
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File: pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier: R5O9OG3LufXp7l0dz5r6/lwCotBdxVLfWFseZmcepZU=
Subject key identifier: 44:95:47:3A:6F:BD:00:67:F5:A2:F3:6E:C8:3B:DF:20:C4:08:B1:11
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer: /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number: 77
Signing time: Thu 23 Jul 2026 09:43:40 +0000
Manifest this update: Thu 23 Jul 2026 09:43:40 +0000
Manifest next update: Thu 30 Jul 2026 09:43:40 +0000
Files and hashes: 1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: 8fu8m+h6mrD3+YM/Ugy8w4MdWLUgw2pA4YUHwovFn44=)
2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Validity
Not Before: Jul 23 09:43:40 2026 GMT
Not After : Jul 30 09:43:40 2026 GMT
Subject: CN=6a61e24c-2e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:65:05:a0:28:0d:ec:bc:6f:c9:8f:0d:c7:
11:4b:1d:9d:d0:07:57:0d:01:15:db:cb:24:25:75:
05:48:d7:bd:d6:eb:e1:30:4f:b7:ba:8f:b2:4b:a8:
d5:06:ee:1b:39:ff:ab:97:1e:35:89:91:9b:d7:53:
fd:ff:d5:52:27:56:10:f0:43:9a:2a:39:be:7d:b8:
a9:fb:ee:65:69:8f:14:d9:f7:ea:1f:51:32:7b:bb:
70:40:0b:91:f5:ec:57:ed:7a:a7:d1:3a:55:6b:2f:
84:11:52:75:4b:51:15:dc:72:32:b4:df:ef:7f:c8:
b0:b8:02:95:90:19:40:e1:42:b1:c7:a0:7e:d4:b0:
45:76:3b:d4:ca:88:aa:e2:5e:a6:ab:9d:00:d9:76:
48:87:d0:6c:18:74:86:81:3f:07:b7:d3:f1:a0:88:
8b:43:d1:50:17:0b:c3:0c:48:79:12:15:4e:f8:f5:
04:67:43:38:73:76:31:ec:b6:4e:40:ac:f7:4d:d6:
3c:06:20:6c:dc:38:65:0f:4d:3f:02:4c:bf:db:2f:
9d:86:a1:cc:9e:d9:a0:69:4e:51:f4:66:0d:6f:b4:
b8:2b:18:c5:60:b9:73:12:b2:1c:16:71:ec:b4:d4:
33:41:af:89:13:0d:c1:b3:d3:17:d8:e4:d3:1c:c4:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:47:3A:6F:BD:00:67:F5:A2:F3:6E:C8:3B:DF:20:C4:08:B1:11
X509v3 Authority Key Identifier:
keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:7b:21:17:7c:14:37:10:4e:8b:9f:18:36:04:88:99:22:
9b:74:52:b1:19:72:30:13:03:5e:9c:3a:e6:ca:92:e4:8e:9c:
31:78:fd:e1:fc:90:c6:3a:39:1c:b0:61:2e:4f:90:b9:cb:4f:
01:d1:dd:67:f7:2e:2a:d0:91:5a:11:f8:60:84:71:18:d2:81:
d3:02:a7:97:bf:d7:e6:f5:c8:b6:97:31:79:a1:f2:c5:30:ce:
dd:c6:38:2f:0f:73:81:f1:90:1f:7b:07:b5:5f:17:cc:93:60:
4c:70:35:e6:04:9c:0b:10:7e:eb:70:ba:b0:c5:ea:98:10:c7:
93:35:7f:a8:97:5f:d7:e8:62:4f:96:5b:b6:a6:7c:26:98:fb:
80:61:2c:48:d4:a0:23:52:ae:7a:cc:32:b5:53:6e:38:0d:be:
67:c3:a7:ac:dd:01:e7:ca:4a:bd:ab:dd:6f:73:ea:a3:e4:78:
fe:3f:25:06:93:49:c0:59:b1:9c:56:fe:95:14:42:f4:12:d1:
e2:31:d4:0f:1b:78:26:da:8b:b5:f8:b7:8c:44:e8:e0:0e:4d:
6b:02:50:b0:87:b7:3b:e2:ca:31:a5:38:53:30:9d:fa:ab:b7:
d7:ae:5e:c6:00:b5:19:97:dd:2d:b2:41:c0:23:91:33:b3:25:
f8:5b:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:09 2026 by rpki-client