
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: Q3yYAONX6pJ9w2c5p2K28DPDtTK/3qHyDJxYM+skgI0=
Subject key identifier: C5:A1:CE:38:76:0D:09:8E:7F:CA:49:A8:B0:AA:CE:73:98:17:E6:AE
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 0243
Signing time: Thu 23 Jul 2026 03:44:15 +0000
Manifest this update: Thu 23 Jul 2026 03:44:15 +0000
Manifest next update: Thu 30 Jul 2026 03:44:15 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: VC22GhIrW+Lf20fb/2DRNV5NfIYh3twj1DoFzKV8e5I=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: 3JU/RdBTU+wotb53bcqVAvYiAzucQIeHWQfmEF0cNOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Jul 23 03:44:15 2026 GMT
Not After : Jul 30 03:44:15 2026 GMT
Subject: CN=6a618e0f-db74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:b2:d2:47:fe:46:b8:75:39:72:00:b2:05:
b4:cf:2c:b6:af:f7:9d:b6:da:85:2b:b7:02:d3:07:
15:a2:56:ab:50:ff:76:ce:83:8a:ec:ca:01:e9:13:
b4:73:3d:36:af:7b:c1:8c:6e:6b:16:4d:97:54:88:
c2:ea:10:f5:62:0a:8d:e9:ab:6e:df:61:7b:d8:76:
5c:96:52:dc:e6:e8:55:66:4d:aa:6a:58:12:d5:42:
63:a7:68:82:32:c4:1b:13:b0:87:8d:68:09:3d:d4:
55:ce:6d:b7:22:4f:b8:70:f0:31:f8:42:e3:ab:bc:
41:64:a7:cc:52:cf:68:65:81:e0:80:33:9c:ab:0c:
e9:c3:28:4c:ea:44:62:cf:4c:c7:83:0c:62:70:0e:
ec:2a:73:b0:c9:49:6a:f4:29:05:6a:7f:29:63:8b:
03:f8:45:e5:3d:c4:fe:8d:32:3f:9a:0c:17:07:28:
25:1e:4b:af:58:0f:97:8c:ac:07:c3:7d:6b:06:f9:
8e:6c:32:b0:5a:9f:81:08:06:9f:c9:f9:17:e4:d3:
4b:dd:cf:21:1c:a5:c0:95:81:c5:c0:0f:57:6e:74:
8d:33:db:4f:83:e0:70:78:3b:30:4e:4e:95:73:49:
37:d4:02:41:1a:8d:bb:05:cd:23:5a:78:dd:d1:6b:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:CE:38:76:0D:09:8E:7F:CA:49:A8:B0:AA:CE:73:98:17:E6:AE
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:48:13:f9:d5:e5:f9:af:38:17:84:f1:37:e6:95:3b:8e:98:
ac:f0:33:0d:1d:5f:67:09:a0:4d:8b:98:29:da:a6:57:14:8b:
88:93:c9:52:1b:67:e7:d6:f5:8b:b4:15:69:d9:08:45:a3:ad:
11:7f:60:67:16:db:1f:10:ad:2c:68:80:75:f4:d6:6d:63:70:
31:99:5e:b4:8c:06:cc:91:c0:6b:95:c0:05:79:92:68:27:31:
2d:24:e0:01:6f:31:72:be:0c:5b:75:82:44:e1:c5:51:cc:c2:
1c:93:0d:d8:26:ce:0e:f0:ed:7a:ad:7e:96:1f:20:52:b5:0d:
ac:fd:b1:86:68:5e:63:fa:6f:7c:13:23:b4:fb:c6:7f:2b:e0:
bb:99:75:f8:8e:52:23:c1:8b:5f:d5:0e:8c:1e:5f:6d:59:fb:
f9:d6:4f:9c:21:96:ab:8f:2b:d0:ec:df:c3:31:11:41:ff:41:
82:d0:55:bc:69:69:69:4b:16:5b:1a:0d:ea:13:49:de:76:92:
11:80:4f:9e:2e:c1:35:33:65:a3:bc:d6:2e:df:98:54:4b:85:
d9:aa:5c:86:ba:00:ac:7a:db:c1:01:0b:06:cb:f8:81:28:cd:
06:39:fa:37:0b:e4:b4:8e:74:c1:cf:09:51:88:41:b6:ea:b0:
64:11:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:38 2026 by rpki-client