
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier: aSVPstoolxjpJfVCisKIxmEjINc1AKAYdMVUPrYa10Q=
Subject key identifier: 99:36:52:44:60:0A:E9:6E:78:C9:A5:23:59:C7:64:DF:4C:85:25:97
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number: 02CC
Signing time: Thu 23 Jul 2026 02:21:16 +0000
Manifest this update: Thu 23 Jul 2026 02:21:16 +0000
Manifest next update: Thu 30 Jul 2026 02:21:16 +0000
Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: W2mWgYjHH1bbbeRnfNyLUUSO87BQ/atkJh/aI+kH6vg=)
2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=)
3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Validity
Not Before: Jul 23 02:21:16 2026 GMT
Not After : Jul 30 02:21:16 2026 GMT
Subject: CN=6a617a9c-4a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:3c:01:71:0b:2d:73:ab:d2:84:2a:aa:91:
e4:ba:7f:28:fb:0e:60:ca:d6:72:6e:93:5e:68:9f:
4b:3e:fd:52:27:74:dd:ab:3e:7c:f0:10:79:56:5a:
7c:43:fa:55:bf:4c:d7:6f:2a:62:c3:26:10:e7:c0:
b3:61:4c:d3:4e:66:0e:8a:b9:7a:19:cc:b5:39:98:
95:d2:63:60:2b:c8:5c:85:0e:a1:98:7a:67:1a:1a:
7c:b5:70:39:1e:32:0b:1d:61:38:54:4f:fa:87:08:
bf:0f:82:c2:27:b0:a9:25:d9:a4:de:a8:d9:be:6d:
48:79:ab:06:e8:ab:4a:87:d6:35:66:7e:3d:9f:ff:
e0:08:6a:61:d1:aa:21:59:f8:a1:16:d9:ef:63:31:
55:1a:c5:90:84:5d:e7:e2:a7:3d:cd:6b:ce:e2:0f:
71:4a:a5:b1:4f:cb:da:a1:5c:fc:01:13:03:1b:3b:
f4:6d:07:9a:e2:46:b5:6f:49:98:df:65:d3:06:6b:
22:17:3d:a2:98:89:b6:20:70:b3:83:44:8e:8c:d3:
f6:84:54:74:8a:8f:f7:97:8d:00:81:4a:7c:4d:02:
4d:11:48:62:16:2a:1d:09:52:fb:a9:3d:57:ca:cd:
ac:9a:bd:b3:ec:70:c1:6a:2f:88:8f:63:64:89:0f:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:52:44:60:0A:E9:6E:78:C9:A5:23:59:C7:64:DF:4C:85:25:97
X509v3 Authority Key Identifier:
keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:9b:b8:b7:d7:11:8c:05:76:42:c8:b8:2b:3b:74:1b:d3:
80:3e:82:2a:64:11:8e:d3:04:c1:84:38:ea:13:8f:1e:9b:63:
b7:6b:23:19:65:0a:d8:42:dc:99:93:92:7a:59:9e:ee:15:5f:
0d:d9:2b:7f:17:d9:fa:53:e5:88:8f:d4:01:ef:a2:2e:b8:b4:
c9:a2:a8:e6:9c:d8:ec:e1:e6:99:f7:39:fe:cf:11:08:c7:57:
b3:79:84:c0:56:7e:cf:05:6f:55:91:b7:dc:12:5a:0d:69:3b:
29:97:77:e4:b0:df:f7:ff:66:fd:37:c7:7c:8e:cc:59:d5:8c:
aa:42:8b:46:12:06:90:43:c0:c1:04:aa:b8:d5:d5:f9:1d:1f:
8a:dc:f7:da:8d:ac:35:a4:1b:92:54:4d:d4:af:f3:a5:79:9f:
1b:07:da:dd:31:a2:a3:b7:16:ef:59:d0:f6:56:eb:2f:e8:c6:
3f:5d:69:66:7d:bd:d6:49:74:f1:fb:db:dd:e0:7f:24:3d:8d:
5b:fb:2b:62:6f:16:14:d7:ec:cc:19:f6:9c:c0:1d:69:2f:c4:
f0:60:f8:2b:3d:a4:95:9c:14:f9:1c:d8:c2:09:5b:02:2e:d3:
a5:d7:0c:e4:39:95:f5:b8:40:d1:df:9b:9c:e3:06:56:bc:2d:
d8:11:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:58 2026 by rpki-client