
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: 57MpiAmwKesx0ZDUu7cJYat8uT4rq7cOJR6/JTffAJQ=
Subject key identifier: 43:BE:EE:00:2D:F1:40:8D:50:D7:2A:8D:7B:12:8A:35:30:E9:77:E4
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 09B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 09AF
Signing time: Wed 22 Jul 2026 20:22:47 +0000
Manifest this update: Wed 22 Jul 2026 20:22:47 +0000
Manifest next update: Wed 29 Jul 2026 20:22:47 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: Y5V5U8HwIj5nzt2xQIsyY6vyRJRL3I6H0QLd1hXwZm8=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Jul 22 20:22:47 2026 GMT
Not After : Jul 29 20:22:47 2026 GMT
Subject: CN=6a612697-66c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:24:3d:b2:4c:07:71:42:df:08:9e:43:b0:
b9:fc:ea:cf:ad:d7:d0:d2:ca:83:2c:ef:15:77:7f:
73:c8:42:e8:98:37:00:ac:81:0c:23:61:a3:53:d5:
21:66:36:1d:1f:f6:42:d6:fa:6d:f5:11:e5:17:89:
11:32:ca:75:5f:22:48:84:94:b3:b1:b9:23:91:7f:
73:37:69:23:64:82:0f:c3:28:26:1d:f8:6f:1f:cb:
92:03:99:3a:02:f2:a1:b2:53:ee:ac:48:77:9b:5d:
90:b7:f9:c3:36:59:14:b3:64:ee:23:fc:c6:51:80:
34:86:b4:ee:b9:3b:0b:ab:1e:35:42:30:ea:69:e5:
e4:c6:e0:6a:1b:20:3e:c8:0a:ba:d2:9c:f0:30:43:
3f:8c:71:1b:59:10:dd:a6:a0:bf:20:3e:d1:94:97:
89:1b:99:eb:38:5d:b5:11:55:ce:5f:05:21:51:dd:
b5:87:3e:97:76:92:6b:cf:46:43:c1:16:bb:a7:91:
6f:a2:00:3a:06:3b:75:03:a3:14:96:ba:2a:2a:d1:
04:56:17:18:f8:41:fa:c0:f0:d6:5f:cb:09:68:10:
19:ab:dd:7c:77:1a:40:ba:0a:14:26:b0:5e:29:cd:
8f:de:ad:71:18:a3:59:f1:3b:d8:1d:9f:63:91:f5:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:EE:00:2D:F1:40:8D:50:D7:2A:8D:7B:12:8A:35:30:E9:77:E4
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:3b:37:7d:24:db:ad:8e:ed:c0:4f:1b:81:13:6e:55:00:
0b:b9:4a:88:18:b6:bf:8f:c4:9c:fd:24:63:8b:26:60:7e:f8:
07:6a:bc:13:f9:1e:f8:a1:2e:46:a1:1f:a6:66:d3:1d:21:03:
5b:a0:38:73:91:53:c9:78:21:06:fd:76:62:5c:a2:8e:34:6d:
4d:d1:a0:f4:e0:42:02:d6:4c:db:e3:e6:8f:fa:40:ff:80:6d:
d5:a3:be:2e:af:37:4e:d2:b8:04:9d:71:97:8e:a0:d7:51:d3:
2b:57:c7:36:a7:ff:61:0f:cb:1f:c4:99:ce:23:77:8a:11:ae:
69:9e:d6:0c:e1:e7:35:8d:ee:f7:dc:84:94:65:4a:7d:23:c7:
ff:03:46:70:6f:41:33:67:87:da:b6:40:13:87:f6:6b:67:ad:
1a:a3:9a:8e:5e:22:99:be:4d:a3:53:6f:32:78:65:be:56:f4:
08:d9:9e:72:67:23:36:1f:95:cc:2d:29:0a:30:60:bd:e7:6c:
e5:61:85:35:9b:85:5c:cf:93:08:16:dd:9c:61:ec:0a:a1:b3:
d5:cd:ce:8d:46:38:23:af:24:46:21:55:cf:0b:44:71:f0:89:
6f:55:0e:a0:d0:09:66:ad:17:54:2b:f2:a5:25:ef:2b:20:b4:
df:d7:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:27 2026 by rpki-client