
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: W+MB1f61JP7IrTXGKuTZReCGJRwHgoEAXMos6QVIeXo=
Subject key identifier: F3:5F:2B:A0:CF:D1:0E:6C:32:3B:13:6E:82:D4:47:19:1A:F1:C6:60
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0969
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 091B
Signing time: Wed 22 Jul 2026 21:00:59 +0000
Manifest this update: Wed 22 Jul 2026 21:00:59 +0000
Manifest next update: Wed 29 Jul 2026 21:00:59 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: kVWfGD3h4aNte16R3BaPlouGHImtAzVhgK3wG3pAwrc=)
2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: bKALx6YD+Z5QL+SPXX75fMgztzxC7lFsCyk2pATWF3g=)
3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: Jul 22 21:00:59 2026 GMT
Not After : Jul 29 21:00:59 2026 GMT
Subject: CN=6a612f8b-8fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:50:ba:d9:48:af:61:71:75:f4:8a:58:4d:
62:c6:c8:c9:22:bf:79:be:df:7b:6f:f6:a5:f7:78:
5f:03:7f:41:43:3d:95:ef:ba:34:7b:38:46:89:24:
13:d8:4a:db:b9:8b:8e:43:fa:73:f1:03:7f:f1:46:
c4:bc:91:a6:9f:e3:fd:12:49:1e:af:da:68:82:37:
cf:d2:15:59:da:61:40:d3:43:bc:aa:9d:39:77:81:
99:02:2f:0d:ba:a5:8f:a4:4a:36:5c:fa:9c:d0:99:
02:2e:f3:8d:0c:2f:e0:24:8f:b4:a9:21:7c:91:33:
f2:d3:90:f8:d7:a6:d7:24:13:b6:8f:93:14:b1:69:
ac:1d:c8:32:30:21:a8:7e:0c:8d:8c:fb:04:17:64:
25:bb:07:10:21:79:19:94:4b:29:7c:3c:40:1d:6f:
c7:d8:62:bb:b4:33:31:b1:c1:2e:cb:02:b3:54:3a:
60:87:08:50:60:95:f0:2d:ee:45:ad:8a:41:79:d0:
7f:33:0c:76:ab:5f:49:3c:90:2f:ad:48:d8:4d:d0:
7e:ec:3a:f9:3d:6d:86:ec:32:d8:d2:b5:ec:eb:9e:
8d:a5:26:69:5b:42:3d:b9:b8:50:c5:b5:3b:bc:36:
d1:99:03:00:19:99:2e:f5:be:9b:a0:d8:d0:a8:36:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:2B:A0:CF:D1:0E:6C:32:3B:13:6E:82:D4:47:19:1A:F1:C6:60
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:74:b9:74:bb:4c:ba:82:89:fb:fe:3d:63:12:92:2c:09:
c9:c6:6c:86:c1:63:87:e9:32:7f:3d:0a:af:d0:e9:15:6a:02:
ed:fe:05:61:91:10:ff:6b:7e:de:14:b9:d9:8e:40:6c:ad:09:
cd:fa:56:2c:6d:8f:5f:08:46:44:ec:e0:ab:9e:50:45:11:b2:
ce:ae:9d:da:d5:1b:fa:49:c4:89:7e:95:4c:7e:5f:6e:e8:40:
0e:6c:7c:0c:04:94:a1:03:35:44:58:1d:3b:5a:97:69:20:b1:
15:b4:22:29:a1:ce:43:49:cf:e9:9f:30:b0:b6:65:f8:22:0c:
ed:ad:89:df:cd:09:7c:64:2e:2b:74:b3:66:86:51:7a:22:cd:
84:d9:a9:0e:eb:7f:d7:c5:08:9d:a2:82:9e:45:45:a5:de:9c:
a7:0b:8c:e1:49:05:38:ef:39:1e:d6:33:0c:d6:3c:5c:b1:25:
89:b0:c2:a4:1c:b7:6b:4d:c7:5c:54:bc:ec:8b:47:9a:61:a9:
7b:26:c6:eb:b6:ce:26:96:03:e5:f0:9d:7e:02:e3:af:3c:32:
c3:15:6f:d1:ce:b9:ec:50:85:14:41:d4:8c:ec:25:32:14:e4:
23:34:e8:37:1c:95:e2:fb:b6:39:23:44:4e:b0:af:c6:74:b9:
56:0f:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:58 2026 by rpki-client