
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier: U0rU5MJhFCI9eREicBIWH9YTqQY57WBAJ3R8C444oNg=
Subject key identifier: DB:93:6B:8A:9E:4E:FA:2D:80:6F:B1:EB:E0:09:67:11:D9:46:A8:16
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number: B2
Signing time: Thu 23 Jul 2026 08:56:56 +0000
Manifest this update: Thu 23 Jul 2026 08:56:55 +0000
Manifest next update: Thu 30 Jul 2026 08:56:55 +0000
Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: Ym1a84WQ3A+egbqezWRbCNgWr5ms/u5m05KupHY5RDY=)
2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: y9XglzGcT/yANEywLEKFOF3/z+vv31d43TaG6CEceQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Validity
Not Before: Jul 23 08:56:55 2026 GMT
Not After : Jul 30 08:56:55 2026 GMT
Subject: CN=6a61d758-381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:03:8e:c5:11:34:f2:12:3b:a1:ee:35:10:
de:6e:b4:50:6c:6a:bc:7b:6c:e1:dc:59:4c:a0:55:
71:88:7f:a1:7d:86:cc:df:a8:b4:d5:0b:c8:86:b0:
40:6d:70:d5:98:70:55:7e:cd:b9:ff:c4:a6:3f:c5:
3a:95:02:44:a6:bb:ea:07:83:28:63:c7:ec:87:84:
7b:c4:e7:df:e0:b7:84:79:82:c8:26:ac:64:c0:c5:
fd:d6:a5:df:95:ce:96:30:50:9a:fc:96:b2:d0:b7:
60:61:c8:51:72:33:c9:61:74:de:ab:a7:30:e2:1f:
73:7a:5c:7a:dc:89:06:f1:8a:b5:1a:a3:cd:ac:90:
df:00:34:6a:92:1a:40:cd:aa:76:6a:cf:b3:88:b7:
7c:a8:70:79:7d:49:44:be:ce:d6:48:43:0d:a8:85:
3e:0c:03:a9:63:5b:e8:8d:3c:e1:36:3e:7d:99:5f:
89:81:70:7e:9a:5f:71:72:aa:cd:ce:31:35:9a:51:
1d:23:6e:a0:f3:25:d4:9d:57:65:c2:2e:a6:2a:02:
d4:03:1c:d3:34:3e:a9:33:72:ad:de:ea:48:d5:62:
fd:fc:b4:4e:c6:6e:17:b3:e7:00:a6:66:91:1d:45:
70:c1:9b:47:43:91:54:46:c4:9f:07:59:dc:80:06:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:6B:8A:9E:4E:FA:2D:80:6F:B1:EB:E0:09:67:11:D9:46:A8:16
X509v3 Authority Key Identifier:
keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:88:e6:f1:2b:5f:0f:af:ba:cc:7f:a0:01:9d:04:cc:ae:
18:93:9d:8a:0a:eb:2d:5d:ad:2f:31:a2:aa:5e:e3:db:b8:b9:
ee:8e:74:2e:70:29:ec:30:77:ea:43:e4:a3:13:af:91:d9:b3:
f2:b7:04:27:46:00:61:6f:28:3b:cb:17:c5:81:3b:18:9b:76:
49:3d:a6:8b:d4:ed:41:35:2f:38:86:af:d4:86:54:56:00:cc:
77:95:57:84:98:f2:32:ae:b1:ba:51:bd:79:7f:ff:de:a5:41:
0b:92:02:78:60:a5:1a:61:3a:a2:84:33:89:b0:32:65:a9:4f:
ec:76:a8:60:07:4a:05:55:aa:69:59:11:45:54:c2:58:09:01:
3a:04:ec:3c:1c:7b:aa:e9:5b:43:04:29:f4:22:71:29:73:e1:
73:df:94:2e:64:a8:ea:00:82:0d:91:66:83:c2:9a:3c:c2:5e:
82:83:2b:6d:ec:f9:0c:1e:de:b2:33:37:96:58:d1:fe:c8:b1:
fb:61:c7:19:65:fe:cf:45:ab:39:12:e0:e4:b8:bc:87:2f:1b:
74:ae:f1:bc:48:f0:f6:9e:a8:7a:4a:73:d4:03:c2:e2:a5:3b:
97:8f:85:6a:b1:87:7a:22:94:75:70:2e:0a:51:41:87:a9:bb:
d1:e9:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:35 2026 by rpki-client