
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: rISjrNli46tesmE6LtnrsIm7KUr/qlzSgs1hpRpHtFM=
Subject key identifier: 8F:6D:F4:61:21:6F:0F:DF:DF:4F:7E:85:61:D7:F0:AB:4A:92:66:15
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: 0157
Signing time: Thu 23 Jul 2026 06:48:38 +0000
Manifest this update: Thu 23 Jul 2026 06:48:38 +0000
Manifest next update: Thu 30 Jul 2026 06:48:38 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: sUglutwvGMDklV3UAOPDk/WlWM1VFbj4BRy0BsyAf1o=)
2: 900E2938699411F19844B5108747A888.roa (hash: jus1+o58HPMre2DMSzeD+2S7keAR6F7xQ/skabW/OhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Jul 23 06:48:38 2026 GMT
Not After : Jul 30 06:48:38 2026 GMT
Subject: CN=6a61b946-d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:15:6f:21:6a:ee:12:98:ed:22:b5:d3:34:
b7:31:79:2e:c8:1e:17:a6:e9:0d:24:bd:10:5b:10:
f9:0d:f0:af:96:e2:5a:4b:d3:9c:f5:57:ad:04:b8:
9d:e3:0c:67:cd:df:06:86:0d:fc:ec:7c:f2:47:35:
7b:54:d8:3d:21:c8:f0:5c:3e:0a:0e:a4:cd:55:88:
db:5a:31:ce:b5:d7:5d:69:8d:3f:b0:fd:f3:31:0f:
c6:d7:aa:78:06:e8:ee:8c:c4:bb:ba:b2:9c:1f:0d:
19:de:cb:bc:68:53:5b:ba:20:be:51:36:77:98:8f:
66:18:44:d8:a3:13:b0:d3:80:2d:33:0b:4c:22:61:
26:f6:7b:e1:e4:b4:38:ba:bf:d9:de:c1:2f:bd:4d:
10:9d:7b:14:0e:38:b8:07:bd:f7:2b:85:f4:aa:09:
e5:48:30:35:19:5f:ab:b4:6b:11:f5:42:f4:98:0d:
b1:5e:c9:bc:d6:a7:99:a0:e8:09:fe:67:22:36:85:
ea:b0:70:8b:d8:29:50:cb:be:c1:24:95:9e:57:dc:
78:87:40:93:3c:09:6d:c8:8e:b6:85:e1:95:e1:67:
35:50:be:55:73:68:b4:cb:63:d6:52:f8:6e:3c:8b:
9e:9a:f0:37:f6:b9:42:cf:58:4b:5f:ac:19:d2:9c:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:F4:61:21:6F:0F:DF:DF:4F:7E:85:61:D7:F0:AB:4A:92:66:15
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:b7:24:94:df:59:d4:5e:66:e3:ff:fd:6a:22:5f:51:44:25:
9f:a2:8b:3a:9b:b1:d2:45:ff:1d:e2:1a:0f:83:d7:a9:69:a1:
ce:a7:53:1a:ff:24:7f:20:0e:02:23:dd:d7:18:47:98:e1:0a:
d8:24:9e:c6:c7:0e:0f:6b:45:58:98:c6:cd:2e:f1:35:42:72:
67:c4:41:27:eb:41:fd:f9:dd:f2:77:f1:79:9d:d4:db:44:2e:
9a:14:92:98:3d:9b:ce:ee:2d:cf:b9:c4:d7:93:95:e1:a0:72:
e2:17:66:8b:e4:e0:aa:73:da:89:f5:a3:0d:90:04:a5:cf:c3:
a1:73:97:b1:00:de:e7:7a:83:dc:37:3b:8f:99:1c:3d:90:25:
c6:93:fa:27:26:20:91:72:5c:ea:c9:9e:8d:3f:59:fb:66:f3:
86:c7:a6:21:43:1d:37:24:f0:c2:05:96:55:a2:ce:67:0c:2b:
60:d9:d7:f8:2d:65:6d:37:fc:62:27:7a:a2:63:30:e9:44:9c:
3b:ca:31:2f:6e:e5:f8:e8:b6:03:4f:a5:5d:c6:bf:9a:8e:dd:
00:17:58:19:1b:2f:12:e5:4e:c1:d5:01:e9:83:24:78:0e:ce:
a1:b4:a3:c0:bd:e3:2e:09:5b:00:64:85:af:58:d8:f9:3c:4b:
2a:44:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:41 2026 by rpki-client