:5c:f3:68:9a:6b:ee:49:d2:4d:61:cc:75:
4b:4d:a4:db:5a:ad:7d:f2:c5:73:fe:87:d5:0c:3b:
41:cb:48:e7:f2:88:79:9e:4c:50:30:d2:5c:5e:50:
5c:ee:9a:e9:67:3e:e8:d8:36:66:7f:7e:a4:fd:9b:
86:0d:ad:bb:7e:87:30:aa:cb:82:05:25:97:e0:2e:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:13:9F:AE:45:35:4D:3B:82:CA:60:66:F9:09:08:11:9C:A9:D4
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c1:17:16:55:b0:13:89:37:d0:b6:4a:9e:f6:ca:89:2f:7b:
83:92:87:68:8a:4d:81:7f:82:68:49:83:3b:79:8c:4c:b2:dc:
07:38:17:43:e3:57:67:d4:28:ee:c2:1b:fb:86:49:fb:b9:b0:
ff:f3:25:04:2b:b6:49:80:b0:62:55:e7:ff:79:17:aa:98:cc:
07:5d:49:be:64:9b:be:c5:b0:00:df:af:57:a6:44:6a:91:7b:
2d:45:0a:0d:54:75:da:86:bf:7e:98:44:bb:8d:d0:43:1e:38:
c3:3d:a7:55:cd:5b:d0:3a:1e:97:58:84:17:4a:76:ca:a8:e7:
14:b0:10:fc:42:61:9f:3a:ae:ca:17:59:08:e4:e9:0c:58:4d:
f2:0c:68:72:b0:ec:cb:6e:c0:46:39:a1:cd:91:58:1f:5d:b7:
4e:c5:1a:2b:4f:22:7d:69:e3:a6:68:9d:61:6f:a1:14:4f:ab:
e4:86:20:9e:05:a8:fe:7f:a8:dc:75:b0:36:13:f9:aa:e1:d4:
8a:1e:5e:10:38:a3:10:a2:1d:bc:0b:11:45:59:7a:83:63:16:
ff:00:ab:86:13:3c:72:81:fe:12:31:fd:39:23:81:b8:af:44:
a5:b6:18:ac:6d:5e:92:ee:ee:1b:2e:9b:ef:d0:d2:c7:cc:1b:
43:88:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:07 2026 by rpki-client