
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier: lF/wctOpSzC6yzMghB+dEUs95L52Phkk/HMOnqJyuvw=
Subject key identifier: AF:1E:AE:80:7A:CC:0D:0B:A7:85:62:42:A8:6F:95:66:99:76:3C:35
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number: 04B3
Signing time: Thu 23 Jul 2026 00:48:30 +0000
Manifest this update: Thu 23 Jul 2026 00:48:29 +0000
Manifest next update: Thu 30 Jul 2026 00:48:29 +0000
Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: Ouze8PWg3Nui8JYZhmODcEJ9Rw4oObAVcYcW3lBSi4w=)
2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: /1zPPqOprES64oKSnzNIO7onohzBHekwOoaFlHoU8GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Jul 23 00:48:29 2026 GMT
Not After : Jul 30 00:48:29 2026 GMT
Subject: CN=6a6164de-b9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:25:87:90:e5:5a:7c:66:75:49:fc:bb:d1:
1e:75:60:cc:5d:6d:2c:95:66:f9:eb:5f:d5:a8:91:
3b:5a:48:03:e2:99:82:22:03:f8:1d:51:7a:66:13:
51:86:ca:c9:02:cf:24:48:98:0e:b5:9c:4e:dc:4f:
ac:58:14:69:d3:77:2c:58:46:c6:40:cf:bf:4f:82:
43:b0:f8:48:eb:d7:1b:66:c5:fe:3e:34:61:e2:f4:
d7:a8:e2:71:37:83:e5:64:4d:84:bd:0e:20:b4:3c:
06:1e:ea:c4:67:f5:a1:c5:b5:fc:f6:49:96:5d:09:
eb:36:3a:ff:d1:4f:5e:d4:5e:56:7a:ea:36:dd:a5:
2b:51:9b:2e:e7:15:71:1f:68:f1:f5:cf:aa:e1:06:
e0:73:84:a5:bd:22:8a:dc:ce:37:91:16:b6:3f:c2:
c6:b3:e3:92:10:e2:45:e1:34:2e:ac:10:05:5e:d9:
5f:24:41:fb:44:4b:7a:6a:a3:8a:11:d6:7d:43:1d:
30:4d:9d:bc:f7:4c:4f:39:0e:e7:11:64:84:16:27:
30:52:f6:c6:45:fe:71:29:27:2d:87:df:ff:8f:ae:
9a:12:4b:54:52:ba:c6:b9:2f:c1:72:2c:a0:4f:f0:
ec:11:25:16:0a:75:36:30:22:8b:28:bb:3b:23:3c:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:AE:80:7A:CC:0D:0B:A7:85:62:42:A8:6F:95:66:99:76:3C:35
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:57:f8:71:1a:7b:65:1f:23:75:66:6e:a7:32:88:0e:c6:
cd:16:a5:c2:41:61:65:c7:90:6d:9e:f5:e3:78:d5:1d:5e:30:
9e:15:63:cc:48:b0:af:5a:6d:c6:17:e4:24:ce:e4:d3:c3:7e:
25:70:a0:ca:eb:cd:31:53:4a:95:36:36:d9:65:a4:26:85:82:
9d:b7:77:bc:ad:8d:ff:97:36:cf:12:f2:03:d6:1b:55:84:77:
ad:32:65:96:15:2a:ad:ef:e9:1b:5a:54:19:46:9c:3a:11:09:
96:8a:ba:ee:8e:de:cd:cc:db:5f:9a:b2:28:78:82:67:5c:2f:
fc:e0:c0:c7:e2:d0:6b:3b:87:fe:0b:a1:4d:ec:d3:04:30:6c:
9e:4c:ce:aa:bd:0a:ce:05:8e:94:3f:d1:d6:ed:f2:2e:b7:49:
6f:dc:da:7d:0b:64:c5:fc:6f:45:da:1a:bb:a7:f7:d5:a6:91:
1f:2d:4f:5c:f7:e7:4b:64:f0:b3:4d:92:28:94:ae:73:2d:e6:
f6:fc:ce:99:36:61:ec:28:45:52:9c:2b:4d:8d:b7:4b:4a:9a:
d0:59:c2:4c:97:ee:30:11:21:46:36:8f:46:6d:e8:8d:87:de:
4f:c8:fd:5a:eb:87:a0:99:2b:15:f1:88:30:eb:81:8e:cc:00:
5d:29:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:45 2026 by rpki-client