
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier: JGuoyzfnSVVHAKE+rD4cvrxulj8zNAp+0INbzkpRSlw=
Subject key identifier: 2D:E7:BB:08:E4:CE:5B:A2:E3:8D:D9:F0:A9:F5:1F:E5:2A:38:96:7E
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number: 01CF
Signing time: Thu 23 Jul 2026 05:02:58 +0000
Manifest this update: Thu 23 Jul 2026 05:02:58 +0000
Manifest next update: Thu 30 Jul 2026 05:02:58 +0000
Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: mINMyu269fGAfOf0ut5KBau79kjnHjGflTAUAuGhM30=)
2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: fXqbBRWZeBNZ3fZzOgA4a+7wMB/4xdAxxRaA5d6gc6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Validity
Not Before: Jul 23 05:02:58 2026 GMT
Not After : Jul 30 05:02:58 2026 GMT
Subject: CN=6a61a082-8c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:ae:5a:bb:09:b3:3f:ab:2b:29:7f:e5:a0:
67:ee:20:3b:85:b5:98:55:f3:1e:81:88:50:d9:d7:
f8:7e:36:22:a5:5f:9a:7e:3e:29:7f:47:63:14:96:
4d:a6:30:d1:dc:7b:54:3f:f3:ec:b0:6b:45:b3:cd:
59:5c:ec:8e:e1:4e:22:c2:29:04:db:1c:a9:0c:41:
f0:ef:5d:1a:8b:16:0c:76:2d:92:71:c0:04:f7:cc:
e7:4f:63:f3:5c:a2:a2:51:3e:71:24:3f:81:b8:78:
38:c7:8a:06:d7:a4:8e:9e:2d:f6:46:5a:30:d5:ce:
51:4a:87:16:ca:63:aa:fe:b0:fc:b9:ff:5f:7a:2d:
d7:71:3c:5d:f3:66:1c:a2:99:01:a2:cf:3a:d5:8e:
d5:77:16:3d:81:25:ab:e6:43:a8:7d:4f:e9:a4:9e:
57:8e:bb:cf:31:2f:2b:a2:7e:f7:46:77:23:29:60:
34:06:aa:f0:c2:b7:6b:87:f9:08:ad:ac:00:bb:b1:
00:a9:e6:51:d0:7e:a4:62:63:26:ad:6c:75:a7:a2:
15:40:29:eb:77:8c:88:db:13:8c:00:28:82:3c:3b:
dc:72:3b:f1:02:cb:cc:d1:e3:8a:7c:0c:58:1b:a1:
5b:ab:cf:bd:8a:68:3a:81:52:45:b5:17:74:7a:ad:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:BB:08:E4:CE:5B:A2:E3:8D:D9:F0:A9:F5:1F:E5:2A:38:96:7E
X509v3 Authority Key Identifier:
keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:54:7e:c1:4d:e7:80:6e:52:c4:7e:59:01:1e:7e:4a:dc:
fe:bb:09:31:84:b2:c8:55:ed:5a:01:b5:ae:ed:e7:aa:d8:58:
3d:d5:17:13:e4:af:85:ec:c3:a6:2c:52:14:2a:b1:31:79:27:
f7:36:f8:9a:82:9d:67:bf:9b:8d:0d:b7:32:ab:9e:14:7d:08:
6c:e2:f7:80:72:09:b5:ac:42:e2:3a:aa:5b:5b:cd:90:a6:a5:
da:3b:8e:ee:b4:ef:d2:bf:af:5e:d4:1c:b6:f4:52:9c:b3:5d:
5b:19:af:62:d2:75:ec:c3:dd:2b:ed:bf:f9:70:22:7a:e1:d4:
1d:91:53:56:ce:b6:30:e8:cb:75:68:89:4d:db:b1:0d:f8:a7:
ab:2d:53:56:34:b9:f6:26:b5:d1:25:a8:b0:f7:e3:d4:e0:17:
dc:d2:9b:24:07:b7:c3:62:13:67:d7:27:19:38:ac:a0:53:1b:
a4:bb:d9:f8:ad:f3:06:74:8f:94:ed:54:ef:e3:ea:35:84:4b:
b6:34:ba:b8:ba:58:0e:2d:5e:d4:11:da:2a:91:37:0c:a6:ae:
b9:82:0f:bc:73:ea:64:0d:64:61:06:fa:5d:a3:da:8d:76:af:
ea:cc:ed:c5:55:53:ef:45:8c:34:97:6f:45:af:43:6a:98:c9:
da:db:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:31 2026 by rpki-client