
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json)
Hash identifier: xmXsvtP3oDDh6DL80eO5PXPvjEP3jQb2MM7HmcrmQbo=
Subject key identifier: 5F:20:2C:B6:CC:29:7A:96:BF:FC:4B:CF:57:79:4C:0B:AC:08:0D:E1
Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2
Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
Manifest number: 01FB
Signing time: Thu 23 Jul 2026 04:34:44 +0000
Manifest this update: Thu 23 Jul 2026 04:34:44 +0000
Manifest next update: Thu 30 Jul 2026 04:34:44 +0000
Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: uqWKZtJvbd7c9+RD5h5wVTcMYtD6DybdQkrE2c37kpw=)
2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: /k9F9UoMVvvC6p1jgV3pWpP4PVT7CPpxGz+wVVYMTRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl
rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2
Validity
Not Before: Jul 23 04:34:44 2026 GMT
Not After : Jul 30 04:34:44 2026 GMT
Subject: CN=6a6199e4-722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:d5:e8:8b:a6:fc:fc:2e:96:60:68:2d:ae:
f3:17:1d:05:db:c0:0a:e3:68:ce:9b:87:da:32:12:
6e:03:a0:7f:d2:fd:1d:94:6a:5d:be:ad:d2:5a:55:
94:5f:5d:dc:10:c6:69:d6:57:99:73:93:07:65:72:
b2:62:bf:a8:ea:a9:fa:20:ca:06:b1:0b:79:4e:94:
f2:b5:cf:5b:58:e6:b3:e0:d0:92:5e:b5:3d:78:bd:
b3:44:31:72:8f:95:23:87:88:8f:85:03:f4:35:72:
5a:1d:31:b2:3c:42:59:97:88:ef:7a:6a:65:45:53:
81:26:97:88:ad:ae:c3:44:a7:ba:57:c0:92:39:74:
22:c9:c9:a8:1c:a8:cf:8e:78:39:25:30:06:2c:b5:
5f:39:b7:f3:99:48:aa:2f:c7:b0:76:01:d4:93:cc:
76:88:68:59:3e:93:e3:07:d5:12:ba:32:10:89:68:
c1:9f:ee:63:80:b8:88:f8:dd:26:0d:5e:10:ae:1c:
61:9e:19:db:4b:2e:40:74:d3:4e:91:06:eb:33:fc:
28:90:28:71:4d:2f:a5:b1:4d:e3:97:55:a8:07:f2:
bd:20:64:5f:76:1d:24:85:7c:3d:e3:55:56:8a:f0:
35:b3:af:bf:b0:63:43:c0:ff:12:11:60:06:ae:e7:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:2C:B6:CC:29:7A:96:BF:FC:4B:CF:57:79:4C:0B:AC:08:0D:E1
X509v3 Authority Key Identifier:
keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:61:7e:6c:f1:9a:ab:20:23:6b:b8:c4:b7:9f:33:98:59:
22:23:0a:7a:eb:d1:5b:1b:f6:69:ce:9e:02:ce:a7:4c:76:45:
f2:1c:b9:76:e5:4d:f8:6d:d3:da:c2:3c:eb:d2:d4:57:1e:c8:
02:18:08:ce:a3:7d:b4:bb:da:21:2b:65:7e:16:f1:b4:e0:30:
cc:6a:91:a9:16:ec:a6:f3:dd:7c:74:6c:9f:29:ea:91:8b:27:
e4:13:a2:25:4f:0e:f0:d8:f5:e3:92:62:48:df:44:89:1c:f3:
f7:25:e0:3f:4c:17:f0:cc:e7:af:11:7c:a7:b7:72:17:d2:a1:
ab:ff:01:b7:e1:8c:05:c7:0b:57:b6:21:35:8d:cd:8f:34:ab:
b2:ef:e4:33:17:90:cf:45:48:0c:b6:09:2b:1d:20:c9:8b:ac:
5d:b2:31:2b:b7:36:c6:41:09:e0:88:78:e9:9e:77:3f:8f:d0:
dd:90:df:f8:93:39:57:14:40:21:b2:33:4a:7c:90:4c:32:f1:
f1:30:95:05:86:33:15:30:18:aa:4f:25:41:c1:3c:97:fe:e7:
86:ea:59:94:69:da:c9:2e:83:35:88:cb:9d:2c:86:e9:1b:5a:
06:fd:27:15:5a:49:5a:1c:22:bc:2a:cd:64:90:af:4e:d2:1d:
59:ca:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:19 2026 by rpki-client