
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier: 9oMD7gxK67oD0Xn6mc8UklTTU09qqE5NhTyeMLaclMI=
Subject key identifier: 54:8A:55:75:82:A5:EC:04:BA:F8:4B:BE:71:B3:A2:6D:84:2B:6E:9E
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number: 0479
Signing time: Thu 23 Jul 2026 00:55:32 +0000
Manifest this update: Thu 23 Jul 2026 00:55:31 +0000
Manifest next update: Thu 30 Jul 2026 00:55:31 +0000
Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: vUr9EqXHQyfwm5DMpbM89+OObfLo91kM1HAaqwdry1w=)
2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Validity
Not Before: Jul 23 00:55:31 2026 GMT
Not After : Jul 30 00:55:31 2026 GMT
Subject: CN=6a616684-00c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:10:5c:7e:2b:7a:d7:df:7d:6a:7c:5f:29:
7d:e6:87:5f:20:1c:fa:c7:ce:d4:c6:2b:c7:f1:c3:
93:75:d7:b7:1d:b5:87:d0:ef:be:1d:d3:b8:40:61:
0a:7e:65:76:35:58:ad:8b:42:55:d2:56:3f:af:aa:
1e:ae:64:d3:2b:46:97:45:62:87:15:6f:28:f1:60:
c9:77:8c:65:a4:fd:8c:e7:92:c7:f5:bb:cb:ac:49:
14:49:c4:1f:fc:f5:33:89:45:96:50:2e:4f:b1:43:
32:74:41:38:a3:cb:44:ae:dd:8d:4f:18:8e:e3:b3:
17:3b:17:de:43:22:5f:f2:48:0d:36:f8:ef:0f:ad:
f3:a9:7c:da:de:f5:9a:2d:6f:5b:ef:70:9c:9b:fc:
23:f0:b0:c9:38:2e:0b:04:61:56:8d:42:2a:e5:a5:
09:e2:58:ac:11:e8:e4:eb:b8:e3:19:f6:15:e7:13:
03:b0:ae:23:31:f6:13:0f:a7:82:61:1d:7c:d0:4d:
95:37:d0:0e:c3:39:fb:61:d6:f2:0f:25:cd:dc:08:
19:3f:73:53:03:2f:7e:5a:16:41:7b:d3:70:51:cc:
df:84:33:5d:d6:30:b3:f1:20:64:b9:18:ad:9a:b5:
57:1d:06:30:a3:7e:f0:01:8d:cd:45:7d:46:b8:dd:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:55:75:82:A5:EC:04:BA:F8:4B:BE:71:B3:A2:6D:84:2B:6E:9E
X509v3 Authority Key Identifier:
keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b2:41:6f:84:d3:9b:07:85:75:1c:f5:aa:b8:25:ff:60:9b:
4f:8c:dc:19:27:39:0f:0f:cb:ca:cd:32:af:89:ad:f3:5f:82:
56:72:be:46:c2:57:29:65:98:b9:d8:d5:ca:65:73:1b:f6:8e:
26:e8:6a:dc:65:45:a0:99:5d:0e:a5:d9:08:18:c7:52:18:0b:
1d:23:f2:e5:a8:b4:ba:08:ea:d4:b6:66:55:12:98:67:0d:f6:
08:fc:20:e8:37:e5:1d:9b:fc:c0:e1:5d:eb:c0:6f:df:14:c1:
d6:88:b9:fd:d7:78:7a:f2:ab:fa:16:f3:6f:78:d0:ac:d4:95:
b3:cd:03:2d:3a:17:d2:86:fe:d6:5f:c6:6f:41:13:9f:40:ef:
60:c6:30:1b:ae:73:a0:81:25:a0:4b:ac:81:bc:96:35:36:92:
ab:7a:cd:3b:25:08:19:f1:b2:41:dd:6a:7f:88:e4:55:55:06:
d2:c1:2c:53:c9:a3:14:7f:4d:6f:2f:81:8f:ba:e2:33:e4:00:
fa:bf:8a:dc:97:56:eb:3c:7d:b1:82:fb:d1:79:18:40:c9:a7:
ae:b4:4f:f2:3c:33:8b:80:93:f0:12:21:0b:60:99:e6:e2:08:
fb:53:18:94:01:6a:dd:14:a8:96:d5:88:c4:68:e3:8c:4b:26:
c5:07:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:04 2026 by rpki-client