
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json)
Hash identifier: pz1guzzJyD28jpanFKjNl5ES6kDvvG0Oi3X9e97zk9c=
Subject key identifier: DE:18:7C:BC:30:44:33:4D:EE:D5:8E:1D:F3:A6:3E:BA:5D:72:8E:85
Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
Manifest number: 0265
Signing time: Thu 23 Jul 2026 03:27:12 +0000
Manifest this update: Thu 23 Jul 2026 03:27:11 +0000
Manifest next update: Thu 30 Jul 2026 03:27:11 +0000
Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: hWPBUQob8A13icvwEX9Hckx3tXnmik0JTz5Rta6wXzQ=)
2: 01E26EA86ACF11F191659B0D6B47A888.roa (hash: kM+Vu69NRQ5mEE07A5gTkC6P9QeS9+lMcrdBxgPLcxk=)
3: F081B8F86ACE11F18C007A026B47A888.roa (hash: YDmE7noThzwCREvZQ5J7wO7N+9DX5rqBychNTHFT42A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Validity
Not Before: Jul 23 03:27:11 2026 GMT
Not After : Jul 30 03:27:11 2026 GMT
Subject: CN=6a618a0f-6338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:a8:27:2d:44:dd:5e:88:dd:86:89:40:24:
e0:d9:f9:65:15:a4:85:8f:6d:ac:30:62:7f:9b:df:
b7:40:dc:50:c2:0a:23:01:dc:d3:a0:4c:b6:32:ad:
da:c2:f7:60:e2:5c:4a:6c:32:59:16:85:6b:fe:04:
65:6f:28:79:10:9e:67:24:41:b1:47:70:9f:f5:f9:
fc:d0:9b:79:2e:74:17:f0:75:f5:60:96:1d:f4:c4:
fb:b7:a7:4b:7c:e9:ba:7e:30:df:d2:51:9b:d0:13:
35:31:4b:12:10:26:0a:1c:ff:30:2e:eb:ea:af:09:
06:e9:65:94:fa:fa:5a:44:39:4d:80:fc:82:74:68:
7a:50:ac:8f:34:19:4e:be:04:b3:27:29:32:0e:c6:
e1:b0:35:9f:e0:5d:a1:74:c2:82:1c:77:21:2c:bd:
3b:78:e7:7a:4c:e8:49:9f:f6:f4:bd:dc:4e:c7:ef:
94:93:bb:0d:db:b7:69:ff:9a:7a:34:3d:7e:61:83:
e5:74:81:9a:88:55:d1:06:cb:51:15:1a:07:fc:60:
92:15:d2:2f:54:ea:df:4c:62:b7:ed:d3:c9:08:1b:
fe:0b:6c:57:fe:8d:02:f1:24:cd:1d:65:fb:c4:63:
ba:42:ef:68:f3:54:d2:65:0f:40:33:1d:b3:a6:48:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:18:7C:BC:30:44:33:4D:EE:D5:8E:1D:F3:A6:3E:BA:5D:72:8E:85
X509v3 Authority Key Identifier:
keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:e3:84:83:ed:3a:d7:de:2e:ee:dc:4e:f4:dd:5f:eb:55:
f5:62:ec:a7:4e:72:84:f1:fe:f8:2b:42:ed:65:d1:36:c5:e3:
e6:b7:49:09:3e:d9:d5:34:3a:79:89:7d:c4:69:f2:ff:5c:84:
66:67:1e:ed:00:60:70:45:77:f3:cf:0a:93:a6:ed:ef:d5:8a:
88:7d:63:fb:f6:3a:fc:d5:ff:62:b7:21:e8:d9:66:b8:77:ce:
9c:f4:ab:ae:da:db:29:36:30:90:14:86:95:95:28:b3:79:8e:
19:7c:40:3f:e9:06:a3:c3:5a:c8:b8:66:76:59:08:eb:b6:4a:
e8:eb:d5:74:fe:d5:31:8d:de:89:ff:17:28:54:0d:02:97:16:
f9:be:70:18:1a:fc:5a:8d:bf:f0:5a:cb:52:40:87:36:d7:4b:
72:a9:73:9d:8b:eb:31:80:ba:00:58:f2:a1:e8:7e:f6:c2:43:
5a:45:75:78:40:7c:63:9b:5c:9d:a5:55:9a:cd:cd:4a:37:c3:
49:68:83:a6:33:e9:ac:ca:ac:4f:f2:c3:27:d3:48:a5:53:d6:
67:89:68:44:a2:67:18:a3:ff:05:49:2b:62:6e:09:bd:ea:ad:
07:e1:00:3a:77:c8:04:8d:25:04:b4:dc:d4:b5:04:23:10:41:
3c:fd:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:37 2026 by rpki-client