
$ rpki-client -vvf rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
File: cIW1tFSazbW2wnBMhbp4h2D4iic.mft (raw, json)
Hash identifier: pEIHAxqjlKZTFehBpdyDcXpWkvI/U0vIpABqF/Oexas=
Subject key identifier: 93:B3:6D:8C:4C:AE:D8:02:28:01:8A:1A:65:D1:53:F5:FF:BA:11:A6
Authority key identifier: 70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
Certificate issuer: /CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Certificate serial: 0C62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
Manifest number: 0C58
Signing time: Wed 22 Jul 2026 19:00:57 +0000
Manifest this update: Wed 22 Jul 2026 19:00:57 +0000
Manifest next update: Wed 29 Jul 2026 19:00:57 +0000
Files and hashes: 1: cIW1tFSazbW2wnBMhbp4h2D4iic.crl (hash: FC79KM1PWyIyRAwa7E7bgVof5bK6UDR5biE/MQhm8vI=)
2: 002DDDC22B9D11EA92F3094CC4F9AE02.roa (hash: bcFMpQtRC/rqeGP9esVeD25xYCU2sXQbGEoW2r6Fpqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91722A3, serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Validity
Not Before: Jul 22 19:00:57 2026 GMT
Not After : Jul 29 19:00:57 2026 GMT
Subject: CN=6a611369-b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:cb:c4:9d:10:49:a3:a3:72:51:80:5a:99:
f1:66:12:ba:46:72:50:7f:b3:09:5d:15:ed:76:ce:
f2:5c:a8:62:a5:87:5b:ea:b9:f2:db:97:65:67:5d:
d0:e9:c0:e7:fd:a2:38:33:42:1b:91:4a:cf:76:e1:
58:68:d0:d9:97:02:04:f5:06:f0:38:ec:fc:c3:58:
39:f9:95:4a:99:c5:03:a7:6f:67:cb:6b:95:38:c1:
f9:ad:85:fd:5f:1f:72:5a:78:45:fd:c0:36:33:63:
ff:13:15:41:ce:00:d7:ec:52:26:ec:18:ed:8b:c7:
32:82:f1:17:14:b0:20:ad:10:cb:b3:60:e8:d6:be:
cf:a9:b1:7b:25:20:f9:56:ac:66:11:43:bb:49:e6:
4a:85:9b:34:6a:fa:ef:0c:56:8c:b2:07:3f:6e:70:
46:38:2b:b9:32:23:70:06:4d:36:ee:4d:28:dd:d5:
e8:79:b5:51:e3:20:c0:88:52:e4:b2:6d:e1:ff:14:
96:42:4f:93:8b:fe:dd:1a:3f:1f:4a:ee:bc:7b:e0:
be:f3:1c:b3:84:3d:c7:c6:8b:13:19:2a:a2:d7:ed:
f1:f0:d2:e9:fb:00:64:e4:6f:6b:af:df:b3:1c:26:
a1:7a:93:aa:a3:ba:5c:70:32:a0:91:6f:43:b7:03:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:6D:8C:4C:AE:D8:02:28:01:8A:1A:65:D1:53:F5:FF:BA:11:A6
X509v3 Authority Key Identifier:
keyid:70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:31:b2:1d:4c:c5:66:8e:d9:a1:e8:59:96:ae:15:7d:76:
0a:f1:93:4a:fa:f5:15:e0:32:21:ac:43:ef:d6:b8:dc:d6:11:
0c:c4:c4:de:e7:3c:3f:f9:0d:d7:c9:b8:a0:97:18:e8:7e:62:
c2:c6:2a:03:d2:d3:74:3a:c0:d8:ad:07:98:fa:26:91:16:78:
f0:18:0c:34:e9:c8:61:c7:dc:dd:87:f3:d9:a7:e9:ea:d2:a8:
da:ba:7b:c9:4f:41:19:fa:cf:be:ee:8a:10:53:6a:c2:dc:61:
f1:3b:2d:94:06:ce:65:7d:0a:20:7d:92:b7:09:e2:15:3f:a8:
aa:21:41:e4:1a:72:8c:11:3b:11:a8:e1:22:c8:5e:c8:e4:f5:
b5:bd:c5:6c:eb:b3:bb:e3:ff:9c:ab:e2:b6:be:a0:c0:64:57:
a2:66:31:6b:15:6e:64:66:9b:9a:4d:e8:ec:40:d8:77:d0:47:
04:e1:1e:ca:f9:45:99:21:f6:62:90:ab:0c:2d:30:c4:1c:ab:
13:11:e3:25:00:45:e1:db:61:d2:02:d0:ee:59:38:d3:4a:72:
8c:d0:a7:d3:57:5d:ed:4f:6b:cf:fe:00:a4:7c:b8:71:41:78:
35:20:70:a0:ca:48:7a:1c:28:4a:4b:2c:14:f6:ec:d9:5c:75:
f3:3a:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:00 2026 by rpki-client