
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier: vTwQJerV5NY3xXC06thYNV5ceVnTr0Z3q1YSkGA/eZA=
Subject key identifier: 8B:A8:7C:18:F3:02:12:B7:62:C4:65:D4:F1:E7:EB:4A:8A:E6:91:59
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial: 05CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number: 05B8
Signing time: Wed 22 Jul 2026 23:53:37 +0000
Manifest this update: Wed 22 Jul 2026 23:53:36 +0000
Manifest next update: Wed 29 Jul 2026 23:53:36 +0000
Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: oc1wjaXAVKvpj/ss65U2ypQEHN+VE0YWeDA4/HAft8Y=)
2: Sfnoau1p4nQyCYhdbS1yqwztDEs.asa (hash: oeHwimBa5repKOUMjgvQtcXZEIdBswSyYd5r0iIeCns=)
3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=)
4: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=)
5: sqGj_F7T0xSvuoydrD7DOYOYmL4.asa (hash: WjE8a7bssxFoeRxVqoTfMjV9rANOzfHTYw3K71/tV5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Validity
Not Before: Jul 22 23:53:36 2026 GMT
Not After : Jul 29 23:53:36 2026 GMT
Subject: CN=6a615801-a7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:82:94:00:0b:0a:e6:4f:b5:3a:12:88:a1:
54:57:49:2a:05:50:90:7a:91:1d:6c:e0:63:c0:7f:
e4:f2:32:fc:7d:3c:50:63:72:48:70:a4:6c:70:9d:
1d:0a:77:75:e2:a0:c5:cb:52:93:b0:62:93:24:58:
a7:2a:d4:d0:49:34:57:e2:c1:eb:e4:41:9c:c3:c8:
d1:c3:15:97:97:e2:6c:5f:62:a0:9f:99:5a:df:34:
cc:6e:6b:27:c5:e0:c2:f9:c1:9e:a8:da:1f:85:43:
ee:f5:a3:1f:41:57:74:b5:2c:2d:fd:8d:8a:a5:ac:
d5:87:a9:1f:b5:4c:8c:24:7d:02:ce:38:68:03:34:
36:a4:1c:a9:dd:0e:8d:9d:aa:71:4b:4e:2f:fd:e4:
6c:25:9b:a8:b7:1b:89:16:2d:77:11:3f:d7:ea:5a:
e7:0e:76:7b:c5:b3:5f:38:87:86:a8:77:54:95:15:
26:19:6a:a9:a6:67:f6:ba:00:62:60:c4:a4:52:46:
75:ab:6a:26:38:b0:08:58:56:ce:4f:f7:92:e2:88:
df:49:52:4f:42:97:d6:cb:8a:97:64:01:c4:73:83:
15:52:93:e4:44:8b:ed:f6:aa:0f:9c:9c:2a:94:38:
9d:55:6e:59:88:72:60:f7:cb:25:01:b5:ad:0d:07:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:7C:18:F3:02:12:B7:62:C4:65:D4:F1:E7:EB:4A:8A:E6:91:59
X509v3 Authority Key Identifier:
keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b0:17:f5:c7:f9:6d:e2:c1:17:2f:87:83:75:8f:bc:71:03:
b4:4e:10:d7:d4:56:8d:0e:2c:fb:d9:ba:08:d0:5b:3d:8c:36:
54:0b:8e:14:dc:bf:0e:26:20:82:44:ff:7b:3a:5f:f4:04:71:
69:d3:0b:ec:74:90:c4:00:34:9e:2a:d1:ee:62:e2:1b:2a:51:
1d:b1:0f:3c:92:f6:69:e2:0c:e1:ac:83:62:f4:81:7f:ea:b6:
98:31:07:c1:b2:ad:63:38:b2:59:2f:09:b3:5f:13:1f:03:11:
b5:9d:e8:a9:8d:63:09:ff:0a:46:54:96:3b:02:8f:e1:fe:08:
bb:f6:29:9d:60:67:1c:97:fd:0e:30:2b:51:5a:11:5f:13:27:
59:58:c2:ae:0d:d9:43:80:e7:ea:35:15:de:91:98:31:85:dd:
0b:0a:5a:c2:12:f6:b3:fb:ad:94:b9:ed:8b:39:2e:8c:50:78:
69:42:9f:be:b9:fa:f1:83:0e:5b:7a:f4:03:af:47:d5:db:87:
ae:b0:d1:b1:66:16:e9:c7:ef:30:5b:84:75:25:16:a5:07:e4:
5b:94:48:5c:a1:f8:f5:07:da:cb:6a:cb:4b:c3:5d:fa:1b:50:
89:91:2e:0e:32:a1:10:73:a7:dc:9d:d5:ad:5b:ad:6a:90:55:
a6:72:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:02 2026 by rpki-client