
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
File: rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json)
Hash identifier: rkomEXHj4AH4ymNT2pYPQ9KKfe31yurxYtWwyUhEA5A=
Subject key identifier: 4F:6D:49:2A:CD:56:03:1B:D2:D0:08:D1:3C:AF:5F:FA:65:1C:93:E5
Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF
Certificate issuer: /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
Manifest number: AB
Signing time: Thu 23 Jul 2026 09:02:34 +0000
Manifest this update: Thu 23 Jul 2026 09:02:34 +0000
Manifest next update: Thu 30 Jul 2026 09:02:34 +0000
Files and hashes: 1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: lksRf3EfHWS4ieO6uBy1N3n9YdYkcS6FPp4KMWeovTw=)
2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: n3JoaRohuK3vZGwx1NSLDBtMi6V3V4zWpmj5eBkILR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl
rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
Validity
Not Before: Jul 23 09:02:34 2026 GMT
Not After : Jul 30 09:02:34 2026 GMT
Subject: CN=6a61d8aa-f178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:16:7b:98:4f:6a:28:26:de:7d:67:37:83:
5b:e7:a4:fb:a2:fe:8f:b9:c5:c4:e1:bc:63:c8:ae:
35:b0:3d:fb:b7:4e:49:1f:8c:f0:52:36:c5:ed:b6:
33:cb:30:92:ef:31:11:f1:dd:46:8c:fb:84:e1:8c:
59:8a:fa:b6:24:d7:b9:02:12:a4:94:f9:dc:7f:fe:
53:1b:cf:15:4d:64:4b:00:38:3b:b3:0e:7f:d8:cc:
ad:f9:bd:87:cb:f3:c2:42:a3:44:69:1d:fd:24:13:
bb:bb:af:9d:0e:bf:0c:5a:0b:55:38:91:6e:0e:a7:
c1:3e:7f:4f:7e:9d:52:d1:a0:cf:e0:02:fb:85:5c:
87:7a:f2:bf:a6:3f:73:25:87:e3:df:64:dc:c5:bb:
5c:84:c2:40:95:75:ee:bf:79:3c:ea:85:6c:8d:d5:
bc:ed:46:aa:b8:9e:3e:7c:7b:ce:0b:cf:10:08:82:
af:b4:e5:88:bd:ae:9d:cd:5c:0b:8e:d9:76:6d:57:
8e:4b:82:13:17:50:49:04:39:74:7e:4f:d0:e7:e3:
06:9e:3f:56:c3:be:32:97:b9:90:8d:9c:4d:a8:72:
b5:15:82:91:49:56:68:8d:d0:88:c2:ee:30:30:03:
bf:d1:87:50:09:72:20:2e:8d:20:5e:c1:fa:c7:3d:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:49:2A:CD:56:03:1B:D2:D0:08:D1:3C:AF:5F:FA:65:1C:93:E5
X509v3 Authority Key Identifier:
keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c6:69:29:27:a2:bb:bd:d8:1f:32:6b:b4:1f:26:0c:e4:13:
d7:b4:cd:6c:1e:aa:fd:0c:be:48:97:dd:55:15:f0:cc:f8:15:
00:7d:4d:5c:ac:b0:b3:5b:9f:40:e1:b6:0c:cb:23:df:c1:fc:
65:15:7a:ab:d1:1c:a2:3a:f4:d5:dc:ff:4d:45:90:55:4f:fa:
df:65:5f:c8:3e:e1:d6:4b:6a:a6:32:43:8c:c4:fe:24:dc:5a:
e3:e2:0e:7c:74:f2:a9:25:12:07:4d:94:8d:bc:97:96:2f:18:
86:11:1d:2e:dc:a7:fa:37:40:87:5f:7d:5f:65:ce:53:66:d4:
ef:e2:f9:5c:4e:0a:b5:d5:6c:c8:25:9e:43:81:bd:99:73:46:
a9:2b:fa:c1:99:48:22:3f:ff:d5:e6:bc:70:83:31:93:53:ab:
dc:12:56:a7:73:34:7e:3b:9a:75:ce:e2:fa:46:6a:f6:3e:1a:
ea:ac:12:dd:89:90:9d:4c:92:d7:e2:e3:60:bd:65:d7:26:fe:
86:3d:fb:a8:99:89:c1:4b:f7:07:aa:aa:2a:ff:2f:b9:0f:cf:
a0:5d:54:43:ba:23:7d:71:f7:1e:f4:08:44:4d:bb:7b:c8:94:
a7:07:20:f5:01:b3:80:08:ae:27:6f:e8:42:62:2d:2e:c5:21:
39:8e:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:36 2026 by rpki-client