
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: RqfAambCggSr6idorc3mgAkfBM1rrhujR+5a5GJU9UU=
Subject key identifier: 0C:C4:54:BF:CE:DB:49:07:FF:51:9C:02:F9:52:DE:6B:33:E4:E0:C0
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: EF
Signing time: Thu 23 Jul 2026 08:17:01 +0000
Manifest this update: Thu 23 Jul 2026 08:17:00 +0000
Manifest next update: Thu 30 Jul 2026 08:17:00 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: wyBa0OFjxi9OFYy+jN5hglPlxxMWm6WSMDFcswAQ7O4=)
2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
3: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Jul 23 08:17:00 2026 GMT
Not After : Jul 30 08:17:00 2026 GMT
Subject: CN=6a61cdfd-40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:f7:f0:d9:3f:cf:72:40:fa:85:99:77:ea:
6b:97:7f:da:e2:2e:82:5c:97:27:7f:24:97:84:71:
e5:99:27:31:ea:af:a3:20:68:f9:e0:b0:ad:f7:dc:
a1:14:6b:6a:fb:20:8a:16:7c:03:5d:07:a1:15:4c:
40:e9:83:b4:b0:94:d1:4a:08:1c:41:b5:71:aa:e3:
61:38:b4:bf:98:bf:f3:a7:f4:da:a8:29:3c:6e:75:
13:d9:9e:40:76:06:2b:fa:ec:19:06:4d:cd:34:d8:
70:15:f9:66:1b:e4:93:39:26:35:43:85:80:67:39:
05:c3:f2:64:dd:6b:6f:1c:41:2b:0d:3e:1e:05:cf:
42:43:19:93:b4:85:2c:b6:66:70:8e:da:b4:02:6d:
3a:58:86:ce:bd:e6:b4:6b:28:a5:e3:a0:30:bb:80:
0f:46:b0:20:03:48:89:b1:41:41:75:6e:fa:8b:fd:
6b:ab:4d:ec:4a:b4:fe:c3:00:85:58:32:da:f7:82:
ef:12:a2:e6:a5:c1:64:10:9d:9d:e7:ed:30:0a:d9:
8f:1e:f1:96:63:93:0a:fe:c0:17:a1:ae:63:41:f3:
93:11:e9:48:94:5e:cb:00:7d:d2:c4:85:d4:80:37:
06:2d:fe:f6:64:c8:b2:18:0c:2e:61:3b:51:95:f9:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:54:BF:CE:DB:49:07:FF:51:9C:02:F9:52:DE:6B:33:E4:E0:C0
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a4:c7:7b:b7:26:2b:c7:91:0c:81:65:23:16:e1:5d:4c:19:
08:8b:e4:89:de:ab:7f:18:95:b1:d5:d3:d2:95:1e:fc:6c:32:
8c:8e:ed:a3:1a:37:d6:2f:d8:df:a5:59:bd:b1:b4:47:a3:1f:
4e:fd:86:d4:23:b6:51:76:f4:3b:39:bd:42:8d:df:10:f0:4a:
8e:00:88:bd:ad:f5:b8:cf:a0:3d:0c:61:66:d2:43:c0:4f:3f:
b0:21:78:84:65:12:f2:95:87:bf:6f:47:e1:9f:00:1b:ac:93:
36:b8:fd:51:a9:77:1a:ed:f5:b0:fb:ab:97:b5:02:62:5c:77:
1b:c8:04:33:b5:71:68:0c:3e:39:25:b8:26:02:1a:2c:5b:14:
cd:97:b6:82:53:42:54:24:5b:b9:27:99:b3:68:e0:cf:d0:66:
8e:b9:2b:2e:86:19:63:6e:55:29:9d:76:91:7c:07:cc:be:5c:
8e:1f:8d:cc:1e:bb:05:2d:d8:23:79:f9:fc:27:26:f9:70:c5:
8b:83:c3:9c:61:74:b0:21:61:e2:3a:7d:ed:6e:fb:48:95:da:
2a:c2:98:d6:38:b9:4f:92:ba:7c:81:2f:88:db:41:e6:52:2e:
bb:e9:66:27:e2:cc:d6:2e:a1:75:76:3c:3a:89:09:15:e0:37:
be:0e:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:47 2026 by rpki-client