
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
File: pSAa7m9KXB64p-HHhTv7srp1y9I.mft (raw, json)
Hash identifier: zIQ8+5R7CWG6RPhsO5GXdZ5mpoGwaavZP4duxbT3ueU=
Subject key identifier: 4C:7A:24:32:69:5A:73:56:8F:BD:8F:82:1F:4C:D0:7C:CA:43:96:FF
Authority key identifier: A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2
Certificate issuer: /CN=A91D1003/serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
Certificate serial: 0C47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
Manifest number: 0C3A
Signing time: Wed 22 Jul 2026 19:04:11 +0000
Manifest this update: Wed 22 Jul 2026 19:04:11 +0000
Manifest next update: Wed 29 Jul 2026 19:04:11 +0000
Files and hashes: 1: pSAa7m9KXB64p-HHhTv7srp1y9I.crl (hash: xGWonlvZ6XyR36BJKKj+wxcvgazBNmRn93Swlcb1sPM=)
2: 0DC2568E320511EA8CF6B72DC4F9AE02.roa (hash: lrXJAG9pwB68/9ymul53XjFddHdzlUams6o2moAtAtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl
rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1003, serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
Validity
Not Before: Jul 22 19:04:11 2026 GMT
Not After : Jul 29 19:04:11 2026 GMT
Subject: CN=6a61142b-6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:f6:05:80:af:0b:7a:93:bc:68:88:1e:9f:
48:dc:5a:fd:89:01:36:72:64:2b:89:58:dc:8f:ac:
54:66:76:ed:e1:12:16:95:d0:48:6a:b7:18:e7:33:
51:8b:64:2d:50:33:90:6d:09:f8:bc:01:dc:dd:6b:
b4:7a:11:5e:2e:4b:8c:42:d7:73:3d:b1:5e:4c:50:
d2:68:39:28:83:17:9b:b0:c0:52:94:84:e1:89:3d:
c6:cf:59:46:d4:06:ef:cb:88:31:58:7f:09:ab:18:
f7:c7:dc:fc:ea:b5:6d:17:80:9d:bf:db:73:6c:a1:
26:e7:16:b6:cd:e8:ff:f3:ed:e2:2e:1f:ea:04:24:
ca:52:3e:7d:38:35:eb:2b:da:ac:fd:47:71:4a:a4:
cc:b3:89:38:58:96:db:01:26:c1:0b:6e:67:55:98:
68:32:cc:28:86:89:b6:84:24:90:d4:f5:38:41:0a:
f8:51:ed:b4:83:5f:0d:78:15:82:65:88:98:7c:3a:
ee:7e:4d:ba:ad:08:f9:fe:a2:1f:72:c2:86:ac:ca:
b8:08:e4:be:d4:57:97:f0:20:f4:c2:ea:a5:01:01:
75:8c:78:eb:7b:5d:51:52:31:23:91:6c:e6:dd:51:
9e:e3:c9:f2:ba:6e:6d:d1:65:4c:0d:46:16:21:c2:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:24:32:69:5A:73:56:8F:BD:8F:82:1F:4C:D0:7C:CA:43:96:FF
X509v3 Authority Key Identifier:
keyid:A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:1d:5a:04:3d:46:a4:22:d2:21:fc:b5:fe:d2:74:f5:17:
b9:fb:3f:36:ba:42:d5:da:2d:b1:5b:3f:8b:64:2d:6a:90:80:
21:ac:c2:8c:90:5b:78:bc:fc:50:92:c2:a8:41:ba:dc:16:42:
9d:af:65:71:55:2d:95:90:e2:da:9f:fe:ed:36:89:6b:ef:fd:
a2:5c:e6:8f:ed:60:eb:d5:c0:c1:74:ad:47:7b:78:c1:97:bb:
d9:2b:de:76:83:b5:aa:d6:df:ba:fa:a6:72:5d:b6:cc:0d:41:
a4:8e:73:cf:4c:b9:13:7d:a2:4c:b6:03:a7:cd:65:a1:fa:ce:
b1:c6:9f:96:74:e4:d6:81:89:32:0d:69:f7:a8:5b:a9:5f:cc:
ec:67:bf:f3:66:38:96:65:bd:73:9a:42:14:cd:cb:fd:57:b1:
e0:04:76:b2:83:42:c4:0e:17:98:bf:22:00:fc:07:77:32:e2:
cf:4c:6f:cc:16:f2:1b:1a:4c:79:0d:c9:4e:08:11:bb:fb:d3:
0c:68:0d:da:a8:10:84:06:91:c1:cf:97:94:39:86:e1:57:df:
43:8e:58:17:ca:d6:ce:c3:2f:e5:c6:54:2c:9f:dc:a5:dc:a4:
3c:3e:d8:a2:14:9c:86:4e:f1:9c:f9:7b:2b:6a:7a:38:83:ba:
6f:03:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:47 2026 by rpki-client