
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier: o4Juk0P5+dBOhyhmftbSfW+a5SXBdJ2Ox4eUDkdgnd4=
Subject key identifier: 66:F9:44:05:8F:62:B7:35:D9:56:95:A7:4A:29:6F:1F:55:52:9B:CC
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial: 053C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number: 053C
Signing time: Thu 23 Jul 2026 00:17:40 +0000
Manifest this update: Thu 23 Jul 2026 00:17:40 +0000
Manifest next update: Thu 30 Jul 2026 00:17:40 +0000
Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: dLME15s2F77aT6OerawRmCSC1TxRP4jyitgh/SHy6Mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Validity
Not Before: Jul 23 00:17:40 2026 GMT
Not After : Jul 30 00:17:40 2026 GMT
Subject: CN=6a615da4-e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:b0:77:48:5c:5f:ef:d7:cb:0d:4d:4b:58:
c0:e3:b3:a4:e5:8b:6c:0a:a0:e5:49:4e:2a:15:5f:
6f:dd:e1:45:ba:8a:87:0c:f4:8c:d1:31:03:d9:ac:
3e:58:a1:15:b0:15:33:85:18:13:a5:92:08:c4:e9:
59:62:6e:40:a5:e1:d9:08:9b:33:a5:ec:58:bb:17:
6f:37:71:fd:20:0c:8a:11:9b:a2:54:c2:b9:34:86:
c5:a6:a6:2e:e0:35:68:5f:68:fc:25:5e:18:26:57:
df:5c:c7:54:22:a7:63:d7:82:2d:ea:4e:5f:3a:50:
cd:c3:a1:37:8e:36:2a:2d:fa:a5:4e:af:ac:38:0e:
15:91:28:b2:d0:55:2a:a6:13:ff:03:7e:45:06:6f:
59:b9:a4:9a:c3:a6:ef:f5:01:8c:5a:ed:b8:ea:4b:
9a:b5:8d:53:b6:f7:af:61:69:1f:48:5f:66:e8:ef:
df:50:79:cc:f8:e3:cd:25:66:cb:61:e1:9c:f7:1e:
a3:22:c5:29:09:c6:b8:59:28:02:47:f3:9b:af:0b:
da:09:c9:7c:82:40:8c:1b:3e:03:f3:e8:0d:0e:fb:
b2:6a:ac:11:20:b7:8a:89:cc:51:b0:d4:81:13:ba:
f3:43:48:67:90:95:9d:24:fe:a3:66:e6:38:1a:b0:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:44:05:8F:62:B7:35:D9:56:95:A7:4A:29:6F:1F:55:52:9B:CC
X509v3 Authority Key Identifier:
keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:66:8d:78:fe:cc:5b:78:0b:e2:3a:78:bd:0f:5d:19:85:f0:
ca:b4:6a:f9:59:58:ab:b9:af:9b:a7:45:fa:73:d4:6f:94:1e:
ec:e4:8d:cf:dd:ba:11:14:71:d5:5e:8e:7b:9d:16:26:45:85:
09:e3:56:e3:03:5e:b0:1f:13:20:a1:1b:c0:74:47:f5:07:f4:
ce:08:4b:11:a9:47:e8:e9:12:6c:ff:14:0e:e7:35:c4:15:a4:
05:d3:50:82:3a:db:b6:92:2e:0b:a8:bc:25:14:8d:7d:c9:02:
78:c1:dd:12:3e:f3:73:cd:23:cd:a3:7d:0f:1a:8a:67:6b:11:
9a:d8:60:23:68:f3:18:9e:61:21:24:e2:cf:2a:6e:8f:27:d1:
cb:e3:76:48:c7:30:0b:61:70:4a:f5:4c:b2:38:9f:0e:8f:1f:
fc:78:39:28:f6:67:37:e8:e2:73:98:a5:e9:c3:02:7b:7d:b7:
db:e7:f4:49:dc:0f:51:b9:32:21:c6:df:8f:3b:09:bf:84:0a:
00:35:9d:d8:55:a9:20:81:f5:d7:e3:8d:1a:f1:71:b2:07:a4:
e9:8b:4c:7b:3e:4c:71:87:62:e4:56:b0:d6:f2:bd:4c:5f:b8:
5e:61:e7:c8:60:ee:d5:76:d8:6d:41:93:68:06:30:b4:d6:8d:
86:f7:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:16 2026 by rpki-client