
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: SyKj4WoqzC89odPpl6lRSScy03XNtX9ECFc1Rs1NDu4=
Subject key identifier: D2:D2:E9:EF:69:D0:3B:9C:CC:26:C2:11:CE:E2:0A:9E:71:94:34:DC
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 0457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 043E
Signing time: Thu 23 Jul 2026 01:10:27 +0000
Manifest this update: Thu 23 Jul 2026 01:10:27 +0000
Manifest next update: Thu 30 Jul 2026 01:10:27 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: CgwoN+tIOOKls43APjAGgbSKygsmT9PYar5KIQRJI4s=)
2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: awz0vyeOEa2wzssGTfI+LM2VIBRt25P6nvMYDO9Rc9w=)
3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: HbDsx8wK6DOfRunn3fkb89gQPdtEbiGqu2/NfV9cVcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Jul 23 01:10:27 2026 GMT
Not After : Jul 30 01:10:27 2026 GMT
Subject: CN=6a616a03-1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:9b:5c:a7:26:9d:9d:4e:fd:26:2f:d7:27:
da:1f:5e:1e:88:54:7d:4c:54:2c:03:2c:24:6c:29:
e5:19:9d:7a:52:78:d8:7a:04:53:c0:59:ea:63:52:
05:a5:d9:40:c0:99:77:e1:a1:44:ab:ea:70:5d:61:
6d:1a:e8:37:17:da:45:26:9e:b6:79:d2:2b:68:75:
4c:73:2a:a2:4c:9d:ac:e3:ee:72:c5:d0:95:32:fa:
dd:30:65:80:75:35:5b:42:e4:ba:46:7f:a3:bf:45:
4e:0f:1b:43:1a:8d:78:c6:3f:6b:60:a6:9f:53:50:
30:94:e2:58:1c:f0:41:6e:d2:47:d5:78:21:77:4e:
90:a0:7b:c6:10:02:9f:98:72:93:2c:21:90:16:0c:
1e:a4:e1:d6:b2:8b:05:b5:d7:9e:16:71:0c:3e:64:
19:0e:6e:60:40:ea:e0:bd:31:b1:1e:4f:fc:bf:77:
f0:aa:29:7b:e4:53:bb:9a:3d:f5:32:6b:ec:fa:ee:
6d:6f:eb:42:01:b1:87:8f:33:fa:c0:a3:28:56:77:
9d:65:3b:83:5f:95:ef:b4:c9:c0:6e:95:49:0a:20:
0b:53:f5:50:ab:24:99:49:ea:58:8b:39:5f:54:57:
05:d7:56:d1:db:d1:f2:57:68:28:a3:a3:4e:1d:1f:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:E9:EF:69:D0:3B:9C:CC:26:C2:11:CE:E2:0A:9E:71:94:34:DC
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:a7:9a:5f:c2:cd:b1:f4:30:4e:12:ed:74:6f:33:a0:38:32:
6b:c8:8b:f0:b3:cd:1b:5a:9f:b2:34:d6:4c:71:47:e1:81:7a:
3f:26:a5:16:69:19:01:c3:f8:48:c7:02:e1:a4:75:b6:97:d8:
41:ce:c9:3b:e9:fd:4a:38:a1:b9:87:6b:a6:4e:70:27:5e:6a:
9a:49:d1:de:e2:7a:2e:18:54:ee:5b:4a:b9:51:6b:73:f4:0c:
20:32:34:19:43:94:2f:26:eb:9f:24:c2:d4:6e:b8:cd:7a:ba:
62:85:0b:8d:17:17:1e:94:de:0b:a0:f4:a4:44:40:db:2c:2e:
08:d8:6c:c4:24:78:50:97:56:dc:75:9f:0e:68:7e:ee:37:0c:
22:48:b2:59:5a:48:dd:10:05:2a:a4:28:57:75:ee:3d:c5:21:
9f:98:11:f2:b3:8e:9a:28:74:46:c0:19:47:f3:08:0a:52:76:
25:73:81:42:7a:1f:82:b5:29:98:f4:ee:11:fb:09:8b:3b:06:
18:29:2c:40:6f:c2:7f:bb:13:1e:7d:53:a5:c8:8e:1c:17:cb:
0b:db:97:a4:d8:c3:d2:b9:03:12:2f:a7:e3:dc:82:fd:bf:64:
17:16:b8:c1:ed:41:2d:57:d2:a2:5a:b9:24:a5:fd:80:76:39:
f8:34:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:12 2026 by rpki-client