
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File: R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier: DJzN+QTJJD6jcLh4ODOfjdkz9PKAb7mxfyMRV9zPmpw=
Subject key identifier: E9:6A:FB:5C:5F:47:50:7C:C4:7E:AB:74:66:21:0A:F7:38:4C:9C:D6
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial: 0357
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number: 034F
Signing time: Thu 23 Jul 2026 01:53:53 +0000
Manifest this update: Thu 23 Jul 2026 01:53:53 +0000
Manifest next update: Thu 30 Jul 2026 01:53:53 +0000
Files and hashes: 1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: O3Ckj2p7FVno5ABHQbqTVmI8NZCVyXkxQqubAWSD13A=)
2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Validity
Not Before: Jul 23 01:53:53 2026 GMT
Not After : Jul 30 01:53:53 2026 GMT
Subject: CN=6a617431-96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:ad:cd:47:e5:63:c2:70:75:8c:1b:dc:fc:
71:c9:77:ac:d8:c8:ff:12:b3:fd:3a:3d:45:51:fc:
11:66:bd:cb:51:e8:35:0e:c8:e6:23:af:77:57:71:
b0:0a:bb:02:08:f8:4c:9e:47:4e:47:c0:57:ec:70:
00:2d:de:db:2e:fb:c5:a0:52:a9:a3:27:a0:41:2e:
29:10:46:1e:dd:5f:0f:9a:3f:9c:b0:85:94:9d:7f:
d4:a8:8c:23:7f:ba:87:5b:7d:15:e8:db:de:aa:ff:
79:7c:11:f9:6b:12:a2:a3:10:3f:24:da:98:96:0a:
39:43:eb:cb:16:2c:22:29:4f:f5:14:ad:df:17:17:
67:b1:d4:eb:c3:b5:2e:8d:80:58:c8:02:90:cb:f6:
6f:83:3a:f2:bd:86:4f:9d:f9:d0:f4:7a:65:df:6e:
9e:22:6f:8c:b9:1a:ca:34:ca:d5:d4:2f:c8:3d:8a:
8d:74:e1:d5:07:4a:a5:30:b2:b7:07:b8:1d:62:1d:
d0:42:2f:e1:56:99:6e:a0:ea:cd:10:be:45:70:19:
6c:cb:3f:dd:56:70:62:64:e8:9e:7f:91:67:f7:64:
91:d9:2f:8e:4d:d1:f0:75:41:e2:74:d7:fc:e5:df:
93:e1:66:b6:86:41:ab:ec:d8:f7:e6:dd:9a:6e:5d:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:FB:5C:5F:47:50:7C:C4:7E:AB:74:66:21:0A:F7:38:4C:9C:D6
X509v3 Authority Key Identifier:
keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e8:4e:34:a6:5e:e0:d4:06:3e:1e:e4:dd:e4:a9:cb:ce:51:
a9:e4:48:aa:5d:6c:c9:4f:13:3e:f1:40:55:1a:45:f5:80:aa:
e0:e9:7d:f1:55:6f:35:77:8a:01:cd:99:30:52:6e:8a:42:a6:
e1:9a:1d:e1:97:45:a1:12:c0:30:6a:46:b0:30:f7:fa:9a:a6:
b4:e8:b3:92:53:61:ce:06:64:00:53:e7:56:15:6d:aa:c4:cd:
0e:c2:f0:a7:81:b3:a5:7a:45:d4:9b:be:0c:1c:aa:f3:07:8c:
54:63:53:93:24:6f:71:96:cc:d1:e2:c7:57:c7:cb:46:06:1e:
9f:27:52:fd:22:0b:5c:33:56:8c:6e:8b:51:e6:bd:55:89:c6:
da:ff:e8:b3:23:51:a1:af:bf:34:c6:4d:ba:d7:55:aa:85:98:
2f:db:c0:29:b3:09:6d:7b:ef:cc:b3:a4:b6:e4:62:8e:00:51:
cd:bd:0a:de:47:13:64:7b:4a:bc:47:37:b5:01:06:70:5c:a2:
9a:c6:14:b3:d7:71:39:ea:a9:ca:f6:d9:16:80:98:08:46:9e:
c3:2c:3c:c3:80:f7:04:e6:c2:2d:de:4e:a4:df:a9:aa:4f:52:
3f:fc:07:1a:25:b0:ad:a5:83:0e:0e:a7:2c:72:3f:96:cd:48:
dd:78:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:06 2026 by rpki-client