
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json)
Hash identifier: KA7ITnHxpBZPqLMRcP3jPjH/dWaUBDWa5b/Pu7e7xJw=
Subject key identifier: B1:69:A5:8B:2E:16:67:40:FD:93:6F:D7:B8:BA:73:EB:C7:09:95:D4
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
Manifest number: 0143
Signing time: Thu 23 Jul 2026 06:59:52 +0000
Manifest this update: Thu 23 Jul 2026 06:59:51 +0000
Manifest next update: Thu 30 Jul 2026 06:59:51 +0000
Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: atfVPacZpeEeG8QnqXxqiW+U4/WhEOOxY2YH75eq0sk=)
2: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=)
3: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=)
4: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Validity
Not Before: Jul 23 06:59:51 2026 GMT
Not After : Jul 30 06:59:51 2026 GMT
Subject: CN=6a61bbe7-e6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:0b:36:0e:03:1c:2b:17:8d:47:c1:55:c1:
85:f1:a6:4e:c6:c4:c2:3b:bf:39:5e:ce:10:61:3a:
5f:5e:eb:2b:f7:bf:4c:ed:31:b2:57:ab:3a:e6:22:
6e:64:1f:7b:9a:d5:8d:d1:b3:48:b0:9b:d8:45:8a:
d4:81:18:f4:cb:17:49:cd:57:08:ec:9c:2b:02:68:
df:5b:66:2f:9f:28:99:2c:a5:9d:78:e8:44:45:ac:
64:49:fb:cf:31:43:fa:bc:9b:d4:73:5b:a0:6d:d1:
cd:d3:3e:fa:9b:df:0b:f9:92:30:23:1b:1a:e3:48:
69:90:78:b2:36:9d:11:a6:43:31:63:8d:98:37:a6:
d7:ce:fa:75:04:5d:7f:ef:44:96:e4:df:aa:61:54:
b6:0c:90:5b:3f:9d:8d:35:f8:6b:9c:9c:d5:e9:14:
21:a1:72:47:eb:52:e5:ea:7f:b4:5b:34:28:28:8a:
3f:ec:81:80:46:ba:38:4b:77:02:37:08:44:eb:f0:
eb:6f:62:8a:e7:83:34:90:a6:30:bb:d7:e4:fa:5d:
9f:04:26:db:6a:f6:5f:c9:a0:d8:25:26:d9:5f:b6:
ea:0d:92:7d:20:ec:b7:14:e0:dd:f5:30:ac:4a:41:
bd:38:9f:d7:56:95:8b:b9:92:5d:57:06:30:a1:9c:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:A5:8B:2E:16:67:40:FD:93:6F:D7:B8:BA:73:EB:C7:09:95:D4
X509v3 Authority Key Identifier:
keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:46:6a:60:d7:9a:23:d3:28:ea:2e:3e:1a:9d:e3:68:dc:
27:8f:71:9a:b9:4f:4e:97:bf:29:d6:55:2f:a4:70:26:0d:59:
db:c2:b0:0f:66:f0:79:52:0b:af:0d:8d:dd:7b:27:2e:4d:df:
c9:83:09:dd:14:a2:fa:a3:c8:83:2a:33:39:98:f4:5a:e8:dc:
7f:c6:31:59:98:b2:57:c0:fd:90:3f:18:a2:dd:9f:27:4b:50:
7b:8e:35:62:ad:1d:85:3a:6f:38:24:68:ca:59:df:38:61:9c:
27:d0:d3:ee:c8:6f:4a:43:fb:8f:31:b6:3a:0a:07:6b:7f:95:
01:d6:40:b9:e9:80:6d:e3:fc:9f:fc:17:fd:cf:83:af:54:69:
f3:a1:dd:08:83:35:36:ee:2b:61:d7:40:b3:b2:ee:4b:17:2f:
00:c8:ac:27:df:13:17:5b:c9:b7:35:fb:35:86:09:4a:10:ac:
f6:2e:e9:51:6d:77:71:69:36:c8:91:60:c2:9a:ce:b1:96:6f:
b3:42:07:dc:2e:36:83:a6:91:01:c3:5d:b6:60:81:32:75:c0:
a9:bb:14:99:5f:c8:9c:21:87:b3:8d:f8:75:eb:7d:e4:72:0f:
d3:60:99:4c:9e:56:84:3d:50:91:28:f7:60:15:59:0c:7a:63:
d3:1f:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:43 2026 by rpki-client