
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json)
Hash identifier: 8x8cS95QBV7a+n5IoHodpOEDysqmgUcTHMciNmmIQv0=
Subject key identifier: 2D:17:20:DD:5B:10:B4:A6:C2:9D:A8:C0:4C:51:3D:47:54:02:0B:90
Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
Manifest number: 5A
Signing time: Thu 23 Jul 2026 10:08:46 +0000
Manifest this update: Thu 23 Jul 2026 10:08:46 +0000
Manifest next update: Thu 30 Jul 2026 10:08:46 +0000
Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: gDhk37kxnQKFsQyInTCHW7kqOYVbVTlCjdHOoEOcWKA=)
2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Validity
Not Before: Jul 23 10:08:46 2026 GMT
Not After : Jul 30 10:08:46 2026 GMT
Subject: CN=6a61e82e-ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:12:a2:e2:2d:31:dd:63:cb:a6:41:75:07:
38:0e:f3:68:b7:21:00:c4:44:d8:fe:14:67:dc:df:
b3:23:34:6c:15:4e:7a:20:8d:90:35:ee:1c:f4:eb:
af:51:8f:d7:0e:92:fe:d2:e6:33:37:ad:26:f4:e3:
09:33:42:41:52:a7:63:1e:c4:d4:1b:a0:bd:6f:d3:
0a:28:d9:71:63:84:1d:e5:6f:86:1a:b3:23:e2:6d:
16:ee:f6:54:e8:f7:7a:f6:69:19:08:ae:e0:e9:34:
fe:8a:5d:5d:21:c5:b6:65:74:4a:55:e5:0b:d9:42:
55:a2:71:c1:5d:6e:3b:56:ee:ed:ae:3f:76:06:ac:
a6:26:96:6d:d6:f7:08:5e:c6:7c:82:f9:10:62:cc:
1b:dd:d2:0e:6a:09:8d:7c:06:ae:47:fa:65:56:ed:
45:fc:94:00:03:df:45:2e:09:55:c9:ff:75:c3:ff:
cc:0c:95:49:a6:6f:46:e5:c7:41:41:cc:15:2a:e4:
d7:c1:97:3c:d2:4f:d5:54:04:43:06:09:ea:dc:81:
80:99:cb:1d:3c:41:9b:ef:5c:80:11:7d:53:82:7d:
95:c7:39:af:fd:83:88:43:46:78:af:54:db:fe:3e:
06:6a:ed:7c:04:95:98:61:0f:56:e6:d9:63:eb:d3:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:20:DD:5B:10:B4:A6:C2:9D:A8:C0:4C:51:3D:47:54:02:0B:90
X509v3 Authority Key Identifier:
keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:5b:8f:24:53:f0:16:43:a8:93:5c:9d:4b:32:4d:21:c1:eb:
b7:9d:0b:b9:6a:b9:09:01:09:fd:96:a3:2c:91:0f:a0:ca:6e:
32:84:ff:d0:6b:25:30:f8:c2:b6:70:7a:07:60:28:3b:da:de:
06:f0:36:8b:cc:d9:c9:9b:6b:b2:ab:84:01:87:4b:3c:09:17:
7e:e1:26:e9:9e:e0:ea:ab:74:8e:20:51:18:7b:25:49:42:fa:
7d:a2:a2:3b:62:19:0e:e2:75:dd:7d:87:a1:22:5a:a0:8a:1e:
4e:26:89:fe:c6:8b:fc:33:ff:04:0c:3b:9c:dc:63:43:a6:76:
ac:8d:7d:5e:53:1b:77:72:a0:12:e1:f6:f6:5c:57:64:a3:aa:
b0:d9:3e:93:dc:ec:9a:d8:2e:be:7e:76:d9:dc:74:fc:6e:d6:
6d:2a:de:2d:e2:92:f0:9a:b7:26:75:ae:62:a9:7b:ab:4d:04:
07:bb:3e:b8:10:f6:69:81:69:10:45:28:a7:b7:2f:26:04:e8:
d2:6d:e1:ea:2b:13:05:b5:87:e5:e2:2c:7d:35:d1:a1:3c:ea:
ca:6c:de:91:43:be:2c:71:0e:5e:37:87:17:28:dd:7e:95:8f:
5d:4d:5e:9f:93:8f:61:89:20:73:6b:32:08:53:48:82:df:12:
40:7f:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:49 2026 by rpki-client