
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json)
Hash identifier: vW6C1MI0IMv5YvWUeJhbnV5Sx3f9FqWLWSlQjuUm5jU=
Subject key identifier: 03:A7:D6:C8:FC:B0:D6:6B:C1:09:06:08:EA:2C:8B:BA:B1:20:4C:42
Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
Manifest number: 06B9
Signing time: Wed 22 Jul 2026 23:03:03 +0000
Manifest this update: Wed 22 Jul 2026 23:03:03 +0000
Manifest next update: Wed 29 Jul 2026 23:03:03 +0000
Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: eiDJ1bOH1yn3zbznkRE1p8aD5Tely9CMpuAcCRVSgkw=)
2: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: Px7VprCh9UfmuPzyDmxkU/m/2aL/ARCAJ3nDQ6rFgyY=)
3: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: INJtLF8qaoeCDqTi9hekv0X3r1aZb5PkSaaKhdeU4+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Validity
Not Before: Jul 22 23:03:03 2026 GMT
Not After : Jul 29 23:03:03 2026 GMT
Subject: CN=6a614c27-17af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:8d:a2:10:d4:7f:a5:4d:f2:e1:99:64:0c:
bf:23:7d:04:f1:c4:93:45:d1:43:c8:72:21:a2:ca:
7f:5f:a5:5e:42:ef:a7:c3:0d:85:14:f8:76:26:42:
01:53:41:3a:3d:29:97:90:97:b0:2d:13:8e:f4:bf:
27:1d:08:39:f0:1b:94:79:ad:c2:4e:53:46:51:5a:
0c:1d:ec:44:a4:2d:9b:4f:8e:95:d9:25:c1:e1:ce:
b3:5f:b1:92:01:7e:dd:9f:dc:d9:a0:f9:d8:48:94:
cc:8c:34:96:df:33:57:00:7d:35:d1:c5:2a:7f:73:
61:19:12:d0:0d:28:5d:c9:72:cf:9d:78:78:61:4a:
7d:36:5d:21:4e:5c:94:ff:54:c7:ec:f8:12:b4:7e:
46:3d:9f:fa:5e:9a:d4:b3:86:2b:8c:a3:02:b0:08:
b7:2f:4d:67:cc:e1:25:5d:05:fc:11:c2:8d:ff:f3:
ab:11:ed:9a:c5:d3:1c:56:92:a4:f5:ce:9a:d9:b3:
cc:19:78:e3:67:e8:60:01:01:c6:25:7b:75:5a:f3:
fa:11:83:3d:30:59:35:c9:8b:ab:2b:db:88:fe:f4:
bf:b2:b8:a6:e8:86:dc:23:80:57:08:55:04:53:81:
d7:3e:b9:74:28:cb:70:2f:1d:b9:78:f2:ce:f0:6d:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A7:D6:C8:FC:B0:D6:6B:C1:09:06:08:EA:2C:8B:BA:B1:20:4C:42
X509v3 Authority Key Identifier:
keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:60:e6:66:79:1d:05:40:ba:5e:ae:fa:af:7e:6e:3a:7f:46:
e8:99:b1:d2:c4:01:a8:b4:7f:ab:6c:dd:a8:6f:dd:dd:f9:80:
b1:4f:f2:67:74:1a:8b:72:94:e6:6d:78:eb:91:e5:60:26:e4:
c4:65:1e:c7:37:26:e9:93:f4:37:f0:6a:9d:c6:0b:95:1a:94:
6c:c8:d8:3d:c2:1d:a5:81:b0:05:73:82:42:a6:ca:57:56:af:
3c:fd:ad:ef:81:76:3e:4b:16:40:d8:5c:fc:66:54:3e:5d:43:
33:91:1d:b4:a2:61:71:7a:17:26:ae:0e:6a:27:16:7c:2c:25:
cd:1f:c6:92:fa:96:a1:97:99:dc:76:89:34:7a:eb:76:86:4a:
36:2e:09:39:8e:0d:d6:72:c4:f3:69:f2:ec:8f:5e:03:d3:f3:
34:3d:c0:3e:52:c9:81:53:a7:52:0a:52:ee:a5:5a:08:ad:3a:
f0:e0:99:bf:ff:e4:1e:91:7d:c6:9e:02:e8:fc:5a:82:eb:09:
79:3d:e3:7e:7f:02:34:71:10:a7:58:bd:f3:45:c4:7f:25:2c:
28:96:15:da:8e:0f:9b:89:70:9a:f8:24:ac:78:8d:39:e1:7a:
0b:e4:2a:d4:51:a8:db:10:42:d3:c2:f4:64:12:a5:b7:01:6a:
f6:3d:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:44 2026 by rpki-client