
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: +QYh++g3eXViYSKAES8OxNfeFeFiZbZjS3lLlSB/iDc=
Subject key identifier: 95:8C:62:96:02:37:DF:B8:B4:62:38:00:EB:FC:36:C2:6F:C0:3E:67
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 013C
Signing time: Thu 23 Jul 2026 07:01:57 +0000
Manifest this update: Thu 23 Jul 2026 07:01:56 +0000
Manifest next update: Thu 30 Jul 2026 07:01:56 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: oqBtACkQPaFz838IjXNpe4AVysHoXgUVS7CQ31LaLt0=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Jul 23 07:01:56 2026 GMT
Not After : Jul 30 07:01:56 2026 GMT
Subject: CN=6a61bc65-7d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:08:6a:61:bb:23:32:5e:38:43:a6:ee:40:
4e:e7:19:bb:4c:87:e6:25:ae:93:9b:84:18:87:06:
cc:76:9f:4d:ce:14:a7:e8:ea:72:89:df:bf:ec:4f:
b6:af:5c:e7:88:4e:49:8c:1b:05:34:0f:45:2a:e5:
13:5f:d5:9f:0f:a7:29:32:e8:4e:13:6e:b3:28:70:
c2:e1:dd:32:9e:17:4c:7a:a9:78:58:4f:1c:86:60:
89:12:5b:3d:e7:04:63:f9:2d:4e:08:1e:68:2d:e5:
5d:56:1b:ee:83:4f:65:45:b2:cf:5a:5c:5e:87:04:
d8:cf:ed:fa:68:f9:95:ac:71:b7:9a:5e:17:6f:b0:
2d:4c:31:ab:3a:08:35:54:7c:4b:4c:28:d4:a7:ee:
51:af:05:03:f6:70:ef:8b:e4:d9:7c:90:90:70:75:
12:24:e3:27:d5:66:04:eb:84:b2:13:d9:95:a0:1e:
34:95:80:e0:5f:b1:95:c0:de:21:55:a0:25:3a:9c:
9e:c3:11:36:c9:8a:ef:f4:db:a4:08:d8:75:bc:83:
d7:5d:11:77:1b:ec:53:dc:f2:40:bd:b2:0a:8e:10:
da:74:8b:c8:18:a1:b2:97:0e:42:c1:d6:6a:ff:4b:
e1:78:1a:78:70:d0:23:3d:38:0f:b1:a4:d4:f6:65:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:62:96:02:37:DF:B8:B4:62:38:00:EB:FC:36:C2:6F:C0:3E:67
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:52:93:ab:55:07:16:32:3b:2d:55:07:63:35:15:0b:77:
87:76:0b:2b:df:44:9d:35:73:5d:26:6c:cf:c7:f5:22:3c:fd:
ba:8a:3c:05:ad:bb:1b:bf:89:49:10:f8:7c:eb:35:d5:fe:db:
0f:ce:4e:33:15:94:7d:79:eb:fe:4a:21:a4:a6:cc:ad:c1:d2:
de:e9:73:e6:e4:cc:7d:e7:44:2a:63:aa:d9:3f:12:e0:5b:47:
b4:dc:56:11:95:18:6d:04:cb:fa:8f:2a:ee:ed:73:e1:40:07:
62:97:e3:c0:b6:66:9f:37:ed:7d:3e:94:28:6c:99:a8:2d:83:
c0:c7:11:97:61:40:4f:dd:df:02:b6:ac:3b:13:1e:ce:80:b8:
47:42:7e:81:ca:9a:7a:d1:0c:e1:06:af:62:8e:b4:63:c2:ce:
d7:e3:d5:4c:db:f2:f6:37:76:d6:e5:d4:b7:1f:6a:59:a2:c6:
63:7b:20:b1:ef:14:4f:0f:33:21:bb:18:7a:2a:5d:f6:4f:f4:
df:bd:9e:b1:51:88:a6:55:aa:94:ba:72:30:af:2f:8c:1c:0c:
25:29:ad:70:77:f5:99:42:19:dd:d4:f2:5e:7a:63:79:48:8e:
2b:ac:c2:91:dc:97:b2:5e:e5:b5:ed:30:59:f4:90:f5:da:12:
64:53:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:42 2026 by rpki-client