
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier: I3x3TT7cmikuG65wfp5mLllQQTcTzXCI4/7VJsk4kxg=
Subject key identifier: 72:4D:E7:07:84:F8:6A:78:76:B5:5C:20:F6:E1:10:B0:B8:1E:AC:B5
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number: 01A9
Signing time: Thu 23 Jul 2026 05:35:50 +0000
Manifest this update: Thu 23 Jul 2026 05:35:50 +0000
Manifest next update: Thu 30 Jul 2026 05:35:50 +0000
Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 0t3ZK35SzD9caXjXJs8oAc9d9oVAtytZrAvlKQ2mjF8=)
2: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
3: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Jul 23 05:35:50 2026 GMT
Not After : Jul 30 05:35:50 2026 GMT
Subject: CN=6a61a836-d21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:86:dd:54:ac:3d:3e:8d:ed:d3:19:1f:d2:
fa:1d:6c:48:3c:43:0b:f1:97:ef:39:08:33:8c:f9:
27:04:02:71:0f:75:d1:9e:29:00:2c:bb:c4:6a:be:
71:16:3b:f1:96:1d:69:9e:7d:fe:ec:82:bd:04:f8:
40:2b:41:f8:f3:dc:05:ab:11:ff:46:36:83:9a:0b:
a1:cd:c4:a2:4a:f1:29:66:8d:9b:6b:3e:16:6e:a9:
0d:10:2a:7a:5b:9a:81:ed:cd:24:15:a3:75:f2:17:
6d:f9:a4:35:49:20:2e:e1:61:d4:1f:23:2b:81:d3:
5b:87:64:be:a2:be:75:fe:3a:78:1a:6a:37:f7:39:
56:ee:e3:c2:cc:95:2f:6a:ad:78:66:93:e1:de:e3:
6c:03:04:44:17:e4:cf:e9:2a:99:30:bd:63:80:7c:
d3:46:39:01:c1:92:4e:57:54:b0:9b:59:31:39:5e:
8d:b4:d0:15:03:b9:37:80:8d:a0:55:ed:d7:e9:2a:
f0:71:b7:13:76:85:a7:2d:0b:e9:60:07:37:db:4e:
c7:06:01:8f:33:1f:19:eb:42:52:3f:97:bf:0d:05:
23:61:dc:92:f9:de:de:42:5c:f5:23:83:03:e4:1b:
65:09:d8:86:08:8b:f3:9c:b1:0c:52:aa:90:ba:ed:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:E7:07:84:F8:6A:78:76:B5:5C:20:F6:E1:10:B0:B8:1E:AC:B5
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5a:99:09:b9:53:50:73:3f:63:80:5e:47:37:47:0e:ec:0d:
d5:be:b6:6d:b0:17:77:01:95:66:de:a3:c8:68:07:ee:60:3c:
53:1f:3a:53:42:d0:13:ab:38:3f:22:4b:e6:58:86:9c:31:1f:
d1:ea:5c:79:b8:47:4c:44:03:ec:b0:fa:53:82:4d:5d:2b:6b:
aa:68:2c:52:61:fb:5a:75:48:4e:5e:1b:4a:3b:c4:f6:84:c9:
c2:e5:60:a0:30:37:37:e3:aa:58:b3:81:16:1b:e5:88:87:3b:
52:c5:21:8d:5a:b5:83:ce:65:08:05:78:85:a1:32:6e:27:f9:
a1:3a:0f:1b:87:da:30:35:de:45:a7:a3:39:77:6a:f5:fb:b2:
d7:d5:4f:44:ca:23:b1:39:8d:a7:de:72:9e:30:e9:8f:d4:f8:
ff:ab:ef:79:7a:b0:e5:50:2c:2d:e0:60:d7:54:b2:dd:4d:ab:
fa:6b:94:14:69:9f:79:94:1d:a2:fb:09:71:63:51:4a:8b:57:
b6:29:df:53:e0:d0:95:60:e9:10:88:d0:6a:7b:b1:87:9c:9d:
96:60:7f:1c:7f:3d:88:1d:c4:5d:1f:e8:61:8f:93:e0:5e:cd:
5c:2a:09:44:df:55:f2:c3:c7:2a:27:44:0f:b9:23:ef:fc:84:
d2:d3:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:39:57 2026 by rpki-client