
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json)
Hash identifier: gStEihKvCXg4OPQjaHIsRWqu1fTxF2spsxtwnxREHc8=
Subject key identifier: 6D:A9:F9:91:07:E7:79:75:7B:65:03:F1:D6:39:07:3D:AD:F0:F4:88
Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
Manifest number: 71
Signing time: Thu 23 Jul 2026 09:48:10 +0000
Manifest this update: Thu 23 Jul 2026 09:48:10 +0000
Manifest next update: Thu 30 Jul 2026 09:48:10 +0000
Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: OKPjZcKs9FiMQcAlKNO7ds28Lq8+bIx7PlnKTxyrkFg=)
2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Validity
Not Before: Jul 23 09:48:10 2026 GMT
Not After : Jul 30 09:48:10 2026 GMT
Subject: CN=6a61e35a-47a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:2a:0a:d1:bd:2f:c4:e0:f0:fe:be:f0:c7:
d7:0d:dd:64:f7:0d:c8:bb:cd:96:9a:8f:51:06:62:
30:52:9c:e7:66:a8:d5:1a:af:28:35:29:af:f6:51:
76:3f:07:2b:24:23:b1:2e:da:07:44:e9:64:13:aa:
94:74:3d:e4:70:60:71:83:b1:8d:12:7e:ba:8f:6b:
e6:42:dc:e5:b0:1e:f7:eb:2f:73:b2:ee:9f:5f:46:
d8:95:62:57:de:7d:19:39:98:ab:94:f3:c9:9a:8b:
7b:10:6f:4b:31:35:b2:e5:d7:3e:b1:7d:7c:10:11:
9f:30:45:76:f1:8b:06:dd:86:8c:11:ce:60:98:8a:
e5:46:05:9c:0c:ef:39:9c:97:a6:72:0b:e2:48:eb:
d6:ed:f8:ae:f9:18:7e:0c:b5:ff:b8:d1:9c:2e:59:
d1:44:50:e4:74:37:f8:0b:1a:73:2c:db:08:1e:c4:
c9:b1:cf:d5:47:7a:d9:e4:19:06:43:90:80:55:8f:
04:2f:f5:6c:90:e3:68:f1:af:60:6b:42:b0:c2:b0:
f8:c2:1f:9d:03:9f:d5:31:fc:a1:bd:b9:d4:60:49:
79:36:6a:7f:23:24:98:6f:8c:82:70:c0:5a:f1:f5:
89:f7:7c:e1:84:a4:1c:fe:83:71:ed:4e:b3:a1:4f:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:F9:91:07:E7:79:75:7B:65:03:F1:D6:39:07:3D:AD:F0:F4:88
X509v3 Authority Key Identifier:
keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:47:37:8a:3d:bd:20:5c:86:52:15:78:ae:9c:15:bc:ef:fd:
c9:f5:b4:87:ec:8a:c6:ac:75:44:a8:44:86:5e:39:4e:a6:68:
bf:38:ec:b4:54:9c:7b:74:1c:46:5c:ed:7f:36:04:e5:bb:2a:
2d:74:23:ed:b6:61:fe:eb:5e:f7:2a:07:eb:93:1f:83:29:b5:
80:c4:53:32:8d:9c:05:8c:03:ac:19:41:f6:96:10:9a:e4:d4:
7c:8a:8a:76:bb:cc:3a:ab:6e:11:da:7b:4b:82:cd:ea:71:d5:
11:2c:bb:5a:cc:c5:67:88:aa:64:23:23:ce:86:15:95:9e:f3:
87:e5:f6:11:53:6e:bf:9e:f5:f9:fd:75:99:88:6c:67:f8:79:
42:b0:ba:95:a1:00:91:ff:08:e9:52:83:21:05:9d:b5:12:39:
84:6d:91:ea:a1:43:4b:f3:c4:a2:3e:1d:b9:81:3c:c9:ed:f8:
8b:9d:bd:e5:3d:e8:62:d0:8c:7c:af:06:8d:47:90:b1:f6:11:
9e:74:88:5d:c0:78:48:97:11:03:98:3d:97:c4:3f:b8:42:cc:
f4:51:eb:fe:1d:e5:4c:09:ca:41:12:e2:8b:2b:db:6c:85:ee:
fc:dc:ce:72:06:f6:24:3a:e7:eb:fb:05:da:96:aa:93:46:48:
b3:0f:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:22 2026 by rpki-client