
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier: n8VnThPA3VGq+ymHUpcX49NcoAYleUPaJjB9kr6IM4Q=
Subject key identifier: 1B:F9:DF:08:43:D6:B9:32:90:D0:6A:58:5E:A6:D2:14:A8:06:A9:57
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number: 0336
Signing time: Thu 23 Jul 2026 02:00:06 +0000
Manifest this update: Thu 23 Jul 2026 02:00:05 +0000
Manifest next update: Thu 30 Jul 2026 02:00:05 +0000
Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: CylyHGVfa1l7nKYbXPbGJL4GtnXm+4KnrtFRoo7HZfM=)
2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Validity
Not Before: Jul 23 02:00:05 2026 GMT
Not After : Jul 30 02:00:05 2026 GMT
Subject: CN=6a6175a6-2f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:76:49:46:9b:39:02:e6:1e:55:84:bd:17:
36:04:f6:3a:35:5d:35:9c:ee:6e:c5:13:0d:f2:89:
00:d4:5c:f9:b5:57:2a:b8:4b:70:37:5b:1c:11:5f:
91:89:12:88:b2:32:de:4d:75:2c:ad:26:40:4f:ae:
63:c7:7c:97:68:ba:d9:35:ad:8e:e0:6f:89:a2:0b:
ea:4f:e0:a0:7b:5d:5a:4a:26:4c:60:e5:88:28:f3:
0f:5a:aa:f3:b5:e5:66:7a:63:ef:47:74:5c:83:83:
9c:39:3d:4b:4e:97:41:ba:df:73:8e:fd:2d:7e:64:
6f:d0:1e:42:89:18:91:84:11:f2:60:3f:29:54:d0:
f7:c7:23:ac:41:62:6f:9a:0f:de:38:fa:65:0a:cd:
bc:cb:29:8a:6c:fb:fd:7f:14:3f:d2:72:20:78:f0:
88:2a:ca:c4:0f:43:6f:19:f6:41:f7:4f:89:ae:50:
60:47:5b:36:50:9d:80:fa:71:a5:74:16:30:63:38:
b7:e3:b5:2a:53:c5:86:c7:fe:d6:e5:a6:17:b3:05:
6d:0c:48:ff:1d:1f:49:5d:6f:40:92:3c:74:11:69:
ba:1a:14:ab:2b:44:ea:8c:c3:20:24:8d:e8:1d:e4:
95:e3:03:a0:8e:14:6c:c4:24:61:58:ff:94:e3:04:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F9:DF:08:43:D6:B9:32:90:D0:6A:58:5E:A6:D2:14:A8:06:A9:57
X509v3 Authority Key Identifier:
keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:eb:6f:ed:82:8d:57:c6:de:30:3c:19:3d:4a:df:ec:37:56:
0d:c5:02:b5:45:5b:55:23:e6:a0:1e:42:90:4a:81:69:4a:f6:
b8:99:34:e8:35:ae:56:47:89:b6:1e:a7:e4:f0:89:64:b6:c2:
da:96:4f:7a:ad:de:5f:e3:23:58:b7:59:ed:bc:3b:d4:de:85:
21:9f:ef:87:47:ec:f3:56:d8:30:9c:66:fa:c8:c7:74:62:02:
67:45:8e:34:ca:1a:05:93:95:bc:6e:4a:d0:99:a9:ea:fd:5a:
45:7a:99:e6:c2:ea:7f:66:d3:0a:e0:5b:e8:60:13:20:26:43:
3b:6b:cb:bc:cc:ca:db:e6:f2:da:6d:ed:01:99:da:4c:06:d4:
27:8a:6b:51:8d:c1:81:79:11:a7:fe:bc:80:bc:4d:8b:bb:a3:
f1:0c:ec:28:d0:11:27:ce:d6:9d:d5:b2:f3:6d:df:2e:ff:eb:
63:06:5d:85:9d:0f:77:0c:52:56:c0:87:11:f3:40:ea:42:67:
93:f7:a3:bf:91:dd:fa:29:5b:00:a0:6b:af:6b:52:01:6c:53:
a0:6b:0c:09:de:35:5d:9d:68:34:91:28:76:f6:72:a3:56:c8:
aa:41:5d:e2:6d:b7:0e:7a:25:4b:5e:e2:4a:a9:91:ec:04:5b:
3d:f6:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:25 2026 by rpki-client