
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier: Wuf57TVh02hjZqjR1WOCdpbpAsVPrjBGZQUPgyy5O7w=
Subject key identifier: 89:3D:F0:F6:4B:75:9F:38:A6:6E:6E:3D:C2:45:A4:53:E4:CC:A0:53
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 35FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number: 35A0
Signing time: Wed 22 Jul 2026 14:17:38 +0000
Manifest this update: Wed 22 Jul 2026 14:17:37 +0000
Manifest next update: Wed 29 Jul 2026 14:17:37 +0000
Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: 1Y30VmAuhu6/Y6eYGV90GYi2do9DHuIzR+/i8o8eQkY=)
2: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
3: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
4: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
5: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
6: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
7: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
8: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
9: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13818 (0x35fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Jul 22 14:17:37 2026 GMT
Not After : Jul 29 14:17:37 2026 GMT
Subject: CN=6a60d102-96bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:05:01:8f:e0:db:b1:f6:aa:07:e1:6d:f8:
af:b2:c0:a4:54:9c:41:cb:4b:6a:5c:8f:29:a6:79:
d8:f9:62:64:07:d3:09:5d:50:75:28:10:b9:d8:88:
f7:a7:13:6b:ef:a1:b0:78:15:46:cc:04:be:a9:4b:
5c:32:be:8c:00:3e:90:d8:fb:41:92:85:05:b9:b7:
17:9a:ab:62:ee:d3:0f:50:23:40:0c:77:be:63:92:
86:1b:f4:45:8b:04:c5:99:99:c6:ac:99:ed:a1:be:
d0:93:c6:e1:95:ef:e5:64:4e:54:d2:ec:19:24:45:
05:17:b7:55:e0:c4:7c:45:1f:63:f3:d0:0f:02:e7:
0e:d5:cd:06:2a:43:ae:47:ef:2c:7f:31:ad:c8:52:
42:fb:22:99:85:94:bf:bf:f7:88:48:74:3c:e2:83:
52:23:25:54:f9:b5:5d:03:ca:4b:97:1b:7b:b1:df:
f6:b4:ff:c5:aa:3d:d0:7b:ab:c3:cc:e2:c9:67:a6:
57:88:f3:da:dd:4b:a0:73:50:78:5e:90:f7:ae:26:
0f:8c:19:67:82:d2:28:af:2d:82:98:96:c5:c9:7f:
1c:e9:05:0e:43:d5:a1:b3:15:29:8a:50:61:bc:3b:
1b:88:c5:b6:ca:04:2a:6f:71:1d:ed:f1:68:01:d1:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:F0:F6:4B:75:9F:38:A6:6E:6E:3D:C2:45:A4:53:E4:CC:A0:53
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e9:70:30:40:63:70:d3:be:f9:30:96:76:ea:51:8d:f0:16:
37:fe:99:c8:87:bb:6b:d1:6d:3a:fa:d7:e9:66:6e:93:d8:68:
6d:53:9b:46:97:c9:5e:36:55:7d:a6:63:e1:d4:3b:dc:d1:47:
19:80:a4:f6:51:3f:ff:a9:e6:48:db:33:5c:b9:8e:a5:95:81:
9d:4b:ce:62:e5:8a:09:ba:3c:cd:ac:f0:35:36:26:20:16:c7:
f6:70:77:9f:d9:05:03:a0:34:93:e5:6d:e9:b1:c9:b7:95:a8:
ab:b6:65:24:2d:70:01:e2:56:a4:e2:23:1d:ee:7e:6d:f9:95:
93:d2:dd:ad:b8:96:02:cf:41:26:44:2e:ef:56:86:fc:90:30:
f4:68:5a:07:5c:27:95:00:86:99:b4:6d:e5:b3:1e:ac:d8:0c:
6f:c1:ea:de:31:90:d5:c1:c9:61:54:dc:dc:1a:39:b9:b7:b2:
4e:92:97:02:61:81:a3:60:24:e2:d3:6f:56:2e:bd:b3:25:74:
4f:80:4f:12:23:9f:7f:d3:ce:98:5f:65:29:02:e9:63:e4:33:
26:2f:4d:b9:1a:62:ac:29:09:bf:9a:c5:f9:c7:10:f8:ba:03:
24:fc:a4:9b:74:fd:19:07:b3:e9:ef:f4:cc:0d:d1:18:df:a3:
a9:01:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:28 2026 by rpki-client