
$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json)
Hash identifier: 3Z6OjZx9PzX3E6gwz9ZE5KDifHQ2hJy7mWslkqofFUM=
Subject key identifier: 11:0F:08:34:57:EB:29:B6:70:61:01:62:2B:70:D9:E2:A1:07:BB:6B
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
Manifest number: 027D
Signing time: Thu 23 Jul 2026 03:09:23 +0000
Manifest this update: Thu 23 Jul 2026 03:09:23 +0000
Manifest next update: Thu 30 Jul 2026 03:09:23 +0000
Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: QKlnap56Tbx6BGi9QvCoo+96S8EQxz6WyA2mWod1shQ=)
2: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=)
3: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Validity
Not Before: Jul 23 03:09:23 2026 GMT
Not After : Jul 30 03:09:23 2026 GMT
Subject: CN=6a6185e3-5c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:64:c8:f8:f7:70:25:01:a3:bd:76:7c:75:
8e:07:fd:41:61:e4:d8:8d:d2:9e:da:cc:55:d3:f7:
d4:40:24:6d:c6:ce:4f:48:4f:ea:ed:29:ba:3e:db:
78:7c:b4:18:09:ab:65:d0:07:8f:7b:87:40:75:cc:
40:01:7a:22:34:24:8b:e3:d4:94:9d:df:22:9f:73:
ac:f5:c9:fb:d2:76:ca:4a:6a:2e:18:4b:f9:07:ab:
38:65:5f:30:f0:cb:7e:76:24:1b:a2:fd:e7:2a:da:
cd:03:36:3f:68:d8:1e:58:73:e8:4c:08:d1:dc:83:
c6:13:48:61:8c:7c:1c:2a:7d:d7:a6:29:68:22:e7:
4d:27:ac:6a:f3:3d:b0:49:81:9e:23:c0:61:04:e5:
51:b8:38:2b:58:4e:86:51:dc:27:3e:dc:44:5b:ce:
20:4c:9c:26:b3:a3:b2:d4:a8:14:8b:95:f0:15:b6:
21:9f:e7:83:bd:e8:bc:d7:c0:84:53:25:25:a9:89:
0d:dc:1b:50:7b:f5:21:75:4c:23:e2:00:1f:a1:4e:
24:bc:4d:d3:82:f5:36:cf:b4:9e:41:51:34:81:b2:
23:03:23:1e:54:6d:5e:39:00:16:81:a4:68:4a:64:
79:a0:8f:db:75:ed:5a:f3:35:c1:9a:a0:52:42:6b:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:08:34:57:EB:29:B6:70:61:01:62:2B:70:D9:E2:A1:07:BB:6B
X509v3 Authority Key Identifier:
keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:c3:a1:e6:37:ef:38:88:f8:40:f1:21:88:6e:0c:a4:12:
42:47:33:b0:c3:83:1d:21:d5:12:46:3d:72:e4:61:6f:b9:13:
f3:83:48:8c:39:d9:e4:2e:46:8b:c8:7c:7a:8e:12:72:44:4d:
15:e3:0d:4c:cd:a0:eb:c7:a8:6c:e7:2a:8d:c0:22:9f:c6:a2:
03:a2:bf:f0:09:6d:1b:5b:1d:16:cb:ef:f5:be:80:05:04:2c:
0d:92:04:80:26:1c:87:c1:aa:91:2e:83:0f:b8:c0:96:02:33:
87:c1:d1:2b:f4:56:1f:95:32:07:1f:b4:72:32:ef:87:33:fc:
e3:0f:5f:d9:76:b4:76:63:cd:ac:a8:ba:5d:fe:09:b9:20:6e:
42:84:5f:95:12:f9:68:97:16:d9:3d:41:f9:47:a5:be:a1:ce:
02:1a:1f:58:8a:37:7e:11:25:45:28:c0:41:a5:36:1e:67:de:
f8:38:13:e6:2f:78:5f:8f:d5:c9:20:75:fb:4a:d6:76:34:16:
f0:ff:ac:63:1b:aa:e2:fe:cb:93:b8:72:a2:f9:35:30:ca:68:
bd:18:87:f8:02:9a:98:12:0b:c4:a8:ac:02:47:cf:b9:ba:82:
3d:6a:ca:48:52:83:cf:08:34:83:84:6d:59:d5:9d:72:04:4d:
1a:a4:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:36 2026 by rpki-client