
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json)
Hash identifier: 9c9+5U1iKb5GQEknhk0g7i+gaLtkBsc50sWNoGIcxyA=
Subject key identifier: 45:E6:97:A8:E3:C1:54:56:59:52:6E:24:49:65:C4:E8:40:0E:FA:86
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
Manifest number: 013D
Signing time: Thu 23 Jul 2026 07:40:35 +0000
Manifest this update: Thu 23 Jul 2026 07:40:34 +0000
Manifest next update: Thu 30 Jul 2026 07:40:34 +0000
Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: LfuFvNL0zXeGQl382VBpzH1vLcVUiCeBhSgiQMFGYSc=)
2: 1EC7CB56760211F1B3B8C5AB79A30FBC.roa (hash: Wfm/h2xxK745Y94Za2JSuJBHY7H1Tf1IdALtA1szaWo=)
3: BC6277B8700211F19DFE431193A30FBC.roa (hash: GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=)
4: 8BB9BA0A739411F195A6A0F072A30FBC.roa (hash: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=)
5: 2C32A252760211F1835524AC79A30FBC.roa (hash: mDZPGG6cuYVhz8v924vB5h8F7Ar/FIJqlTg/7hiJaTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Jul 23 07:40:34 2026 GMT
Not After : Jul 30 07:40:34 2026 GMT
Subject: CN=6a61c573-bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:a3:62:7a:25:48:6e:a1:42:24:84:20:2d:
e9:98:c9:e6:68:30:61:63:e0:71:4d:03:ab:24:79:
8b:b1:a5:3e:5a:f2:3f:55:ba:62:58:68:c0:2f:5e:
82:b2:91:55:2b:3e:e8:e7:ca:bc:84:8f:b9:45:78:
96:5e:09:0c:5e:03:d8:03:1f:c8:e1:9d:a3:49:56:
b6:b0:32:5a:3e:d5:a1:43:51:40:47:8d:2c:4c:c3:
92:a9:15:21:21:e1:74:76:7e:1b:3e:20:fb:1e:45:
56:a5:10:d7:b6:0f:88:01:a0:11:5f:d1:df:d2:35:
e2:a2:7b:a5:ae:2a:f2:bb:b2:67:30:dc:35:33:d8:
06:af:b7:aa:16:25:a7:9a:d6:4a:a9:b3:8c:f6:f2:
74:65:bf:a5:d8:b6:a7:cd:3b:ce:a1:a4:51:be:2b:
e3:af:d0:59:5a:60:05:50:a0:e5:ec:27:6b:82:51:
af:53:e9:18:b8:27:02:f7:ef:11:37:54:02:e1:bf:
12:10:80:f2:f5:58:b5:d1:00:72:85:a3:d1:77:9b:
65:b2:3f:af:d9:5b:b2:42:9e:f4:f0:04:c4:bb:de:
4a:64:8e:c3:9a:95:65:0f:23:26:aa:95:34:8d:68:
0f:bb:a9:e1:57:04:83:74:f4:7a:b5:87:c8:c0:a6:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E6:97:A8:E3:C1:54:56:59:52:6E:24:49:65:C4:E8:40:0E:FA:86
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3d:05:88:fa:55:bf:b5:42:82:63:e2:3a:77:ce:0d:09:37:
4d:b8:23:0d:3d:fa:02:2f:bc:e1:5b:fe:6d:7b:af:d8:57:be:
d2:d8:ae:e4:a3:38:65:f1:86:c1:90:4b:32:7c:e6:23:96:c5:
e8:94:c9:17:c6:4e:39:4f:e0:26:1c:c2:71:32:18:7e:9b:4c:
fc:12:81:de:b0:a2:76:fd:a8:89:23:e2:3d:4d:da:fe:60:80:
2f:a3:f7:77:6d:59:4f:60:2c:da:8d:6d:c2:47:43:12:ca:1d:
c6:e5:7a:9a:5d:3e:c4:5c:d2:60:0f:dc:d4:e3:38:c3:f5:58:
17:7c:0c:08:bc:5a:52:09:a2:1e:77:ac:cb:b9:57:42:ab:81:
4e:5a:ed:34:99:23:6e:64:cf:2e:35:27:9e:fa:b0:00:89:b7:
6e:d3:b1:43:71:0d:35:2f:77:02:3d:5d:30:40:f4:1d:34:b0:
ff:d6:38:ba:12:b9:b7:17:cc:95:2b:5f:49:71:0e:8d:06:8f:
3b:80:23:4c:04:af:74:01:b3:01:c2:d9:ce:ac:85:28:a9:c7:
83:a8:e8:82:7f:a9:04:0b:1a:c0:79:7e:fa:88:2a:e7:33:95:
04:b1:3f:cb:a8:02:fe:10:72:c7:fb:1c:91:63:84:93:91:5d:
24:59:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:13 2026 by rpki-client