
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier: YhxGGCLV/+dmfluUc8H/2VEAv5HgMoXw44GPpLuW+6k=
Subject key identifier: EC:0B:25:E4:93:52:94:0F:B0:9E:FB:D9:14:D6:3A:EB:8C:64:73:C6
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 0AE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number: 0AB6
Signing time: Wed 22 Jul 2026 19:52:44 +0000
Manifest this update: Wed 22 Jul 2026 19:52:43 +0000
Manifest next update: Wed 29 Jul 2026 19:52:43 +0000
Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: KRGB6dobnmEf9JDTaY1JhAsPZjSH/l1In8xN7LXF59o=)
2: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ=)
3: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Ftvy/rpA0Vj85hMaB0gzuwhB0x0hLyn+6aJiSOLoMmo=)
4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: rwF3ZHk/RVRSDVzAmZzOpcusN8aav7XVfExqPCMX7pc=)
5: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Validity
Not Before: Jul 22 19:52:43 2026 GMT
Not After : Jul 29 19:52:43 2026 GMT
Subject: CN=6a611f8c-550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:56:2f:d1:a6:ac:c9:79:9e:99:2e:9e:f6:
fa:60:06:bc:4d:89:33:8e:87:3d:ac:5e:39:d2:dd:
0d:c8:f7:f4:1c:e7:d3:b8:ec:05:a8:c9:d0:2b:c6:
fd:ae:0f:10:13:e2:08:1e:f1:e8:c9:ab:e8:d7:22:
96:64:4a:07:15:ae:43:12:e4:29:61:9e:6d:11:78:
95:a1:be:84:65:16:ee:db:94:7a:1c:65:dd:2e:09:
18:c3:9f:29:57:7a:ce:e1:f3:4c:d8:dd:c2:bb:86:
76:b5:f2:60:e3:ce:eb:87:7f:2a:6e:33:c8:04:86:
fb:9f:56:30:68:1a:84:ce:d8:38:39:dd:2f:5f:f1:
24:5c:fa:f0:1b:49:57:d2:37:67:ab:65:25:34:16:
ae:6d:56:fb:67:16:03:7e:42:70:ec:19:69:02:1e:
df:2a:bb:7c:98:d6:3f:a3:57:43:92:c4:17:93:82:
aa:9b:00:48:27:91:8c:36:40:c9:15:38:63:aa:9d:
8d:6d:2e:92:12:0b:16:91:2e:84:89:02:03:48:1e:
ab:02:9b:a8:1e:56:67:45:65:02:ba:06:c0:20:89:
06:30:2c:42:e5:36:1a:9f:22:ab:57:85:23:0c:09:
3d:67:5b:77:b8:f0:ba:46:c0:b7:5a:cb:a6:6d:33:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:25:E4:93:52:94:0F:B0:9E:FB:D9:14:D6:3A:EB:8C:64:73:C6
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:77:d0:d6:f3:e6:51:c3:c5:38:7f:d7:30:30:5c:9e:c1:
d1:1c:81:d4:55:df:d4:47:56:df:82:04:2c:17:c5:5b:c4:1e:
e0:9b:1c:d5:35:37:7a:7e:65:11:5c:b7:40:29:ac:ea:64:db:
1f:84:ed:dc:18:b6:b3:0e:74:2f:e8:88:4d:35:77:5a:8a:5b:
5c:8b:76:af:11:2a:2f:4e:4c:d9:09:47:67:48:3c:54:dd:08:
3d:ce:6d:82:42:9a:78:68:82:81:00:b5:9e:b8:3f:c3:0a:68:
22:1e:cb:76:fe:62:40:1e:29:7e:40:e0:f7:c5:2b:c0:64:67:
9d:a1:87:e5:5c:3d:e3:be:1d:56:96:17:e9:1b:4a:ec:9a:d9:
f1:66:61:39:01:58:ed:67:b5:14:28:36:b2:dc:e0:9b:d4:4e:
f2:df:bc:3c:16:5f:f2:15:5f:eb:b6:e0:b0:a6:36:36:3d:9e:
23:05:44:3a:6e:07:86:57:77:3d:70:b8:bb:1e:66:69:7d:08:
6a:61:14:e1:f5:a3:7d:79:59:3c:94:bf:70:87:26:8e:91:5a:
f8:2d:85:ef:36:be:78:28:f1:8b:91:15:61:f2:96:5d:fc:7a:
d6:11:85:2f:e5:53:38:d7:87:5f:4b:3c:86:59:49:b3:48:dd:
ee:42:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:07 2026 by rpki-client