
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier: UrkVcluficyqOGmg9BzQXMePJdm1udFlQxr0KDY89QA=
Subject key identifier: 69:1F:E5:4F:43:19:C1:F9:3C:A2:DB:AA:FA:FB:80:F9:D1:AE:13:4A
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number: 0123
Signing time: Thu 23 Jul 2026 07:32:21 +0000
Manifest this update: Thu 23 Jul 2026 07:32:20 +0000
Manifest next update: Thu 30 Jul 2026 07:32:20 +0000
Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: ojijUgb9AvjzUmuRuAsSDiG0H3Mj+hPWZlocfmSJE24=)
2: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
3: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Validity
Not Before: Jul 23 07:32:20 2026 GMT
Not After : Jul 30 07:32:20 2026 GMT
Subject: CN=6a61c385-f89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:0e:8a:46:c9:3f:27:d5:06:2a:f4:bd:be:
f0:67:89:9c:ee:9a:1c:f6:4b:3f:df:d6:74:50:b4:
58:45:d8:86:51:19:70:7b:88:33:4a:bb:49:7d:7e:
33:c5:36:59:34:ae:39:41:9a:e6:dd:5b:43:fd:fa:
dc:19:d5:92:c4:bc:20:d5:e9:4a:94:8e:6c:82:84:
ac:ab:e1:f0:56:51:cf:a3:1e:34:a1:de:ee:27:15:
00:db:9a:7a:12:ca:e7:8d:1b:33:ff:84:df:66:a5:
b1:e8:6a:17:91:90:71:04:2f:4f:98:27:1f:f1:e8:
f4:a4:bf:36:3d:d8:c4:11:f7:09:a4:88:0c:39:32:
f9:07:97:4a:a8:47:5a:da:0b:0f:f1:c1:53:9d:c8:
ab:2f:d2:00:e6:bd:eb:7d:72:52:5d:fd:a9:9e:e4:
ea:56:08:d0:f5:2c:98:6e:f0:ca:3a:96:18:38:26:
e7:73:3f:c8:eb:1a:92:88:ab:c4:17:d7:c4:44:25:
15:08:b6:39:f9:41:2d:7b:85:fe:67:e7:36:26:f0:
ba:41:5e:5d:4f:7b:92:0d:b8:cc:32:40:aa:0e:4b:
fd:c3:2d:5d:a0:cb:a2:51:c0:30:76:02:9c:bb:c0:
a4:f1:41:3b:6e:bf:c7:40:f8:a0:9e:ec:70:b0:fd:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:E5:4F:43:19:C1:F9:3C:A2:DB:AA:FA:FB:80:F9:D1:AE:13:4A
X509v3 Authority Key Identifier:
keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e2:d9:23:d6:30:09:ac:f5:47:a7:19:86:db:49:93:b0:1e:
41:eb:31:e8:c4:c5:67:ac:45:59:67:ad:3c:e1:6c:cc:3b:a7:
1d:c3:96:0a:c9:72:05:a3:0d:07:22:76:52:df:68:d2:5c:20:
66:08:a1:a6:fd:5a:fb:75:ec:9f:e9:57:11:7d:44:6f:fa:79:
39:27:83:9c:e7:41:e4:59:c2:1e:9b:a0:cf:b5:9c:da:60:ec:
c1:ed:f1:6a:d2:28:e6:43:23:c1:26:49:db:f8:06:7b:57:62:
8b:50:cd:33:30:f5:df:27:74:ee:29:b2:c1:cb:1e:43:0e:b1:
43:f8:c0:8e:9e:f2:76:39:9c:3d:ac:1a:43:26:94:e4:7e:4f:
9b:a5:20:5a:15:80:20:1e:70:1b:97:9e:4e:25:8c:54:99:af:
91:4d:da:5a:72:0a:5b:8d:08:ce:35:10:60:4e:b5:ac:46:bf:
9a:10:c7:19:61:c8:99:94:b7:b2:c8:ce:b6:a7:0f:f7:b0:b3:
4f:9e:94:d5:3c:40:1c:33:aa:62:07:bf:af:cb:93:c4:02:b8:
41:33:d7:7a:f3:f9:a7:e9:3c:d1:58:32:bc:6b:f9:9d:c1:ae:
69:ac:c6:24:e6:3d:91:79:e9:2e:3d:eb:53:45:09:fc:9a:9c:
a0:ec:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client