
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier: sLvtVtblzwmSvkGOZCyIibn4L5Aj//IXnVDsAtovc48=
Subject key identifier: F2:4B:2B:2B:8B:DB:B9:3B:6F:E4:6F:33:FC:40:2E:E6:FE:18:8C:EF
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number: 0269
Signing time: Thu 23 Jul 2026 03:24:28 +0000
Manifest this update: Thu 23 Jul 2026 03:24:27 +0000
Manifest next update: Thu 30 Jul 2026 03:24:27 +0000
Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: 6eT2dGvBugV7roBrryENNuBckMe4TAY+z1uadl1DdCM=)
2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=)
3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Validity
Not Before: Jul 23 03:24:27 2026 GMT
Not After : Jul 30 03:24:27 2026 GMT
Subject: CN=6a61896c-9aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:06:d8:8a:dc:42:e9:d4:db:52:ad:e3:b5:
0a:4e:0f:b1:4c:36:2a:17:a1:8c:2e:0d:0f:b6:c0:
61:cb:2a:27:28:2f:09:7f:f3:1e:7e:4e:d1:7b:68:
88:35:9a:77:35:61:54:84:6c:5b:dd:fd:38:dc:36:
36:a1:fc:d1:65:17:cc:33:44:0b:6c:4a:f1:d8:d7:
5d:c2:03:39:cd:83:c3:dc:88:28:2c:23:a0:c8:72:
36:7d:96:8f:82:f7:8a:6a:dd:d4:c4:ee:32:5a:1a:
be:d0:a5:2b:aa:05:b6:8a:18:12:cb:9e:b6:52:20:
69:08:e2:59:21:af:08:df:f1:ba:ca:4a:9e:65:cd:
a7:fd:33:d3:16:94:49:f6:f9:bc:17:c4:37:98:9f:
b5:5e:43:70:1b:f5:74:1f:18:88:5e:a5:18:a5:85:
89:2b:7f:79:76:1f:82:6b:3a:88:ed:56:c9:fa:77:
9e:ae:c9:2c:69:d3:ad:81:48:c1:60:0d:c6:41:35:
e8:e6:05:b8:d5:af:4c:7a:a6:4e:fd:41:0b:07:a9:
21:77:87:3f:08:4e:8a:82:b9:c6:b5:09:15:d7:7e:
85:0d:11:b0:a9:05:b4:47:d3:0b:2f:74:58:b5:f3:
a5:fe:d4:fc:87:74:70:d6:a8:63:40:11:ca:f0:eb:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:2B:2B:8B:DB:B9:3B:6F:E4:6F:33:FC:40:2E:E6:FE:18:8C:EF
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f6:63:04:b2:19:96:60:9d:6f:d1:a4:ad:1c:13:29:54:07:
75:48:a7:d5:86:7a:3c:3e:99:53:c3:3c:25:c5:05:25:a5:20:
87:4b:29:ae:15:82:fd:99:36:6c:a5:45:20:2c:29:a7:83:2b:
f2:19:df:a3:f1:41:bb:99:45:b7:99:78:c9:d3:c5:6f:f7:a9:
b3:ba:1f:54:65:49:df:0b:f1:fd:d2:2c:1e:14:d5:eb:1a:26:
9e:72:16:04:e3:f3:c7:02:14:93:99:7d:df:9f:ed:5f:2d:db:
85:db:aa:7e:6b:69:d1:5a:d2:66:e0:bb:c3:61:70:08:af:79:
0d:94:3b:da:7a:99:d5:ef:ce:7a:ca:eb:d5:18:9f:ec:ad:63:
a6:30:30:0a:f5:15:c3:19:3a:80:89:4d:03:24:d6:22:7b:78:
3d:38:fa:d7:ff:2e:af:c5:3e:14:bb:4b:10:1c:09:d1:bd:00:
06:a8:ee:e2:7b:44:ac:17:0e:42:83:4d:61:fe:e5:43:b5:9c:
06:8c:26:00:69:a9:05:7c:e4:f5:25:bd:60:1d:42:4d:c3:3a:
7f:a2:d0:e2:aa:19:1a:10:62:04:24:8a:27:60:4b:6a:ef:e7:
dc:98:fc:c8:af:3b:77:24:97:79:40:ba:84:9c:bb:09:c0:d1:
2a:f8:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:50 2026 by rpki-client