
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json)
Hash identifier: 4drNuYHat3LnWPXms+beFkFe0b1jpLOK8XF1a7f8PPI=
Subject key identifier: A9:94:DB:26:63:AA:39:BF:D0:A3:E9:CB:4E:13:00:5F:82:51:38:D8
Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Certificate serial: 2EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
Manifest number: 2E9A
Signing time: Wed 22 Jul 2026 15:33:09 +0000
Manifest this update: Wed 22 Jul 2026 15:33:08 +0000
Manifest next update: Wed 29 Jul 2026 15:33:08 +0000
Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: 7QWA907HiZNNngBcIUYoln8icULogLZ0SQFY9dXWVCs=)
2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11961 (0x2eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Validity
Not Before: Jul 22 15:33:08 2026 GMT
Not After : Jul 29 15:33:08 2026 GMT
Subject: CN=6a60e2b5-c3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:b7:66:1f:ef:05:01:c3:58:61:82:ff:34:
b1:a8:3c:03:d8:d6:dc:e4:89:fb:ab:5a:04:b7:c0:
84:75:45:e9:1a:1f:b3:8a:d5:c6:8e:3f:08:7c:57:
c0:9c:d2:11:b9:68:67:b4:c5:e6:f4:3c:ac:57:85:
5b:8f:e8:2a:1e:98:59:3d:16:b3:a6:d3:8b:d3:bc:
54:f9:c0:01:84:03:d7:fe:49:1c:7d:7c:3e:b8:90:
40:47:1a:1f:10:66:4b:14:5c:e0:be:32:8d:6a:9c:
ae:07:96:b6:e9:94:47:a2:63:83:e6:5c:d1:2c:bd:
d9:d6:b2:52:92:33:5a:10:82:d5:5d:8c:77:34:fe:
c1:bf:d7:d7:cb:85:51:e1:d6:e9:d2:a9:61:85:81:
20:52:59:1b:cd:24:3e:fd:b6:25:45:eb:3e:ac:2b:
49:ec:d9:ed:a7:8d:92:b1:89:38:7a:22:0d:f1:2a:
c5:37:25:71:6d:f9:ea:26:d5:30:01:37:a2:ff:8d:
ed:ad:19:b3:62:45:39:8c:6b:f3:3f:11:9a:a3:c7:
14:e8:fd:a3:19:f1:58:78:ee:8c:7b:aa:b1:c7:d2:
35:5d:98:ed:32:41:f9:b1:5a:ca:17:14:c9:56:41:
b0:5f:13:91:3e:d4:f1:6a:a6:e2:1b:8e:81:0c:15:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:DB:26:63:AA:39:BF:D0:A3:E9:CB:4E:13:00:5F:82:51:38:D8
X509v3 Authority Key Identifier:
keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:53:0c:56:0d:74:dc:8a:61:d6:a8:89:2b:d6:ca:95:ee:18:
47:b1:11:16:9a:94:15:6c:97:35:1b:4c:b1:60:17:dd:b2:c9:
f2:5c:fc:94:ad:79:97:0f:dd:d4:b8:e1:ea:c8:e5:ed:99:63:
13:43:87:b1:5b:44:77:e2:18:d8:98:80:c2:10:5c:e9:67:51:
45:e6:18:86:43:4b:77:70:0d:75:b2:0b:b2:5c:c7:9b:ce:76:
14:41:3e:a1:74:e1:ce:26:9d:c9:52:b5:7e:4f:85:83:c8:07:
8c:84:9f:28:d5:46:ba:24:e7:cb:e2:0a:64:95:26:e8:6c:d6:
f9:be:1b:b9:da:45:ff:a5:c2:eb:05:0a:b6:6b:94:11:c6:ce:
9e:95:d8:be:b3:b9:ea:c6:f2:a3:5d:33:86:99:35:e4:27:67:
cf:67:b3:79:b2:80:04:2d:73:54:02:40:be:70:94:a1:8f:94:
c4:92:f3:69:59:38:33:32:c4:98:14:3b:c6:fc:f8:d4:d6:dd:
ea:37:b6:ea:61:54:96:85:74:76:7b:c3:5d:7a:e2:3b:3e:23:
f8:15:13:4a:01:1a:1a:46:ed:25:a4:5b:fa:2c:b1:1f:38:13:
34:c0:cf:f2:59:17:59:d3:cc:ee:6b:9d:cb:9f:ef:73:a9:fe:
3e:3e:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:01 2026 by rpki-client