
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json)
Hash identifier: B8c+6KBQbul/rdHTjMPoa8Zyqf5yqcZthfWzFo8lICk=
Subject key identifier: 25:F0:40:CB:AE:07:2C:48:AA:79:6D:3B:A4:39:41:FA:F5:B9:19:56
Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
Manifest number: 9C
Signing time: Thu 23 Jul 2026 09:12:33 +0000
Manifest this update: Thu 23 Jul 2026 09:12:32 +0000
Manifest next update: Thu 30 Jul 2026 09:12:32 +0000
Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: tOd+5ay3dMSTWlxi4zBQ3PeEP1ys8JQUqVEG3hTSdS4=)
2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: X4RiwJfU/AWIqnRXA1GtRFWmRdCHp9Hw0fFZqv0xXWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Validity
Not Before: Jul 23 09:12:32 2026 GMT
Not After : Jul 30 09:12:32 2026 GMT
Subject: CN=6a61db01-de5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:dd:15:51:17:ec:db:86:15:85:fe:b9:94:
f8:9c:11:cc:ed:1d:10:28:d2:04:4c:a8:09:3e:e6:
d7:e6:c7:e6:39:59:2e:d4:85:66:5d:2c:b5:74:57:
ea:94:13:2c:a4:f5:b9:71:90:c2:b8:d9:6a:43:6c:
00:b8:70:b8:6f:a0:c4:90:cc:4d:2e:4c:a9:87:61:
77:46:ea:1d:d7:b1:39:cd:db:b1:1f:a1:ba:cb:6d:
d8:83:68:a5:04:9b:dc:f0:57:21:05:76:d4:ad:01:
a5:cb:c1:9d:3a:13:13:e0:3c:22:9b:f8:5c:70:71:
9f:8d:e8:93:4a:ee:54:72:54:57:84:b7:6a:69:e9:
34:25:66:ee:48:fa:b8:bf:8b:aa:36:55:77:bf:6b:
94:76:d6:6a:19:ae:23:4f:83:d3:bc:26:90:0b:16:
16:ee:32:4f:b4:c8:64:dc:2d:12:63:2b:e3:42:12:
df:37:fe:79:5d:f8:f8:0d:1d:50:f3:f4:c9:d6:05:
21:9d:9d:47:9f:17:56:be:c1:05:e6:de:0e:7b:7d:
78:b3:fa:7c:28:79:22:75:c9:2e:b8:1f:f0:6e:13:
4a:eb:77:1c:e2:ea:b0:40:65:67:99:4f:8c:c7:85:
f4:9d:17:5a:59:ac:50:d6:f2:be:64:a7:e3:85:64:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:40:CB:AE:07:2C:48:AA:79:6D:3B:A4:39:41:FA:F5:B9:19:56
X509v3 Authority Key Identifier:
keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d3:1d:95:eb:28:7c:88:1b:18:3f:ad:c9:99:f5:5d:ca:28:
4e:37:18:91:df:3f:98:54:ca:4f:bd:6f:48:62:96:3c:8d:6f:
d5:80:05:ff:0d:12:d9:b5:2c:06:ef:d8:97:63:33:db:9d:5b:
63:1c:82:9a:32:2f:fd:5e:a1:05:94:fa:0f:ed:f4:4e:0c:07:
e1:ae:e0:dd:84:50:7e:c0:be:59:22:86:68:3e:88:5e:dc:f8:
66:ed:0f:39:8d:44:35:b9:3a:1b:e2:1f:97:54:5b:43:e5:46:
0c:98:f1:ce:ea:23:42:ea:21:d9:6b:fa:7b:98:6e:7a:4d:ec:
65:c7:8d:d7:60:77:16:06:e8:97:91:86:26:4a:b9:71:b1:d8:
7a:d7:50:7e:2f:47:0f:38:a2:a1:0b:24:73:f8:59:07:44:43:
82:8d:00:58:9c:91:d3:c3:e5:ae:73:46:55:e3:fe:f2:1a:04:
54:b3:4a:90:f7:00:92:2f:a9:b7:96:23:6c:e8:e0:4f:f8:96:
e9:37:51:32:c5:d2:f3:81:53:4c:ae:d2:7b:ae:76:d6:ff:59:
8a:47:af:57:46:3d:7e:02:1c:03:8d:89:f8:d9:e7:60:04:2f:
0c:89:8c:0e:fc:3a:0e:2a:d3:dc:b4:93:f2:47:e2:21:1c:87:
44:17:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:21 2026 by rpki-client