
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier: q9CzCiZyrSroeQNgHdGcE7l4BluQEki9gw3mkEDq/sg=
Subject key identifier: 28:73:4A:D7:E5:92:7E:A4:08:46:B3:85:30:C3:96:7E:EE:8C:5D:97
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number: 015C
Signing time: Thu 23 Jul 2026 06:35:17 +0000
Manifest this update: Thu 23 Jul 2026 06:35:17 +0000
Manifest next update: Thu 30 Jul 2026 06:35:17 +0000
Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: Hqv45IM9pGf8gA4D7ySTN2+rAw5m7LaREKzlLLO1MA4=)
2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: Y4eMPkfyTXrtKvA+X6u1unLZ0mgOp+sFenl0Spk8Log=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Validity
Not Before: Jul 23 06:35:17 2026 GMT
Not After : Jul 30 06:35:17 2026 GMT
Subject: CN=6a61b625-7abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:b0:7b:34:53:f1:d8:2d:50:ef:30:54:7b:
b3:d4:e8:d4:62:df:d5:7a:5d:29:a0:8f:0e:b0:a7:
76:94:53:79:75:d0:57:34:11:71:cc:a8:51:c4:15:
30:9f:96:3b:81:a3:82:d5:1c:e3:23:4a:cc:31:05:
1c:ef:18:96:26:ec:be:88:3e:ca:6d:f6:13:5e:78:
9b:ee:40:58:0a:62:4a:92:00:5e:e4:cd:02:d6:89:
1a:b5:71:d4:12:d5:10:0c:9e:cc:37:75:6a:9a:be:
f0:aa:b6:1b:77:d7:83:9c:98:31:5a:13:ce:a1:c6:
90:00:57:27:ac:b0:5b:6f:c4:4a:dc:41:f6:da:8f:
81:30:3f:31:f3:03:a4:c2:1a:03:67:af:52:da:7a:
ac:33:a7:fd:bc:e1:cb:b8:50:2b:b3:25:a1:d5:1d:
5e:8d:b8:b3:fc:fd:37:b1:bd:85:90:1a:f9:89:9b:
9e:fb:30:94:8f:ca:e9:bd:6c:89:67:ff:b6:64:1b:
47:a4:e4:25:b8:aa:de:65:4d:4f:f6:2d:4b:3d:9e:
9e:4b:5f:a1:cb:26:0a:e3:e2:9b:38:64:25:cc:73:
af:0a:d5:3f:4e:36:7b:74:64:b9:a3:a4:f0:02:ee:
47:1f:a5:ce:09:51:ca:18:f8:36:e6:d3:ae:b2:1b:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:73:4A:D7:E5:92:7E:A4:08:46:B3:85:30:C3:96:7E:EE:8C:5D:97
X509v3 Authority Key Identifier:
keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:4d:ff:1c:fb:8a:e7:b2:73:00:62:d3:e1:58:62:09:f2:e7:
76:3d:7a:95:69:d8:af:f3:31:4a:3f:8b:4d:da:e2:75:91:1d:
5a:0c:60:fe:a2:2c:71:bf:b9:10:2b:a4:43:89:38:b9:54:c0:
5d:f6:6e:e9:51:15:62:a3:d6:43:d4:87:85:38:ad:1b:f5:7c:
fb:f0:87:3b:f4:de:31:ea:08:80:be:b6:8a:0f:1b:03:94:c6:
27:5b:eb:15:1b:d0:ff:5d:b4:4a:a8:f1:83:86:da:11:a3:ae:
3b:cf:35:43:b7:4c:cf:0b:8f:de:ff:b7:db:65:1e:1f:c5:90:
e6:b3:b4:e4:de:4d:86:d2:8d:a7:71:e3:88:01:3e:c8:9e:0e:
dc:55:19:3f:c9:ed:1e:b0:6d:de:61:65:86:60:b7:c2:d3:e1:
00:94:e2:6d:b5:2e:a4:9f:b5:a7:79:1c:c6:84:18:d6:06:dc:
3a:56:4e:ac:82:8d:44:73:91:52:e3:5c:d2:ab:a2:93:ad:c8:
32:61:28:7b:d6:46:af:e1:5a:ad:cb:c4:a7:97:96:80:8b:a4:
fc:a6:61:5d:60:39:b9:44:95:97:9f:24:cb:ee:21:9a:ad:1b:
93:07:dd:74:ec:c0:eb:88:6c:57:5b:f2:02:62:d1:84:cb:83:
6b:3d:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:00 2026 by rpki-client