
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier: SPPIjZtAemDiedbPgOLW3sTOBAeRoLsbrVc/g8oIxwA=
Subject key identifier: 81:1F:B0:75:23:C3:2E:95:36:A3:C8:F3:79:90:4F:64:01:C9:54:0E
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number: 0246
Signing time: Thu 23 Jul 2026 03:39:52 +0000
Manifest this update: Thu 23 Jul 2026 03:39:52 +0000
Manifest next update: Thu 30 Jul 2026 03:39:52 +0000
Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: DPUQ8n+re6+ueZXScBSm7xaeJ1j7Lwg/3EEW8QJ7P6I=)
2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Validity
Not Before: Jul 23 03:39:52 2026 GMT
Not After : Jul 30 03:39:52 2026 GMT
Subject: CN=6a618d08-934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:54:7c:ba:81:64:d4:5e:7a:d5:ce:6f:b5:
bb:54:23:07:df:fc:af:8d:64:56:73:b0:1e:57:45:
55:53:51:0e:03:24:18:53:08:ad:eb:ae:06:77:a0:
2b:bf:c0:06:62:83:4a:7e:55:99:dd:5b:34:0b:cf:
6b:a0:b7:f1:24:f5:4b:f7:86:a4:7f:93:44:cb:64:
12:4b:d5:9b:1f:36:b5:ae:0f:51:05:41:2f:91:29:
16:8c:63:a5:b8:df:b6:9e:e4:2e:34:da:cb:1d:7b:
59:64:55:26:d1:37:fc:2f:06:d7:19:26:f6:92:ee:
99:73:e2:0a:4a:f1:34:c6:bd:3f:ca:1a:b1:09:1b:
03:ff:e6:c0:63:1f:bb:22:52:46:4e:92:f3:21:09:
d0:d9:d4:25:5b:fb:2e:2a:01:78:9c:6e:9c:0d:88:
1a:74:90:2f:79:ac:ce:4a:f1:fd:4d:98:06:75:6d:
13:d8:37:a4:81:01:e2:e0:71:c0:81:b0:af:c7:bc:
4c:27:03:45:e2:92:0c:3f:fe:3e:7b:90:87:a9:e4:
c5:d4:f3:45:f8:ea:2d:7c:9d:9a:e0:f2:a9:ef:52:
cc:c1:4c:12:1f:2c:48:06:61:29:c0:d2:ad:c5:63:
b0:be:65:57:c6:be:1b:3c:7a:93:2f:44:9f:f5:30:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:B0:75:23:C3:2E:95:36:A3:C8:F3:79:90:4F:64:01:C9:54:0E
X509v3 Authority Key Identifier:
keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:71:85:28:52:43:6a:09:ac:4a:46:18:81:6e:44:15:65:
d5:c0:1f:91:b2:13:95:17:30:a6:14:d3:c9:d4:f0:54:6c:80:
bd:0f:25:56:20:e1:0a:44:4f:97:b6:fe:af:de:b6:a1:17:4c:
eb:67:63:62:01:fb:cb:7d:52:c0:4c:e2:92:38:6a:d8:4a:46:
63:a7:43:3d:0e:61:33:d1:78:7d:54:97:73:30:ad:ba:79:b6:
90:e3:dc:d8:eb:c4:65:14:af:2f:f5:24:c4:75:f0:29:11:71:
89:f5:e0:ca:e4:68:e7:9a:74:2b:78:3e:34:76:02:95:bc:80:
b3:90:d9:e5:51:c3:3e:24:58:ad:26:cd:2b:d0:97:22:af:89:
e0:16:a0:5b:69:dc:7a:1a:fb:f1:e9:ac:2d:71:28:8e:9c:2e:
d5:a0:5a:de:03:da:f8:17:bd:44:ce:45:89:7a:f8:fe:fd:0b:
8f:77:4f:47:d3:15:25:aa:8d:52:72:30:9f:52:a6:a1:f2:2a:
3d:aa:3c:a9:83:d5:3f:4f:d5:f1:da:75:16:27:82:97:dc:85:
7f:b1:d6:07:8b:95:dc:33:15:91:5a:21:47:1d:4f:e4:df:f6:
90:61:b9:6c:d7:36:ab:52:c4:3d:fc:fc:94:38:d5:3c:5b:f5:
74:89:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:14 2026 by rpki-client