
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: lXZoubSJFzuguWKH4E4CeKgKK+9ejCfVr/kQdE/0BZw=
Subject key identifier: 40:11:8D:63:94:1A:BB:27:22:A1:69:F1:35:0D:09:82:3A:9D:15:4E
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 0247
Signing time: Thu 23 Jul 2026 03:40:52 +0000
Manifest this update: Thu 23 Jul 2026 03:40:52 +0000
Manifest next update: Thu 30 Jul 2026 03:40:52 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: 8Ma+sfB6w4V7PNqhNN+/PWgCNvVI1+W+SFamzXJ/vSo=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: ntXVrABTYDs7hsbPUUZm6yiRHJzXaf9fF6++buw87GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Jul 23 03:40:52 2026 GMT
Not After : Jul 30 03:40:52 2026 GMT
Subject: CN=6a618d44-74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:82:20:42:23:64:54:06:9f:9a:c4:e0:05:
0e:79:3b:7f:9f:70:a6:83:19:46:b1:b0:5c:e4:f1:
00:9d:2a:f3:3d:34:a0:c5:f3:07:b1:e6:43:89:df:
bc:95:b4:bd:38:b1:e6:3f:03:2b:ef:da:39:67:25:
c2:e2:11:e3:69:2d:a3:89:28:0c:24:9b:e0:53:84:
27:3c:79:c0:b5:f7:bd:e9:a3:46:ac:2e:d1:96:26:
d2:2d:bf:b5:87:d4:8e:0d:2d:0d:55:3e:8d:69:aa:
75:49:88:8f:fa:20:48:e0:c8:3e:81:56:63:45:c1:
79:bf:9a:e7:09:cc:d0:df:3f:2b:50:74:41:4c:ea:
61:05:c7:93:56:80:aa:06:65:54:c6:4d:bc:5a:d7:
65:07:b0:63:12:09:b9:43:fb:8c:8e:48:d3:3a:aa:
fd:a9:25:bf:f5:05:cc:4e:fe:50:03:18:a6:77:84:
f5:06:4a:a9:3e:88:b4:6b:96:0d:1f:19:7f:b1:f5:
1b:81:db:e2:a8:6e:db:bf:b7:f3:89:b0:a4:b7:65:
98:5e:4b:be:99:cc:46:d8:b3:56:b5:4f:67:50:c3:
90:ed:99:73:1d:53:32:a5:82:ce:a8:e3:8a:7d:bd:
44:d0:1d:14:18:2c:47:f7:ee:04:24:18:60:0a:d5:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:8D:63:94:1A:BB:27:22:A1:69:F1:35:0D:09:82:3A:9D:15:4E
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:24:c6:69:1e:33:1c:8c:2d:91:ba:4f:87:24:89:9b:de:
10:68:61:a0:e8:40:e3:df:97:a6:c6:6e:2f:ab:d9:de:57:80:
d4:07:47:0b:5d:76:18:e1:4b:78:ae:81:d6:41:cd:6f:08:11:
16:12:eb:c0:4a:fe:4e:24:42:c1:9a:d2:31:1b:de:87:8e:78:
44:0d:04:a0:5d:ca:71:3f:d5:9c:6e:c7:cf:c0:8b:f2:03:26:
1b:3a:47:f9:b1:67:78:0e:9e:96:5b:fe:d1:19:cf:15:5f:0c:
da:2b:b2:62:4a:d7:f9:91:67:ed:4d:24:3f:c5:d0:38:48:f6:
f1:4e:b0:89:1d:e1:0d:d7:c5:45:f5:61:d1:e8:2a:b3:99:ff:
36:29:18:98:45:4f:84:74:31:e1:a8:51:21:a8:e9:a2:67:0e:
bb:2f:ea:c1:97:36:f9:c8:c1:4a:3d:dd:53:7b:fd:38:52:fb:
46:5d:72:8a:a7:99:bb:df:cf:f4:b0:f6:0a:63:2d:eb:34:9a:
16:2a:4d:7a:04:04:0c:96:ab:0a:ae:cb:56:c7:73:78:13:d8:
3f:50:d5:fa:40:0d:2d:a8:dc:2d:1d:00:3f:a6:47:0b:24:c0:
70:f3:61:29:21:38:22:f5:33:07:fd:bd:79:37:de:97:bd:e4:
65:dc:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:08 2026 by rpki-client