
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier: jRGcOOlIyTAWiQ2oHP10JYZ6ZuKUS7484s8nYwr5ROg=
Subject key identifier: 5B:C6:CF:D5:98:F6:68:33:83:19:6B:A2:C1:E7:51:EC:82:4E:A5:32
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number: 01BF
Signing time: Thu 23 Jul 2026 05:18:13 +0000
Manifest this update: Thu 23 Jul 2026 05:18:12 +0000
Manifest next update: Thu 30 Jul 2026 05:18:12 +0000
Files and hashes: 1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: bFwFEvHrtOfd+gzfP5V62GoL/L+b+6xBlesBKv5EwLk=)
2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Validity
Not Before: Jul 23 05:18:12 2026 GMT
Not After : Jul 30 05:18:12 2026 GMT
Subject: CN=6a61a415-9200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:e3:d6:8d:be:8e:97:c3:d8:07:99:2b:1a:
dd:30:be:73:c7:89:db:6f:89:c1:0d:b3:df:b9:82:
b7:71:c0:34:e7:ed:41:9a:87:80:c8:89:ee:37:53:
b2:1e:d2:78:08:6e:7b:e0:b9:c4:70:05:76:94:06:
2c:3f:bc:63:8b:5a:25:6b:9e:7a:dd:dc:28:f7:74:
17:cf:01:83:bd:2c:cc:08:71:05:0e:21:57:41:a2:
c6:86:32:be:49:48:8f:79:22:d9:8f:48:95:2b:89:
2f:83:2d:82:21:d7:48:0e:37:4d:05:73:ce:6c:6b:
46:d2:1b:cd:da:73:47:89:9e:e2:67:b9:dd:4a:a5:
f3:00:f6:4d:ef:9b:88:b6:95:88:11:d0:76:22:df:
05:98:7c:c5:df:88:93:09:24:b8:5a:c5:c1:78:fd:
c6:3f:c6:4c:6c:15:ec:f5:ec:12:40:05:89:8f:9e:
c9:c4:36:63:0f:08:08:0c:ad:19:7e:4f:7a:4e:54:
34:52:81:c7:50:fd:d8:54:47:7c:5b:d7:b7:49:00:
ce:43:7c:05:b4:1b:23:cf:49:80:44:77:79:bb:c9:
02:c1:0e:1a:06:80:06:b1:6d:28:91:a4:e6:d8:16:
d3:36:f0:cb:00:54:dd:b5:a4:5c:5a:fd:95:b1:5e:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:CF:D5:98:F6:68:33:83:19:6B:A2:C1:E7:51:EC:82:4E:A5:32
X509v3 Authority Key Identifier:
keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5e:9c:f1:f9:bb:f9:08:c9:16:47:1d:d6:6d:2a:fc:12:da:
cd:10:9f:0a:c7:50:a7:10:d7:7e:ae:fb:5f:3a:69:4e:97:58:
40:e1:ce:86:a9:ee:36:52:41:cb:4c:86:e6:b1:64:b9:5a:04:
bf:c0:7e:d3:09:8a:12:14:60:c7:7c:69:60:f1:49:71:91:a6:
de:16:fd:50:4f:c1:b5:76:ec:5f:53:de:0f:48:1b:4c:52:a0:
99:9f:99:04:03:3d:48:09:22:83:c5:9c:0e:94:55:5a:50:e1:
21:6b:73:f5:dd:e6:ce:f0:d5:3f:c4:a6:3a:b3:6e:55:de:43:
bf:eb:27:79:c2:ee:f6:b7:8d:2b:18:d3:f8:0c:bd:3e:11:8e:
59:ca:d0:4b:e0:03:27:0d:02:a7:2f:9b:94:16:9d:bb:66:d2:
02:76:83:3f:c8:91:f0:3b:33:37:1a:85:38:c2:52:f5:56:e3:
f5:60:87:39:c9:6d:38:d6:31:aa:ad:38:4a:df:aa:20:8b:2c:
c0:b3:8a:0f:b0:30:a5:06:b0:d2:c2:11:6b:25:13:58:bf:13:
ea:2a:cb:e5:82:e2:6e:1a:3a:17:f2:9c:38:de:4b:71:51:f6:
95:e6:a0:14:c2:12:50:d2:3d:b8:b0:19:0f:7d:a1:c3:37:75:
7d:62:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:22 2026 by rpki-client