
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier: 5/VmT7PiaeE/lS7KJGtBdkUYC/TzV5s+xBjooVaR59Q=
Subject key identifier: 2D:D2:44:05:AF:02:11:81:59:6A:05:35:3B:E1:8D:F1:BB:5E:FF:DB
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number: 0130
Signing time: Thu 23 Jul 2026 07:19:56 +0000
Manifest this update: Thu 23 Jul 2026 07:19:55 +0000
Manifest next update: Thu 30 Jul 2026 07:19:55 +0000
Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: mO9hm99+PHhdP0d6PNxgwGJ+M3krUO2EG1Io0TFF0C4=)
2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Jul 23 07:19:55 2026 GMT
Not After : Jul 30 07:19:55 2026 GMT
Subject: CN=6a61c09c-70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:99:ca:e2:a3:e9:9a:31:b0:65:7b:04:83:
d4:1d:4f:b0:13:84:60:67:e8:bd:2c:fd:93:05:9c:
9c:57:97:8e:dd:31:b1:e7:c3:69:21:5a:03:00:10:
a2:3c:29:5f:20:a2:df:48:c3:01:1e:8a:71:c9:fc:
f6:a2:24:de:86:fb:cf:f8:cd:94:a9:31:c2:01:cd:
3b:16:8d:0a:df:52:9c:00:01:6f:a9:32:e6:e4:e9:
b1:8c:85:41:82:74:ef:99:cf:21:25:5f:b1:7c:13:
b1:15:da:18:a0:09:e7:95:d2:95:b8:04:a6:09:a5:
0d:82:f5:16:7f:50:4e:b5:1d:4e:52:37:bf:a6:32:
c0:ca:30:c0:5a:e0:e6:96:d2:58:76:70:f2:a8:44:
7e:4c:02:ce:8a:28:02:02:de:f6:2f:6d:9c:97:7d:
de:17:82:77:de:3b:43:a5:29:99:f6:6c:ce:d8:7e:
6a:3f:12:96:d9:98:0b:43:3e:f7:a9:81:f4:79:e0:
2d:f5:6a:f5:eb:02:04:4a:19:a3:dc:3e:52:71:e2:
5f:08:cf:b0:d4:76:7d:ea:a1:ef:9b:2e:d0:af:d7:
c4:45:d6:3f:26:ca:0d:68:7a:01:fa:d1:24:8e:1c:
45:63:59:88:7c:dc:33:6f:f1:09:bf:7a:81:74:95:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:44:05:AF:02:11:81:59:6A:05:35:3B:E1:8D:F1:BB:5E:FF:DB
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:66:19:7b:9a:23:5f:fc:f9:a4:da:65:f1:6f:3c:76:53:6e:
46:8f:14:6d:70:4c:eb:fb:9a:68:86:dc:26:1f:c8:b9:48:17:
4d:ea:50:91:0d:51:1c:de:a8:1c:48:69:a8:b8:f0:ef:a1:b5:
dc:e9:91:2c:4c:fd:e3:78:98:ad:e9:a9:e6:65:46:70:0f:ad:
b2:cf:5d:25:b1:8b:5f:a5:db:22:41:3c:05:06:fc:92:9a:56:
cb:b7:13:6c:30:92:98:e5:62:ec:31:65:dd:f6:b6:7f:8e:90:
ec:d7:77:0e:e0:bc:a6:cd:65:3c:82:ce:0b:d0:da:ef:51:2c:
27:f3:33:ac:6c:88:70:44:5e:0f:2a:9a:f7:26:de:df:9b:83:
d7:78:2a:a1:ee:e3:bc:78:47:45:a5:8e:12:6b:de:da:7a:f6:
59:54:7c:7a:d8:4b:76:0f:fb:ea:4e:e9:dd:d0:38:73:96:17:
4e:61:c2:18:d8:15:16:2f:76:3b:cf:03:41:32:7b:31:3e:44:
c0:39:6f:07:12:10:53:97:20:6f:2c:48:99:d8:8f:51:dd:71:
e7:13:c7:fc:96:03:c3:ab:d3:83:de:43:8f:e1:da:75:33:b1:
8c:41:0e:85:bc:62:75:4e:c8:b9:e7:dc:73:2e:29:ac:6f:89:
d6:f9:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:38 2026 by rpki-client