
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json)
Hash identifier: BCFq6t+eOJj2V71rl80zc1rzEMM4Di+MNSBoiNwu6oY=
Subject key identifier: 8F:F7:BB:C2:E2:AE:EF:DC:10:67:58:28:69:76:20:F0:A0:41:4E:68
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
Manifest number: 01A0
Signing time: Thu 23 Jul 2026 05:42:03 +0000
Manifest this update: Thu 23 Jul 2026 05:42:02 +0000
Manifest next update: Thu 30 Jul 2026 05:42:02 +0000
Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: oUNm6AD54tqHRwyeC5jNJD4qOHXX41NSQZ4ZEeKeggw=)
2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: z7i+8JDtkwBXsJiBRuHLiPii7t2O94h0fmBQOSB0Z+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Validity
Not Before: Jul 23 05:42:02 2026 GMT
Not After : Jul 30 05:42:02 2026 GMT
Subject: CN=6a61a9ab-249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:37:5e:4b:88:91:5e:e1:9e:e3:f0:3a:f2:
50:32:f9:8c:60:36:e5:f9:71:c0:7b:db:cf:0d:72:
78:70:7e:33:79:44:33:d7:b6:9d:84:17:3c:81:d7:
f2:85:6a:0c:b8:98:f2:64:9a:d4:96:1c:38:60:3b:
9b:2f:3d:18:0c:e5:9b:59:5f:72:e1:c5:36:bc:5f:
9a:f4:75:f9:72:9e:61:f5:fa:9b:43:0e:0c:f4:65:
43:4e:02:65:00:79:7d:9a:a6:85:bc:f7:39:e7:9e:
b4:d1:23:4d:8b:af:ba:50:33:d9:22:8d:af:87:24:
b0:99:a5:57:64:75:7b:46:e0:83:62:d1:67:a5:de:
cf:4d:b0:89:3f:57:fc:8a:8b:42:d8:a1:1d:26:c9:
a9:9f:60:b0:a0:85:b9:c3:a6:5f:61:e3:df:ca:8d:
aa:04:6c:c3:7c:d8:69:80:0c:20:96:29:43:17:ed:
92:75:8e:6b:a8:06:22:94:d0:0c:88:b3:e9:10:94:
45:42:c4:f5:a1:e0:5d:1e:3f:44:c9:3b:17:ae:c2:
8d:06:3f:5e:6b:2a:7a:9a:78:b9:48:ef:ef:b9:ae:
4c:be:08:e3:5e:a1:60:ba:97:90:d8:52:91:00:e1:
95:be:eb:ce:36:b1:4f:81:98:57:02:bf:59:4f:96:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:BB:C2:E2:AE:EF:DC:10:67:58:28:69:76:20:F0:A0:41:4E:68
X509v3 Authority Key Identifier:
keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:e9:6a:95:19:32:46:c5:c3:31:71:46:a8:3d:cf:85:fc:
04:fb:5a:c7:a9:b3:52:f0:a4:92:7c:26:3f:03:6d:d5:69:38:
17:be:cc:6f:84:c8:87:eb:9e:54:80:fc:dd:90:7a:df:0e:82:
26:d2:99:ed:ce:17:93:2f:4c:30:24:f8:d5:c2:63:72:2e:2d:
a1:40:3c:b0:b6:b1:a5:d0:f0:36:fe:a8:8a:67:5d:cc:8c:6d:
b6:5e:98:9d:e4:4d:f2:e1:e1:21:f4:e3:6e:5c:56:15:53:a0:
98:15:7d:39:59:50:37:49:c4:8d:d4:7e:ca:ff:d5:dd:05:ce:
ac:b0:14:14:44:f1:3d:df:f8:e8:9e:4f:a7:51:84:b4:16:58:
77:59:1e:2a:96:70:b6:86:9f:7a:29:fa:0c:22:bc:45:e5:2e:
17:8b:28:2e:6a:e5:c3:99:9b:27:48:6b:2a:86:ff:81:61:1c:
bd:73:9c:8a:45:7b:ee:a8:c3:dd:a8:f2:f2:e9:c4:74:0a:1b:
67:8b:a9:0e:45:3d:02:80:72:f4:7f:81:89:d9:ce:2b:c8:03:
46:e6:97:01:39:a4:74:42:50:42:d7:12:6a:2f:c4:06:79:46:
d3:11:68:1b:ce:af:8c:d7:4d:c1:2a:8d:89:a2:07:37:f5:0d:
fe:88:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:35 2026 by rpki-client