
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier: Hghku3qF0Ewiw6xAsAW1IZGmRSN/orBFO3X7WZsgdK4=
Subject key identifier: BA:AE:BF:46:07:32:A3:22:4A:78:B8:67:37:60:47:0C:2B:27:6E:D3
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number: EB
Signing time: Thu 23 Jul 2026 08:10:17 +0000
Manifest this update: Thu 23 Jul 2026 08:10:16 +0000
Manifest next update: Thu 30 Jul 2026 08:10:16 +0000
Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: 7Gs9HsOghZch2pfPFZ+4bx/vzmiUcCuijrRzD5I3lo8=)
2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: nKq89mFtdPAm1UALvKV17Saig4Y05tURAwcO6cCh6zc=)
3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: q15h8naITCmlNDgt0fcVFaL5Jg+soxRTIhbvGiyXn00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Validity
Not Before: Jul 23 08:10:16 2026 GMT
Not After : Jul 30 08:10:16 2026 GMT
Subject: CN=6a61cc68-27b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:57:33:83:f5:8a:23:80:88:89:c2:87:5a:
1c:5f:81:47:2b:78:e4:51:7f:e9:5d:15:c3:59:01:
6e:e5:87:cf:5e:06:e4:cc:49:44:2c:01:cc:21:6d:
cf:e7:dc:af:0f:ef:18:56:ff:a4:4a:a4:fb:f8:d6:
85:18:1a:45:b8:09:a6:89:7f:13:5b:a2:6d:84:ea:
ca:67:2a:82:75:0c:22:88:1e:b2:a4:50:3d:34:42:
8c:a8:ee:5b:19:76:b4:a4:1d:ff:f7:b7:54:bd:4c:
b9:22:71:02:dd:3a:3f:a2:3c:c3:04:24:44:60:d1:
91:d2:89:f4:0e:6c:91:9c:f7:d6:c5:96:c1:d3:d7:
00:d2:54:5e:e7:f6:a3:33:e4:13:e5:23:a2:76:0f:
d3:d5:6c:b9:8b:df:6d:14:86:59:03:73:97:7d:bc:
28:4d:37:31:7f:89:0f:a3:3d:30:1d:ef:8d:0a:a2:
53:28:a0:64:83:57:d6:86:29:4f:56:fd:6e:77:32:
49:e9:35:14:25:59:95:08:02:57:a5:3a:c8:1a:b5:
4c:75:17:cf:ec:b3:6b:4a:19:2e:c4:98:3d:07:ac:
94:70:45:2a:ce:af:32:7b:07:e0:7a:80:b7:3c:37:
32:88:b9:73:3e:23:9a:5b:5a:18:86:f1:02:86:48:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:BF:46:07:32:A3:22:4A:78:B8:67:37:60:47:0C:2B:27:6E:D3
X509v3 Authority Key Identifier:
keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:55:a4:8f:7a:89:a9:98:81:7a:31:98:d8:0c:87:64:65:
be:98:7b:31:f6:27:d0:1f:8e:b7:35:6c:b8:6a:1a:6d:bc:17:
29:9e:29:77:c2:07:23:6b:36:26:86:3e:ad:90:56:8b:f6:d0:
d5:d6:b3:1d:cd:50:be:73:64:7a:0a:09:48:68:a5:be:3a:9d:
7d:8f:76:8d:c5:58:a9:47:4d:7b:6a:6e:69:91:6c:40:6c:37:
a4:a7:19:e3:3e:93:3b:d4:60:94:bf:4e:6b:16:6f:44:a8:22:
84:ef:6c:c1:a6:fb:b5:7a:d9:1b:a6:72:74:01:03:fe:50:7b:
b8:45:46:b6:da:ad:6f:4c:ec:e6:86:8e:1f:9a:aa:a2:71:4b:
6c:0c:e2:c7:b8:a7:f3:61:36:46:7f:a7:80:12:e5:ed:7d:f6:
1e:6b:a8:92:03:3c:f0:9d:6b:ef:ef:f7:d8:ca:31:d7:8b:4b:
a1:b4:a7:57:b7:12:9f:af:d0:b4:e5:f1:13:bc:75:2f:9a:af:
e6:53:0a:91:6b:72:1c:70:cf:58:00:2f:40:5e:86:65:a8:b7:
35:ff:b7:26:91:35:66:62:da:cd:b3:52:3e:d5:9c:69:d1:f1:
a9:8d:2f:11:72:7a:cc:48:e0:9b:ae:c0:17:f5:b5:5d:1b:05:
f1:da:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:01 2026 by rpki-client