
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier: XvI8V2PNhWR4r1fQ3Bg0xAfYEbZYYe59DNyZ6f6cN5w=
Subject key identifier: 5E:DB:AC:10:F8:15:6D:76:B3:C1:8C:8B:80:DC:91:DA:43:A0:3B:FE
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number: 08BB
Signing time: Wed 22 Jul 2026 21:01:03 +0000
Manifest this update: Wed 22 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: /ZsbwSckMF8js8oG8OABvyNInzagz3W/DhvPgSpajYM=)
2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=)
3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Validity
Not Before: Jul 22 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=6a612f8f-d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:ee:f9:8f:07:6f:1b:ca:e9:f3:2e:aa:9a:
2e:3b:fe:0f:db:24:97:28:82:54:e6:25:d7:ad:36:
b2:16:c2:1b:7d:ef:d6:75:f8:a4:67:e3:7d:46:8f:
2e:07:f1:0a:a0:2d:bb:02:c3:ba:17:3c:d0:10:c3:
39:6b:15:c3:12:de:07:6e:f7:f1:89:53:82:63:26:
25:81:a8:b7:89:17:77:89:5d:12:4a:41:8e:3b:95:
19:fb:17:08:ff:a9:4f:ff:3f:f1:29:27:00:2c:76:
16:14:e3:5f:99:b5:83:3d:f2:25:72:fb:f7:ca:7f:
50:5e:d3:23:16:12:b9:16:73:ea:5a:3d:f5:09:e7:
55:02:9c:d7:34:96:5a:7b:37:62:8f:f6:3a:d6:b7:
76:45:2d:a1:de:21:8e:21:be:4b:4d:ac:ac:31:ee:
be:16:8f:d1:af:47:ef:79:e3:0b:63:34:6e:58:b5:
19:93:1b:63:fe:04:94:1c:9f:b4:79:99:64:56:b1:
77:c8:20:fb:03:13:73:af:7b:fd:bf:31:82:fb:cf:
ee:cf:d8:3b:71:53:06:d9:45:40:ea:54:07:dc:53:
ac:66:de:7c:c0:de:fe:7f:18:90:cc:0a:80:ba:b6:
a3:1d:55:53:1d:1e:df:6f:56:8a:93:42:25:59:5e:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:AC:10:F8:15:6D:76:B3:C1:8C:8B:80:DC:91:DA:43:A0:3B:FE
X509v3 Authority Key Identifier:
keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0b:f2:4a:9d:9c:fa:6a:0e:bc:c8:19:df:be:ad:8a:a7:95:
94:9b:28:e2:a5:b4:fa:e3:71:57:af:81:70:a9:53:72:44:5b:
70:b0:eb:28:a0:cb:76:d6:d4:b4:d0:9c:ba:8e:3d:87:63:0f:
9e:f3:ef:cc:86:3f:33:6a:62:35:25:78:ca:23:72:b7:7d:c1:
31:a1:64:51:85:bb:03:68:d6:85:4c:06:e4:c9:1d:44:41:de:
c2:27:0f:46:4a:5a:23:27:5f:9a:24:90:4d:08:ff:45:0a:b7:
12:2d:41:3e:53:cb:04:bf:fc:ae:6d:3d:06:91:f6:32:1f:00:
cd:d7:79:64:64:9d:5a:76:af:ad:20:0b:a8:3a:d5:34:56:8a:
7f:99:ac:02:74:ee:21:c5:04:90:49:84:28:36:8c:d3:f4:ac:
e9:44:96:02:55:a5:c8:7f:a8:02:e2:da:68:e9:8c:63:5b:ba:
70:b7:30:45:9d:c9:e6:d4:f8:1f:4c:8b:c4:c5:5a:60:a5:a8:
fb:13:83:7c:e6:99:48:65:22:4c:e0:f2:a1:6d:35:9a:8b:f6:
cf:b2:69:f2:0a:82:ec:eb:d2:52:e3:a7:a1:02:8b:ab:fd:1d:
b2:24:6d:3c:27:22:f2:4d:96:8c:d6:5e:45:64:94:15:0b:2c:
3a:69:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:12 2026 by rpki-client