
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: DTW4XCjsdCMBZxndj0KXY/583sYENTjWmOK9AEOJFMM=
Subject key identifier: E4:2B:B3:D6:15:DE:A0:D6:10:D0:8C:16:32:45:5B:1B:AE:27:6A:07
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: 0114
Signing time: Thu 23 Jul 2026 08:07:07 +0000
Manifest this update: Thu 23 Jul 2026 08:07:06 +0000
Manifest next update: Thu 30 Jul 2026 08:07:06 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: Xmhh2DfCFDR8Fz39SC8N7y/v1ihTQEdmY6ED+Kx4oIY=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: /oG+kh2eKtakm2rIYi2rKJyApYpZtiilOJOldegtuSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Jul 23 08:07:06 2026 GMT
Not After : Jul 30 08:07:06 2026 GMT
Subject: CN=6a61cbaa-57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:f0:27:10:20:4c:2b:8e:5d:09:97:47:7f:
5d:e2:90:a0:eb:38:1b:15:b5:17:89:a5:c4:3d:10:
fd:41:47:6f:45:dd:ef:16:1b:30:52:d1:b8:f0:30:
31:00:67:6e:ef:15:a9:30:03:ba:ac:b8:a8:6b:a4:
42:2a:fc:10:ed:ab:af:27:98:e8:0a:7f:68:9c:9b:
d7:00:f0:a4:99:00:c6:8f:dd:8e:ca:91:ba:ff:20:
f1:f0:41:55:cb:4c:90:4a:09:08:e9:51:b7:17:41:
23:71:03:d0:73:2c:9b:a2:2e:6d:1e:23:41:14:0c:
a3:f5:10:42:94:65:ea:e0:35:a2:03:33:27:a1:38:
00:d9:c4:a8:18:7c:68:92:e4:90:29:94:08:d6:7c:
a5:8e:dd:cf:59:7f:47:f8:c0:95:27:b6:fe:39:52:
23:88:0e:e0:bc:e0:78:0b:b8:71:38:60:d0:6a:96:
08:45:c7:00:c7:f9:45:56:37:b8:44:31:f6:6c:2d:
29:47:9a:89:a5:62:4d:c5:42:4f:69:c3:eb:96:9a:
78:f5:d6:b8:63:6f:28:8d:ce:3c:c3:1b:7f:57:aa:
b5:8b:06:e6:97:51:a5:b5:49:61:90:c5:95:42:20:
2f:ba:90:46:73:11:e6:45:24:72:ce:2c:8c:06:84:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:B3:D6:15:DE:A0:D6:10:D0:8C:16:32:45:5B:1B:AE:27:6A:07
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d3:e2:9c:63:93:c4:54:c1:d8:57:4a:17:5c:d2:de:e5:80:
a9:91:fa:2b:33:cd:a2:d3:6d:99:92:e5:54:67:8a:68:bb:9b:
bf:8e:c4:85:97:24:a4:0a:73:6c:45:fe:1e:dc:c4:0a:00:fd:
3c:1b:1c:9c:3f:4b:99:51:ef:db:6d:70:28:42:47:0d:7d:cd:
45:81:40:7b:f7:68:72:96:58:fa:fe:58:9b:38:85:a0:0a:50:
10:92:6b:6b:16:f4:ae:21:12:a9:85:8a:f2:50:8d:4d:55:87:
61:26:1d:7e:2a:b9:97:40:0a:2a:e6:a6:47:2a:15:52:9b:1a:
18:95:cc:e1:c6:48:46:3d:42:43:3a:51:dd:32:87:9f:a7:92:
e6:0f:d2:61:ba:d6:1a:cf:48:61:b6:8b:1e:1a:22:d1:83:9c:
af:e0:0c:15:40:6e:68:79:eb:63:96:2f:0c:fa:87:91:29:26:
2a:95:48:b0:f8:d5:15:4d:5a:3f:e0:e6:10:72:ca:1d:db:2b:
a1:d0:49:b3:f0:98:bb:25:24:28:9a:00:4f:8b:9c:a7:36:7c:
47:61:76:9b:c2:7f:4c:ae:78:0f:8b:88:d4:3c:05:67:3c:f9:
35:2e:0b:fa:ee:62:65:90:5e:e0:f7:b8:6f:e5:70:ef:70:65:
5a:14:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:57 2026 by rpki-client