
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: ctg6ubJR/AWaMSpJre1zXozv6cxOTZBaW0Efa7A4/gM=
Subject key identifier: AA:41:75:D5:6A:3B:42:60:37:81:15:88:80:BA:E7:C1:91:6A:A5:51
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1D46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1CEB
Signing time: Wed 22 Jul 2026 16:16:40 +0000
Manifest this update: Wed 22 Jul 2026 16:16:39 +0000
Manifest next update: Wed 29 Jul 2026 16:16:39 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: pC0+tP4KHkk6/1taUFEl0COIY8Z1DDMY9FWDVNrEUBY=)
2: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU=)
3: 0754E1A6115411F19A223E75263D8C67.roa (hash: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=)
4: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: YdIG+LX9/nSnlUWidUhwdiQq+gtN7y6hQuASQmVjG5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7494 (0x1d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Jul 22 16:16:39 2026 GMT
Not After : Jul 29 16:16:39 2026 GMT
Subject: CN=6a60ece7-5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:30:97:6d:ae:b1:37:a3:2d:89:be:12:1f:
19:9b:ca:56:35:ba:8d:3f:61:1b:83:3e:21:9f:aa:
5b:fa:12:99:1e:1f:a8:b7:d9:ae:af:11:2e:3b:90:
a5:bc:51:ef:ee:5e:d4:54:16:3e:9b:8d:98:64:fa:
c3:44:84:65:2c:c8:03:e3:f5:9f:9b:26:40:ce:05:
72:4a:2a:0d:8a:b4:c5:75:d9:ed:60:05:76:b5:b1:
d6:73:6c:3a:e3:3a:5b:7e:94:86:e0:d7:d5:41:a3:
9f:48:a5:9a:42:a0:1a:1a:55:c5:0f:61:0c:8c:02:
e6:32:b4:8c:50:e9:fd:02:2a:3d:41:25:97:e6:b3:
de:a9:2c:73:49:a6:16:90:73:6d:b0:15:2c:6b:11:
14:66:e0:65:ef:cf:79:8d:08:d1:a4:a7:7a:a6:85:
c3:c7:8a:d2:36:29:66:62:58:2b:af:df:47:c4:bb:
c6:6e:00:82:75:3f:7a:fc:ee:99:c8:79:06:a3:7a:
39:92:f3:ae:61:70:a4:25:26:58:bb:3f:15:78:b5:
19:54:0d:65:8f:14:ff:bd:52:91:d9:97:e4:26:74:
3e:cc:9f:3c:d8:ad:2a:0b:0e:de:74:de:8b:73:f7:
ef:23:3b:79:70:40:b2:b2:37:cc:53:90:15:78:01:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:75:D5:6A:3B:42:60:37:81:15:88:80:BA:E7:C1:91:6A:A5:51
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:f0:16:80:cb:af:47:c9:cf:62:5e:66:1b:63:25:eb:99:
2a:db:00:7a:6b:bf:db:28:82:e5:14:bb:ac:a7:11:f5:b1:5e:
97:37:17:b6:84:ab:58:1e:cf:e7:b4:d3:d0:cf:3b:91:82:86:
45:30:b4:f9:20:5c:ab:e2:af:15:9e:d6:24:4c:6c:47:a5:58:
2b:1b:15:5f:93:28:a3:a9:f4:40:95:de:3d:e4:eb:90:2d:5c:
59:41:81:23:14:40:3b:1c:a7:86:ad:97:7b:0a:54:16:47:64:
37:ee:e8:5e:f0:0b:19:14:08:dd:22:28:e0:13:9e:cd:44:a5:
4e:2b:e5:bb:23:85:7a:41:7a:f1:3b:c5:ce:62:a0:6e:3a:be:
e6:72:e9:e9:07:c2:b4:1a:d2:c0:6b:5c:c1:97:46:ff:35:4d:
a4:fa:23:fa:b5:81:dd:9a:79:bf:6d:21:21:72:e8:c7:05:52:
42:0c:88:44:79:f3:e3:7b:ef:f9:e3:2b:83:8b:c2:f7:bd:1e:
1c:e0:f7:7a:95:55:f5:2c:b6:17:2f:48:e0:e0:13:9f:4a:35:
41:51:7c:ab:8f:9b:d1:87:81:c7:c8:29:94:9b:6e:b9:e7:50:
3b:6e:09:15:20:3b:8f:02:df:f7:ad:3a:a2:0e:5f:8c:9b:cc:
77:2f:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:13 2026 by rpki-client