
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: aEyeNHquOXppSmI7CpjweFNGV2HPdK8tmvaKJinih7Q=
Subject key identifier: 65:AC:2E:E3:41:0A:E9:39:A1:56:8B:40:68:EA:1B:6F:6C:1C:7B:82
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 0497
Signing time: Thu 23 Jul 2026 00:51:09 +0000
Manifest this update: Thu 23 Jul 2026 00:51:08 +0000
Manifest next update: Thu 30 Jul 2026 00:51:08 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: wEQgt64awTNMDzVvY5A9I7CGULnvANlK9evnV6vFxfo=)
2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Jul 23 00:51:08 2026 GMT
Not After : Jul 30 00:51:08 2026 GMT
Subject: CN=6a61657d-a789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:59:2c:d2:4e:89:7d:99:90:84:11:8f:48:
d8:7c:a2:65:02:9d:1a:69:fd:c8:49:15:1c:5d:a2:
41:1e:07:a3:e2:83:87:de:0d:66:dc:1d:24:ae:2b:
14:e5:de:c9:39:4d:8c:91:17:9f:7f:3d:1a:2c:95:
26:6f:d0:c8:f3:fe:44:bc:04:d5:8e:73:88:e4:6b:
71:ca:65:94:22:f5:18:bd:37:27:41:06:25:b5:6c:
6f:8b:e1:92:f3:3c:4d:e5:b2:04:1c:af:d6:11:2d:
87:b4:d4:4f:ee:c3:70:c2:2d:70:8e:25:07:ec:e1:
a7:c1:37:d5:30:5c:c9:dd:15:41:ba:58:b2:a7:6f:
30:83:7d:b7:c6:5a:ed:0e:53:bf:0a:34:30:1d:4f:
db:4a:c9:40:e8:ac:77:58:c2:12:06:d7:2c:cc:36:
10:c5:ab:2d:0f:90:4b:70:45:ef:38:c0:29:20:ea:
08:bd:9e:61:c5:bf:97:f3:d3:a1:d1:29:68:21:f1:
23:c4:c6:93:20:ff:9e:05:e2:cf:38:3c:ce:6b:ae:
8d:ca:58:12:76:03:50:42:55:2c:13:00:69:3a:32:
71:28:2a:75:e6:6f:fc:31:be:98:37:13:6a:42:ae:
84:1d:81:e2:bf:33:98:f9:85:c5:0f:9d:fe:51:ed:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AC:2E:E3:41:0A:E9:39:A1:56:8B:40:68:EA:1B:6F:6C:1C:7B:82
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:4b:d6:63:0f:08:f0:68:84:12:84:29:b3:12:0c:b1:a9:
11:6e:24:48:eb:ee:9e:60:70:82:b9:4a:9d:1e:03:8d:27:47:
90:df:82:02:f0:6d:47:a8:5e:23:bf:cd:4a:8a:03:75:39:de:
1b:81:54:0f:08:67:48:23:53:4a:2e:08:fa:04:1d:e6:1d:f2:
50:74:87:d7:a2:38:be:d4:ee:c1:1d:2a:b2:cc:42:f4:6b:da:
dc:bf:a4:09:0a:8e:f7:b7:45:52:3f:df:45:b0:52:ac:51:57:
46:ce:e4:51:e8:f7:4d:1f:54:d8:1b:1a:fa:bf:d6:37:8c:1d:
4f:bc:da:f6:11:72:8d:d6:0f:78:78:ac:ce:25:b8:07:b0:7a:
04:81:c0:0b:4b:8e:96:f7:e2:f0:09:50:07:57:9b:7f:33:35:
64:11:41:59:f0:2f:91:37:5f:b1:88:93:fe:bb:a3:20:20:ee:
35:c5:17:99:26:6c:cf:bf:f2:2f:b6:3f:49:c0:a9:23:15:fa:
7e:20:86:39:40:9f:99:b1:21:7d:0b:85:24:d6:9f:ff:cd:10:
72:45:cc:07:ce:dd:7d:97:b1:a7:be:64:be:6a:07:e4:81:98:
64:eb:52:1e:47:15:42:b0:ad:b8:7a:77:0c:20:37:c6:68:08:
99:2b:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:14:26 2026 by rpki-client