
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json)
Hash identifier: INg46nAFxg7N5ULsmyvzl8ZhIuJvRN4uVtO1eo8FOHg=
Subject key identifier: D9:FA:0B:C0:69:84:B7:AC:75:FE:D3:46:85:84:ED:F9:49:86:89:F9
Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
Manifest number: E6
Signing time: Thu 23 Jul 2026 08:14:47 +0000
Manifest this update: Thu 23 Jul 2026 08:14:47 +0000
Manifest next update: Thu 30 Jul 2026 08:14:47 +0000
Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: 0E6WqUColx8rrleSr/S3eJQKI9RuvxdWVFd3C3hjcwE=)
2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Validity
Not Before: Jul 23 08:14:47 2026 GMT
Not After : Jul 30 08:14:47 2026 GMT
Subject: CN=6a61cd77-07ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:7b:85:80:42:a3:f5:c1:9a:86:cd:32:d7:
d3:85:ad:c1:70:7b:42:48:7e:ba:6a:c2:4f:84:7e:
b3:d0:b2:c3:de:b1:c7:24:dd:f5:29:21:fa:70:24:
18:bb:5a:50:2f:e8:2f:5b:10:49:fc:a8:b0:8c:aa:
fb:ef:51:c4:9e:3b:4a:dd:e2:95:68:0c:73:35:5c:
de:72:23:6d:a3:0a:33:e4:38:28:61:68:18:bc:3a:
c2:a5:85:0a:49:01:0a:19:cd:eb:cb:22:e8:8a:b0:
02:0a:e3:62:50:69:0e:1c:71:45:6a:87:66:f4:0d:
75:e0:6c:21:6a:90:91:51:76:33:e3:4f:73:01:85:
e6:ea:e7:dd:5f:d9:13:47:ae:66:7a:e9:66:ae:cd:
14:e6:7a:86:27:f8:72:93:4d:5b:b2:0a:7d:40:f3:
e6:7b:3e:ad:83:a5:ce:92:c3:7a:58:e4:e9:87:dc:
b1:e1:99:20:5f:54:f4:8f:b9:43:50:03:4e:e5:b4:
77:39:c8:7d:f5:f1:35:f9:be:e9:d2:5f:8e:44:20:
80:e9:15:89:3e:cc:d1:05:18:6f:a5:15:c2:a3:85:
b8:a5:7d:55:3c:35:17:e4:89:be:fc:bf:34:3f:2a:
73:30:d6:86:7f:cd:03:5e:6d:df:1e:a8:20:42:96:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:0B:C0:69:84:B7:AC:75:FE:D3:46:85:84:ED:F9:49:86:89:F9
X509v3 Authority Key Identifier:
keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ca:14:02:a5:28:23:e9:03:d5:d5:1d:c8:2e:1f:ba:f2:0c:
50:fe:7b:7e:f7:2b:76:01:7a:c7:2b:38:bc:7f:e1:5c:c3:4f:
07:c0:9f:d5:de:cc:ce:c9:20:bd:25:39:97:c9:e7:5f:1f:f8:
1e:da:d4:0c:27:5b:cd:21:e7:b1:e7:35:11:e7:e0:dd:56:76:
89:4e:cc:4b:b0:cb:3a:18:b4:7d:a3:70:3d:96:9b:0c:23:a6:
7e:e6:7b:a3:24:76:0c:07:bf:29:33:b5:c0:11:dd:cd:98:9b:
18:e5:e2:86:63:2c:6d:eb:3f:86:ea:e9:19:0a:c8:c2:2e:6d:
b4:46:e3:6f:88:a8:33:9c:0f:d1:9d:bf:32:00:c0:e3:be:a5:
c0:32:2d:41:64:cf:7e:65:04:f2:07:a9:87:26:c1:27:cf:93:
53:c7:ac:19:64:c0:5b:4d:9f:a5:d0:b0:03:4e:93:9a:8d:91:
29:86:62:13:74:1f:f0:40:e3:cb:cb:05:f7:5c:be:da:5b:85:
47:31:4a:42:f1:2b:ce:b5:25:5c:bf:2e:67:ef:55:c7:18:6a:
ef:b4:aa:46:46:14:98:40:fc:d0:46:b1:bb:24:06:27:e2:0c:
44:a1:0e:b8:81:87:9d:18:77:b7:ed:b8:ef:f7:25:98:17:99:
50:0a:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:54 2026 by rpki-client