
$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: FDzqNKv9TRbefWDz3QhYuhPhHvaIiOcv5sLgU7yrFds=
Subject key identifier: 6A:08:65:55:CB:E1:AC:B5:58:75:AF:F5:EE:81:D0:33:7D:20:9B:A0
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 0237
Signing time: Thu 23 Jul 2026 03:48:22 +0000
Manifest this update: Thu 23 Jul 2026 03:48:21 +0000
Manifest next update: Thu 30 Jul 2026 03:48:21 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: bVRF5/akgCvzTmhYCqivQwmzIflPd0aifSkkcnoGQgI=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Jul 23 03:48:21 2026 GMT
Not After : Jul 30 03:48:21 2026 GMT
Subject: CN=6a618f06-2920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:f6:48:22:76:a8:ed:86:15:b7:66:55:6c:
7f:33:ab:0f:23:2c:d1:d9:dc:55:7e:1e:44:04:77:
2b:53:bd:12:a8:c8:9f:e2:90:dc:2b:3e:47:4f:bf:
79:5d:2f:02:5c:7b:2a:d1:3d:fe:cf:0d:bc:b5:83:
bf:b9:f4:ae:63:b4:55:18:d0:20:a0:78:e2:16:21:
33:42:ce:fd:ad:47:ea:36:24:0c:37:96:dc:c1:2a:
d1:95:ba:54:3d:f4:95:1e:2c:ff:70:dc:61:3a:3e:
7b:98:c7:3b:41:ea:9c:ca:fa:17:bc:7d:9a:3d:a7:
88:fc:8e:29:5b:e9:c8:d9:ce:c5:92:92:59:31:b7:
a9:5c:84:99:6f:ed:e7:bc:94:4e:09:88:57:d1:a5:
26:ab:8f:f3:21:5d:7e:6d:b2:fa:c5:12:1c:93:4c:
ae:0f:89:25:1a:6f:8d:c8:f0:b8:54:12:a3:04:c4:
91:63:b3:97:c6:b0:57:cd:5f:8a:be:64:c1:b7:ad:
53:40:0d:f0:c1:cb:74:f3:f6:58:33:95:e6:6f:63:
2b:aa:aa:2a:52:e7:66:80:01:8a:f7:da:0c:e8:41:
78:da:f6:c2:26:d6:0a:2e:15:f9:55:f8:1a:7c:0f:
2d:9f:c9:eb:af:e2:01:3e:d7:bd:99:a0:92:8a:a6:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:65:55:CB:E1:AC:B5:58:75:AF:F5:EE:81:D0:33:7D:20:9B:A0
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9b:4f:34:b8:3d:14:a9:16:19:6a:91:3f:72:55:4d:6d:77:
6a:23:4b:2a:47:d5:6a:76:3e:0a:ef:65:70:9e:66:93:a1:c6:
55:9a:7d:22:70:2b:7a:bd:8c:c4:c0:0e:83:8a:c8:86:fc:dd:
d4:e1:65:2b:f5:06:db:41:73:14:57:4a:2d:26:2c:60:b7:30:
f1:86:48:d3:43:6b:a5:bb:11:14:f9:6c:90:70:49:6c:dc:59:
b2:57:5e:6e:2e:11:2b:b0:30:28:4b:00:05:d6:87:21:44:64:
f5:8f:5c:88:e6:45:ab:67:53:fa:ac:ab:4c:ff:c9:ed:5a:5b:
fd:3f:f5:5b:4f:a3:21:53:e5:01:8d:ef:39:a2:9f:42:22:63:
95:2a:ce:70:f9:6b:75:1a:2d:58:2a:80:ce:b0:0a:74:84:c0:
75:29:34:23:70:1e:63:34:05:1c:5d:d3:f6:a0:e7:12:a3:1b:
85:4b:8f:74:9f:67:6b:c5:e9:4c:19:69:92:b5:8a:b3:f8:2c:
a5:17:88:fd:1b:b5:5c:91:f5:a9:b6:d9:f1:80:44:6b:fd:c2:
88:eb:e4:09:d5:cb:0a:ad:31:5a:5a:b6:c0:23:56:a8:ac:9e:
65:99:12:20:c9:d1:d0:51:6b:a7:ca:b3:27:8d:dd:79:59:ad:
c1:73:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:43 2026 by rpki-client