
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier: b9NiROdpfkLbUbS8jVBtvy6wWrVLENCXmmE+IQ0zBLY=
Subject key identifier: 58:A9:0E:35:5F:38:F6:9D:5D:D8:9A:B1:D4:D1:BB:16:0D:2F:18:DA
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 02D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number: 02AF
Signing time: Thu 23 Jul 2026 02:46:01 +0000
Manifest this update: Thu 23 Jul 2026 02:46:00 +0000
Manifest next update: Thu 30 Jul 2026 02:46:00 +0000
Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: +gaxaa5QfTDQbrXbB2nMTN0UkC9AJcIoTW4G91hIJ3I=)
2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: Hb11VPodi8i0P+rMM2y+1RDJ6AN+xMk67SgHzAaL58I=)
3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: Jul 23 02:46:00 2026 GMT
Not After : Jul 30 02:46:00 2026 GMT
Subject: CN=6a618069-1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:a3:8a:40:50:25:8b:77:06:ed:9f:25:97:
9b:f0:d9:06:1d:6c:e1:c2:95:eb:1a:84:00:72:56:
ec:17:8a:79:b9:3e:a7:44:32:8a:bb:0b:09:6b:4a:
f1:52:27:3f:68:91:a6:3e:46:d1:18:b4:9d:fe:d5:
8c:d3:f5:cf:7c:32:ce:fe:4d:45:cb:b8:9d:e5:5d:
ef:db:54:fc:af:de:83:3b:91:9b:14:f8:07:83:14:
75:f9:ab:c7:74:d4:63:22:56:be:8a:43:cb:07:11:
61:81:f8:16:f6:0e:46:4e:2d:5e:76:c3:11:a4:44:
e7:d9:f0:3f:78:ed:da:78:c7:0b:1d:98:4a:e3:ec:
e2:98:d8:02:a7:e8:0c:a3:9b:86:43:85:7c:6d:e4:
d7:cb:7b:bd:8f:ea:71:52:f2:ad:01:df:db:99:31:
d6:60:5b:64:9f:3d:95:13:0f:4a:a7:d0:4e:64:4d:
68:21:8a:b7:ca:b2:20:f0:26:88:14:11:3b:0a:8d:
a5:b3:37:d2:fc:c5:f7:b5:56:38:d8:f8:d6:c4:ff:
e7:45:90:61:6a:2c:60:92:2a:71:a9:81:41:a2:49:
97:3c:95:01:ab:25:c4:d4:f8:7d:c3:9a:21:8c:08:
3e:58:f7:ff:bd:a6:f0:f7:25:38:11:68:06:c3:2a:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:0E:35:5F:38:F6:9D:5D:D8:9A:B1:D4:D1:BB:16:0D:2F:18:DA
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:7e:e5:9c:5e:27:c3:e8:39:78:00:55:3c:02:eb:3f:51:
18:3f:77:8a:5f:50:8c:de:fd:7c:71:ed:20:7c:8b:7c:c0:4a:
91:9c:c7:29:86:7c:83:fc:83:97:06:f2:34:fc:2d:8c:77:15:
fa:f8:b5:ca:8c:e5:ba:29:ca:18:9e:94:25:dd:8d:16:41:c7:
ad:b5:d2:74:af:81:44:81:53:ef:3e:9a:a1:a9:f1:81:71:1b:
a9:34:e7:80:44:1b:35:d2:da:fb:62:04:a7:2c:37:4a:0c:ff:
4b:d5:7e:c4:9e:a9:d1:c1:b5:e8:fd:9a:6b:d3:44:40:9c:29:
27:11:53:83:df:56:b6:33:db:01:e7:cb:a8:24:bf:41:22:1e:
64:bd:be:d2:33:c3:48:1c:c6:e6:b3:35:ed:79:a1:e5:a6:36:
1c:95:45:83:2c:75:2b:cc:4e:27:2f:e6:ff:7d:40:05:70:0c:
55:84:4a:3b:f6:b1:88:95:c9:dd:67:97:bf:b1:35:de:30:25:
ab:4c:15:95:a3:1c:8b:13:cd:fb:1c:2a:75:63:82:78:4c:2f:
90:63:86:d6:be:94:16:af:11:d4:60:bf:82:97:01:e3:1a:bb:
c0:08:b7:91:4f:87:e9:66:e5:43:e7:b2:a6:39:91:5a:12:7c:
93:8e:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:41 2026 by rpki-client