
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json)
Hash identifier: JBpvacDKPn1vblPO0r7c32c3co9HA+NHqnDVWUz0DHM=
Subject key identifier: 16:39:51:13:27:D4:AA:BA:67:46:A2:78:E5:A9:21:16:28:DF:5D:64
Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E
Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E
Certificate serial: 3582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
Manifest number: 3571
Signing time: Wed 22 Jul 2026 14:46:13 +0000
Manifest this update: Wed 22 Jul 2026 14:46:12 +0000
Manifest next update: Wed 29 Jul 2026 14:46:12 +0000
Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: q++riTRyQYnTyUq+D7ixltlHekHMxpflkMtaoEnnxVw=)
2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: 13OFQ4+DXlBY64hL4vDY3u0qJPTe15xHqCHPoGlCW1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl
rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E
Validity
Not Before: Jul 22 14:46:12 2026 GMT
Not After : Jul 29 14:46:12 2026 GMT
Subject: CN=6a60d7b4-c3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:f8:a1:43:de:2b:05:01:a4:85:a3:a5:29:
29:8b:22:fc:67:91:a5:38:ce:83:a2:4e:29:92:db:
09:2d:95:3f:9e:6a:f6:fb:f9:a6:28:9a:80:9b:7c:
5b:16:bf:e7:b0:10:5c:42:70:8d:43:d3:bb:51:da:
23:e4:9a:12:33:c2:c4:df:3c:a1:04:43:d2:62:73:
fd:56:50:f4:f9:75:30:e8:5d:2f:c2:e1:56:56:d9:
93:2c:06:01:af:df:53:6e:75:2e:4c:cc:ec:5b:9a:
17:0b:ed:a1:d7:74:eb:7e:01:f8:ba:3a:98:6a:a6:
23:6b:74:25:bb:e4:15:63:aa:25:f5:d9:f4:0d:7d:
62:bf:c6:aa:3d:fd:2c:d5:5f:92:70:24:d9:1b:c1:
43:6e:82:5d:7e:24:bd:53:f2:74:22:ff:50:87:5a:
11:3e:d6:f6:6c:d0:37:6a:21:34:30:90:65:36:ee:
2d:b1:45:0e:37:58:8e:84:c3:7f:7d:15:cb:c6:9d:
1f:9e:8c:39:e2:b8:f0:0f:11:04:00:24:9a:d7:84:
69:21:03:0c:c1:42:fe:88:05:12:a0:42:ad:c4:b2:
ed:10:27:59:7c:19:a5:84:d7:d7:54:e6:7b:e5:15:
27:6a:1f:32:0f:6c:8a:6f:4e:87:73:da:b1:9a:0b:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:39:51:13:27:D4:AA:BA:67:46:A2:78:E5:A9:21:16:28:DF:5D:64
X509v3 Authority Key Identifier:
keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:09:8b:e8:c8:b5:b1:d9:27:2d:f1:6b:fc:e0:8b:aa:7e:
a1:03:06:c9:62:98:4a:24:de:84:e3:35:c2:7b:4d:e2:ee:3e:
80:24:af:58:4f:c8:14:46:bf:1f:e5:3f:4c:0e:5c:46:5d:9e:
33:2a:91:2b:6c:d3:f3:bf:fb:ea:80:09:27:fe:54:c6:a4:25:
4c:a5:9e:6c:95:ec:37:56:23:00:11:e4:3c:88:5a:69:05:96:
fe:34:5f:f1:ec:57:6c:51:bb:65:7c:26:13:7b:62:e8:05:53:
fa:c3:f2:64:46:8a:81:62:d1:3d:2f:a6:e1:78:77:8f:d5:b3:
82:53:57:cd:aa:5d:ab:96:71:c6:6d:85:6b:e4:47:83:5d:ed:
43:f0:21:a7:18:92:7a:2d:f9:fa:02:ad:9d:33:67:0a:e8:ae:
97:56:54:73:f3:72:3f:f7:b1:99:33:f3:b9:1b:f2:a7:e0:b0:
fc:ea:0d:fd:fe:5d:ef:c1:e1:47:05:f9:56:d6:8d:cb:11:66:
a5:a5:76:70:d1:8b:b6:be:0f:19:9e:49:58:97:36:a8:41:f9:
f4:03:6d:9f:ee:6d:81:12:ba:75:78:ea:59:08:f5:91:ba:61:
25:7f:73:54:58:ca:df:2a:23:ad:ef:aa:b5:01:d3:92:fc:9c:
40:a1:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:49 2026 by rpki-client