
$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json)
Hash identifier: VLps7sOsnDyTObjC/Bx9E9QsmUh2M4BLJKQRFjzZdzc=
Subject key identifier: C6:AB:3A:3C:72:48:3C:D4:9B:80:C3:87:28:F6:A5:17:59:77:B8:E2
Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
Manifest number: C3
Signing time: Thu 23 Jul 2026 08:53:36 +0000
Manifest this update: Thu 23 Jul 2026 08:53:35 +0000
Manifest next update: Thu 30 Jul 2026 08:53:35 +0000
Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: 0h1xDUDUOztwPzKWlzV+hsZMg2u/UX2wfsD0WOMKlSI=)
2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=)
3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Validity
Not Before: Jul 23 08:53:35 2026 GMT
Not After : Jul 30 08:53:35 2026 GMT
Subject: CN=6a61d690-9693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:4f:f6:17:7e:0f:d5:18:da:a8:cd:a9:69:
cf:0e:b0:aa:9d:ed:27:14:c8:6d:2a:8e:17:85:c9:
81:86:47:0c:4d:bd:b4:4f:bc:f7:60:ec:28:82:1a:
69:19:91:af:3a:0d:bf:2e:08:93:b6:56:da:92:5f:
cd:cd:a0:5e:71:ba:8a:32:5d:3b:14:ac:b3:8e:44:
b4:e4:3c:7b:92:b0:4f:55:57:d5:5b:8e:cc:03:7f:
d7:8c:84:95:18:bb:89:d0:e3:69:60:fe:ae:22:fe:
3e:6e:7c:99:93:37:e2:0b:2c:2d:63:bd:4c:d5:84:
07:19:a0:e5:90:a4:e1:36:2e:85:f9:bf:c4:62:fc:
60:8c:fe:f5:13:35:2a:d6:45:2c:d3:3f:42:7f:41:
26:4f:ef:4f:13:df:1c:72:4a:9e:69:37:9e:89:4b:
50:1c:cb:bc:65:5f:6b:95:d7:03:0c:f8:d6:e7:14:
40:11:79:a3:21:53:92:37:35:d2:b5:53:e1:18:07:
7c:d7:85:b6:b7:ba:c9:23:de:ba:6c:27:a2:77:44:
cd:e7:dd:34:e7:60:24:60:99:05:7d:5e:52:fe:62:
3f:2f:ab:2c:32:15:e5:4b:32:65:5c:a9:e7:3a:54:
0a:b2:df:5f:10:65:2b:f4:53:cf:63:53:cb:fc:71:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:3A:3C:72:48:3C:D4:9B:80:C3:87:28:F6:A5:17:59:77:B8:E2
X509v3 Authority Key Identifier:
keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:53:02:0b:a1:e1:15:98:c9:de:5c:d5:15:6e:6c:9d:7b:6a:
3e:ce:2a:ed:d3:07:7f:08:8e:04:58:13:0d:e1:1c:be:3b:23:
f3:d9:18:76:7a:20:5b:f1:56:8f:86:86:18:1c:ba:70:3f:16:
d8:a9:28:42:b6:74:ad:36:08:5e:42:0a:66:3e:6c:05:37:f3:
ae:74:ff:e5:99:6d:9c:cd:e9:85:4e:8c:97:5a:af:b7:31:ab:
dd:43:d4:42:4f:75:1b:3e:b5:a8:f6:c7:76:dd:23:42:b3:5c:
67:59:98:25:43:98:ab:a8:85:4f:0a:db:c8:6c:60:88:bb:86:
a9:a3:86:7b:81:e0:d3:71:bc:9c:29:ea:bc:c3:81:5c:ce:a7:
f0:56:d8:33:e5:c4:03:e5:c8:61:23:b0:08:41:dd:2e:2e:56:
8e:4c:2b:91:74:a6:63:60:73:ba:d5:b9:24:62:00:18:97:a8:
6f:be:f2:d9:e3:50:47:92:cd:e8:dc:6b:00:47:73:a0:68:cd:
28:52:2d:0c:9f:b9:22:5b:9e:e5:ae:e5:2d:de:f8:8d:2f:05:
8b:3b:a2:24:c9:04:6a:15:1c:69:c8:2e:1c:25:f7:c7:c4:68:
cc:02:82:75:00:bd:00:6b:95:d2:78:48:40:38:46:4c:39:de:
3a:1d:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:06 2026 by rpki-client