
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier: 72dEayNOcG6nDv5lyjD382N2M1OFKtyb86r62qKky08=
Subject key identifier: E1:B3:05:6D:82:66:BA:B3:18:8A:0A:8E:60:3C:37:81:80:97:0C:38
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number: 0776
Signing time: Wed 22 Jul 2026 22:13:45 +0000
Manifest this update: Wed 22 Jul 2026 22:13:45 +0000
Manifest next update: Wed 29 Jul 2026 22:13:45 +0000
Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: nawA4Ylhq0tmBATuTXEZ++dLtUhjWxxWV/arMZoAcuE=)
2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: atWWdhdNCGzw5vFDKmVi5w9vnS6VXFuLxeYuDlcE0MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Validity
Not Before: Jul 22 22:13:45 2026 GMT
Not After : Jul 29 22:13:45 2026 GMT
Subject: CN=6a614099-41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:01:ce:4f:e0:fe:b4:da:2a:e8:64:fb:ad:
4c:db:ee:3d:b7:3f:6e:cc:c7:dc:1c:1e:cf:d1:8a:
1a:70:c6:89:e5:73:cd:dd:5f:07:2c:3a:c3:cc:e5:
cd:71:2e:c9:16:45:5c:01:03:10:d0:4b:4b:0b:14:
df:9d:8a:c0:82:68:20:cd:2c:e1:40:0f:ae:98:5c:
0e:8b:43:52:09:85:94:f1:b1:75:27:89:99:29:c0:
b5:5d:6b:f1:fe:af:95:c6:06:06:88:77:44:27:c5:
81:2d:11:33:6a:d1:da:b0:05:2c:32:6a:2d:2d:76:
30:58:c2:ed:11:09:35:7e:4f:e6:51:11:16:c1:d1:
b6:cc:9d:fb:2a:92:7a:9b:4d:10:9e:2b:ba:60:25:
09:d8:03:93:95:7d:91:09:97:72:7a:50:fb:06:d4:
80:39:47:28:a7:13:c2:c7:ad:83:92:10:2b:6a:4d:
6c:ca:2f:f8:3c:11:ad:dc:0a:3f:c0:0d:93:2c:ff:
c4:fd:11:49:eb:9d:7e:eb:a0:28:18:7b:af:9a:7e:
23:75:a9:54:a2:7e:bb:c2:e9:da:72:6d:39:11:d4:
b2:c5:c7:39:67:d1:17:4b:55:44:ed:9b:03:0a:79:
a5:66:f1:9f:7c:0c:e4:d7:0b:e4:29:8e:24:d5:44:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:05:6D:82:66:BA:B3:18:8A:0A:8E:60:3C:37:81:80:97:0C:38
X509v3 Authority Key Identifier:
keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:ab:3e:43:bf:43:c3:fa:c1:6f:99:4b:a9:16:a7:d1:5b:
65:15:c1:a4:7d:ce:3d:e7:5b:ff:3c:64:b1:65:9c:e8:43:e1:
27:a2:57:ad:ab:2b:d5:c7:fa:42:fa:20:17:16:5b:ae:8c:76:
52:60:5a:72:21:c7:b2:f3:40:4a:a9:39:19:e6:ca:62:de:06:
89:77:1f:dc:e3:be:f4:f3:29:74:85:51:a9:ec:27:ef:f7:46:
c3:04:a4:bf:57:51:61:09:5d:bd:4f:7f:7c:22:d8:bf:8b:60:
38:7a:c5:55:84:2b:63:67:b8:a9:b7:66:5c:30:59:fd:77:e5:
fc:20:22:36:24:47:b8:1e:84:9c:a8:a0:ba:ec:f4:2a:76:06:
be:43:ce:06:a4:34:89:9c:ea:5a:b5:67:4d:4c:d5:1d:9a:fc:
de:36:8c:44:a5:ce:fe:3d:d1:88:a0:10:7d:78:32:0d:14:6e:
0a:7d:02:7e:31:28:cd:ed:b2:5d:e0:73:63:bf:97:d4:eb:1a:
6c:51:20:f0:27:d4:43:67:e2:47:8d:e2:e1:32:1a:b1:ee:eb:
f6:42:c6:6f:a5:b2:26:1c:ca:0d:b5:fb:f4:90:68:44:84:c2:
48:48:e8:29:7c:d6:20:09:2d:fa:a8:fc:83:8c:65:e9:01:84:
75:f7:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:35 2026 by rpki-client