
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json)
Hash identifier: bV9PIsrhfsfKopK+9zrDRWKibQ5UysozLd0KZxIejm0=
Subject key identifier: F3:50:ED:17:1C:FF:26:54:05:2E:F3:2F:05:00:26:4A:02:25:4A:66
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
Manifest number: 01F9
Signing time: Thu 23 Jul 2026 04:30:26 +0000
Manifest this update: Thu 23 Jul 2026 04:30:26 +0000
Manifest next update: Thu 30 Jul 2026 04:30:26 +0000
Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: KeVintDt3had0J9/KFB//9jo4kG76I9stuoEv1SXBZc=)
2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=)
3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Validity
Not Before: Jul 23 04:30:26 2026 GMT
Not After : Jul 30 04:30:26 2026 GMT
Subject: CN=6a6198e2-c27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:a6:1f:3a:39:51:0f:9b:89:b6:ee:a9:5d:
33:c9:ed:1d:67:92:43:4c:12:e2:97:70:46:06:4b:
d4:5b:52:a8:4f:39:d5:55:7a:15:db:68:f7:d1:52:
97:e9:f6:f1:03:7f:ae:93:1e:03:18:26:35:7e:a0:
66:f7:aa:5c:c2:ad:49:52:d0:e3:15:67:b9:95:75:
ef:82:0e:fb:93:c4:85:ba:aa:05:06:be:f9:87:c1:
df:39:08:78:91:f7:5d:3a:aa:c7:d5:3d:85:40:7a:
b7:ee:d2:a4:11:1d:c0:21:22:8a:46:77:20:8d:e6:
b5:65:f8:cc:e9:0b:76:1a:a8:52:bf:32:dc:90:47:
b1:46:46:af:4c:7d:02:21:9b:b6:44:aa:dc:6a:4e:
10:72:66:56:44:bb:e1:16:50:fc:2e:3f:ad:d4:6c:
96:38:e1:19:75:1e:fb:69:e6:95:31:ae:d8:35:4c:
63:70:3b:ff:0c:6b:2e:29:6c:02:4d:f1:e4:31:ec:
73:5d:7c:9d:54:0c:ee:3f:4b:eb:66:36:03:5b:77:
4f:d1:16:46:f7:9c:90:34:f0:d1:2a:b3:f2:92:d2:
01:e3:a3:bd:00:e6:9e:43:6f:26:1f:f0:e0:3d:78:
56:72:94:5a:4f:94:37:86:f9:e1:1f:c7:4f:e1:bd:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:ED:17:1C:FF:26:54:05:2E:F3:2F:05:00:26:4A:02:25:4A:66
X509v3 Authority Key Identifier:
keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ae:2e:40:83:2c:f9:7c:5b:ed:f8:45:2d:57:8d:01:75:81:
30:98:f5:60:a2:e4:f7:02:19:5d:fb:f6:03:4a:fe:4e:80:26:
8d:3e:2a:68:31:97:fe:17:7f:bd:68:6b:0c:c7:46:4a:28:57:
30:3b:c6:c6:3e:a5:c1:36:6c:75:5d:99:1f:d7:dc:f2:ad:5e:
3b:68:44:be:a0:42:43:32:ce:d4:44:5f:7f:7e:89:82:06:73:
38:17:70:bb:5a:66:1c:c8:42:ca:09:37:2f:d5:cd:d9:31:ae:
4d:18:77:e8:1b:b7:30:62:68:46:94:ed:5d:84:de:32:06:6b:
79:d5:33:7d:79:c2:4b:9b:3b:49:e5:9c:2c:3e:ec:59:e8:68:
74:fc:6a:30:e4:6a:d5:97:57:a8:73:09:07:d1:4f:ef:67:5e:
36:d9:d6:c9:89:db:a3:1d:bc:06:97:f2:f5:bb:51:51:c5:5d:
ff:2d:2e:7d:df:71:d4:b2:31:b3:8d:0f:18:c1:f4:8c:48:89:
24:c5:dc:b6:e6:40:29:63:e2:17:cb:50:68:3d:42:a0:f7:81:
1d:1a:85:4c:05:39:20:75:a7:34:ba:a3:b6:73:cd:b3:ea:dd:
ed:80:bf:79:9f:65:9d:85:42:4a:19:b5:da:ff:6e:a6:e0:9e:
62:25:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:19 2026 by rpki-client