
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: 54Q7GltfdPUd2FgsIO8iYLFOn5HOvpnGfhcTm9P+340=
Subject key identifier: CA:BD:EE:9F:71:FA:50:02:0E:A0:17:14:86:A8:46:EA:7C:13:0B:DB
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 07C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 07B7
Signing time: Fri 24 Jul 2026 22:04:49 +0000
Manifest this update: Fri 24 Jul 2026 22:04:49 +0000
Manifest next update: Fri 31 Jul 2026 22:04:49 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: f8Z1R0nm+m6bTHPtAmBX0ZXmTZMtOS5bS1QzmLViMaI=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990 (0x7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Jul 24 22:04:49 2026 GMT
Not After : Jul 31 22:04:49 2026 GMT
Subject: CN=6a63e181-2268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:fd:1c:d0:e7:00:75:9a:7b:a6:84:d7:77:
eb:17:47:f4:c5:9f:d9:46:d9:e5:5b:23:a6:57:62:
1f:ee:56:23:8c:7f:79:39:4e:9d:d9:a1:5f:a5:97:
7c:b8:a6:c0:ee:09:78:8c:3d:ea:80:a5:08:63:f6:
0d:9d:c5:e2:51:da:fe:64:eb:a0:40:9e:a4:d4:a4:
47:84:69:44:cf:c6:31:2f:41:07:eb:b4:0d:17:45:
12:e5:a9:ba:a3:69:49:15:71:14:64:31:e5:c5:e6:
ce:4e:44:60:95:e0:1f:c8:df:3e:c3:2e:b7:b7:ba:
ba:b6:17:62:a5:0c:82:d3:1b:e5:23:fb:05:d8:fb:
3d:6a:cc:b8:65:7b:5d:45:53:66:5d:f4:46:48:19:
3f:72:eb:e9:a5:c6:a1:32:cb:a7:b6:d4:ef:fe:cb:
6b:2b:79:96:a7:ff:68:ae:e7:93:93:d7:21:22:86:
98:d5:ab:d9:2e:c9:86:df:8f:6e:db:9d:fd:7b:36:
59:c1:41:8d:12:66:89:c8:49:30:11:b7:0a:44:f5:
c7:a7:dc:73:d3:98:ad:43:22:65:7d:99:d8:c8:6c:
ee:0b:74:d2:dc:fb:cf:2c:2b:65:38:22:57:cb:8c:
bc:54:a8:7c:a5:c3:c1:bd:fc:57:5c:b8:71:78:dd:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:EE:9F:71:FA:50:02:0E:A0:17:14:86:A8:46:EA:7C:13:0B:DB
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:31:f7:28:79:7f:cc:22:dd:35:27:f0:98:08:27:f2:98:
61:5a:e7:08:8d:76:91:87:36:58:31:7e:23:ec:9a:7e:a7:d6:
8b:54:8a:6f:fb:03:a4:a7:a9:72:af:06:d0:57:aa:fc:c6:3d:
93:f7:66:75:9b:46:d7:d0:f6:fc:d7:b7:db:29:a6:01:15:ab:
0b:f2:af:c2:a4:3a:c6:88:00:9c:50:c2:d2:9e:f1:8d:81:ec:
f4:79:80:84:2c:af:b8:46:66:12:70:1e:56:b3:70:84:c6:0b:
fb:99:76:08:28:62:26:83:9b:1b:44:ca:13:cc:0d:a3:6c:9d:
6a:93:91:4e:d5:1c:06:c8:d5:81:a2:c1:0e:df:c5:e2:1e:04:
1f:55:1a:6a:c3:5a:76:92:b9:be:cf:c5:5a:0d:6f:a9:48:f7:
34:02:7d:f5:aa:d8:17:bb:5b:88:68:89:4d:cb:56:49:ff:bd:
d7:e7:0e:49:f6:6d:e9:67:59:13:90:9f:84:b9:4b:f2:6e:23:
56:c9:1c:de:c0:86:4b:17:cc:61:13:6a:42:a8:b9:fb:d8:64:
37:60:0c:97:fb:f5:ea:7c:d4:c0:82:cd:66:4e:3e:1d:47:72:
20:0a:82:34:66:ca:4f:c6:c8:0d:2c:33:d4:a9:09:3d:52:38:
39:ac:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:51:35 2026 by rpki-client