
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json)
Hash identifier: +0QyEUrj9EhZwcbShLosV4//DefJX2y4TdGPVJxpHFI=
Subject key identifier: EF:C5:84:81:78:27:55:38:7F:DA:B6:97:A6:2C:51:B2:8B:1B:31:18
Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
Manifest number: 0115
Signing time: Thu 23 Jul 2026 07:38:18 +0000
Manifest this update: Thu 23 Jul 2026 07:38:17 +0000
Manifest next update: Thu 30 Jul 2026 07:38:17 +0000
Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: 4wxOjqjNMIk3j7MMVo2cvtPsVV8SWfa54uKT+Ayt0hE=)
2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: h1LWEJUQvaATUOdZkytyIfaI4klq2FxoFoCocLW2Bpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Validity
Not Before: Jul 23 07:38:17 2026 GMT
Not After : Jul 30 07:38:17 2026 GMT
Subject: CN=6a61c4e9-3936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:35:a2:8a:7f:30:12:7c:95:5f:9e:d8:68:
00:87:7f:be:f9:b3:cd:a2:b2:e4:56:a3:35:40:52:
0c:1c:21:dd:32:fe:99:07:a5:87:ca:3f:d6:a0:9f:
cc:90:ac:82:e4:6c:cd:51:d4:ac:f2:bb:3f:eb:be:
ca:15:15:85:96:62:95:a8:d4:3a:2f:02:fe:6a:73:
e3:1c:91:aa:8e:37:5a:a2:3f:1e:50:f4:bb:85:89:
b0:a0:e2:ea:d8:bd:16:d4:fc:d4:0c:d2:1f:86:e6:
64:28:56:58:d0:05:f6:58:29:43:1d:76:45:34:33:
46:43:8f:60:3c:e1:19:4d:b6:6a:1a:65:02:ed:1c:
59:e6:86:b2:9e:8b:95:d8:fd:95:87:82:5f:a5:19:
68:39:1a:fc:bd:dd:f1:5b:81:d5:a7:5a:8b:65:05:
ee:50:76:f3:a3:d3:03:54:2e:c2:29:ab:da:53:3b:
19:17:f7:a4:c2:4b:a1:6b:18:3f:18:bb:de:06:7b:
08:ef:80:0f:0e:fb:db:5a:59:11:cc:e2:8b:76:74:
f0:df:ab:f4:a0:6f:70:23:8b:b0:9a:84:cd:42:62:
61:c0:28:f2:83:64:83:ec:32:03:27:08:fb:89:2c:
f7:ec:cf:0d:f7:8c:66:63:7a:3d:e7:92:db:2d:8b:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:84:81:78:27:55:38:7F:DA:B6:97:A6:2C:51:B2:8B:1B:31:18
X509v3 Authority Key Identifier:
keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:35:54:46:80:58:5b:36:cf:a4:87:32:61:78:b7:d7:89:
03:fa:37:00:f6:83:a4:1b:7c:81:60:98:ed:49:04:60:89:8c:
f8:95:ac:65:a5:96:b4:b8:85:f4:c9:ce:df:01:18:82:ef:04:
3f:a4:d5:a0:20:09:89:67:bb:f1:d9:38:c0:3b:8e:71:c9:29:
6d:83:da:69:db:6d:bc:fe:db:f9:5e:1e:bc:85:3c:13:17:7f:
e0:5b:16:fc:e0:9e:5c:ec:24:e0:96:1d:0a:a7:a4:ba:16:11:
22:56:80:28:0c:5e:f5:aa:d2:8e:2a:30:a5:0e:d5:b3:2f:42:
21:54:96:94:12:67:d1:df:c7:f9:5e:be:cd:5d:19:7a:3f:5a:
71:cf:71:e8:74:4d:e5:e6:1e:32:a0:f6:4d:ca:fb:9c:cb:f8:
2d:01:44:50:99:f2:bc:f3:66:af:d4:50:8b:43:f0:3e:5b:4d:
1d:99:08:81:52:2e:37:bc:12:74:ed:ec:f5:59:8a:ba:e9:2f:
9c:04:c1:5c:75:1d:9f:46:7a:79:1b:3c:1f:3d:45:22:95:3c:
ae:a3:b7:6f:32:fb:ca:f6:b4:00:70:8f:77:ce:e9:a0:de:17:
c0:6e:0f:a7:23:76:a6:07:77:94:5c:21:16:e8:6a:2d:c4:52:
be:14:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:51 2026 by rpki-client