
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier: jXkSgmJ+syxPo+fbPGZaSagurBZompcSx9gD+zttuLA=
Subject key identifier: B2:6C:15:A7:8F:0A:41:34:91:99:B8:23:0A:C7:90:FB:91:48:8D:23
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number: 0509
Signing time: Thu 23 Jul 2026 00:30:42 +0000
Manifest this update: Thu 23 Jul 2026 00:30:42 +0000
Manifest next update: Thu 30 Jul 2026 00:30:42 +0000
Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: aMO0YAA38wYAfnAt6s8KKE6Xf22fWFFgGWB6bo9a+oI=)
2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: rgJw06hmsB9fncZWEsFDb5n/GUpL32l6BWCvyNuaqQg=)
3: D94FB378415811F196DB41B8CB833773.roa (hash: gXPdtCnPPAjwnP0Rk/2BzP0izBu2JHp7rkBkmk8m4yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Validity
Not Before: Jul 23 00:30:42 2026 GMT
Not After : Jul 30 00:30:42 2026 GMT
Subject: CN=6a6160b2-efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:62:34:66:c4:86:4f:61:aa:fd:12:f7:63:
58:65:72:c9:bb:ef:67:22:34:9e:8c:a4:b9:da:f3:
ab:ea:96:1e:ff:fe:4c:bb:6a:4b:26:7b:0c:a9:46:
bb:68:ee:91:4e:92:63:ad:81:ee:9c:04:e7:23:2a:
8a:04:56:ae:c7:67:bb:18:09:63:9c:d5:74:83:28:
57:1f:61:cd:b2:19:37:f9:08:1c:56:6a:79:02:18:
29:61:c1:64:46:ba:46:0a:91:b2:a6:74:b2:a0:03:
05:84:a2:82:53:38:9b:63:22:9c:76:80:c4:5d:7c:
b0:55:50:ae:57:ed:16:0e:a2:89:cb:25:e8:e8:30:
1a:4b:cb:ab:40:1b:7f:0e:d7:bf:e7:43:a4:53:f8:
c5:12:f6:ce:6b:6f:30:c4:2a:e6:1e:d1:49:f6:20:
97:20:4e:0c:1c:39:5e:24:9a:ea:49:9e:2c:a3:d5:
54:3a:3f:02:0e:18:84:6d:47:b5:95:f1:df:ad:5c:
f7:f9:7d:2c:e6:e8:86:76:a2:70:9c:86:7e:33:b1:
25:32:e7:ef:b1:63:88:1e:56:f9:1f:74:07:a1:84:
03:b2:9c:e7:5c:51:82:59:9f:6e:44:c7:2f:88:be:
6e:5e:b7:6e:97:8f:5b:92:62:2d:e2:bc:0a:88:6d:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:15:A7:8F:0A:41:34:91:99:B8:23:0A:C7:90:FB:91:48:8D:23
X509v3 Authority Key Identifier:
keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:f8:c2:e5:1d:4e:b6:9e:ae:6c:87:5d:c4:79:e5:8d:29:
76:54:86:63:a3:d2:83:8e:03:94:3c:0f:5d:c7:83:64:73:67:
36:23:48:22:46:f3:db:4e:dd:2b:9b:8d:76:61:42:85:ab:de:
9e:df:d5:62:27:2e:7f:50:7c:9e:b2:1c:45:72:3e:af:a7:32:
8e:c1:f5:9c:c5:ac:01:8f:79:b9:61:88:b9:9b:a1:cb:87:11:
e5:61:04:4c:0c:fd:e8:ea:e7:09:17:a8:e7:a0:d4:d6:9f:3d:
60:85:9a:53:b0:5a:c0:db:68:33:a9:50:ca:26:40:cd:70:20:
07:60:35:b3:91:dd:85:31:71:50:c2:fe:ec:1c:32:b9:fd:1e:
1c:3b:d8:d6:99:20:09:81:a6:1a:9a:bd:6b:94:49:de:0b:33:
ce:68:4c:ff:60:68:6c:03:f6:90:42:e4:99:1d:07:4d:a8:e6:
07:33:68:e0:09:20:b5:77:c1:13:a2:b6:5c:84:50:df:b3:e8:
d3:7e:86:06:dd:a5:50:5c:59:b2:62:62:2c:74:ee:bc:46:ef:
f2:6f:8a:14:58:20:e5:93:b4:dd:79:cf:14:48:fa:dd:fd:60:
87:25:3f:f0:c0:60:16:db:f3:2b:6d:26:2f:ab:3b:82:b2:f7:
75:5e:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:58 2026 by rpki-client