
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json)
Hash identifier: r6H6i4xMoGtuBEVTuU8tL4f5bGAwloiIdg8krJhL2Y8=
Subject key identifier: 84:C5:72:B0:0A:8D:F0:CD:AE:D7:6D:AE:B4:63:2D:03:70:9F:E7:38
Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
Manifest number: 05EE
Signing time: Wed 22 Jul 2026 23:43:15 +0000
Manifest this update: Wed 22 Jul 2026 23:43:15 +0000
Manifest next update: Wed 29 Jul 2026 23:43:15 +0000
Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: /MaVE7b57HzPHDO/G5DbUntKmm00w0+hpt37JkMnZHU=)
2: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8=)
3: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: vjcVmpY5exF0KvvFr7MQCETy6G444Gcd8QqEnM4obso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Validity
Not Before: Jul 22 23:43:15 2026 GMT
Not After : Jul 29 23:43:15 2026 GMT
Subject: CN=6a615593-2d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:44:d2:51:e9:29:61:ab:15:ac:4a:9f:f8:
79:cc:80:04:91:b7:7c:56:fc:ae:46:da:cf:df:41:
df:62:1d:e4:17:32:02:63:19:35:56:6c:3b:8a:ca:
c6:35:2a:bc:83:07:ea:c0:9b:ee:99:ee:9e:03:da:
ee:a7:15:1c:1e:0a:ff:84:6c:1d:3f:f1:84:ed:0e:
e3:3b:0b:7a:48:25:aa:4e:3a:cd:a0:94:57:aa:9e:
d2:ea:d4:37:d6:86:ff:ba:1e:a3:a3:88:61:c5:27:
7e:78:eb:ec:89:f6:ef:ff:3d:63:93:0d:4c:c8:d8:
f7:39:28:5d:67:64:5a:ad:08:27:63:f4:82:8a:e6:
3c:11:b7:80:e9:39:0e:67:70:5c:d2:cd:44:1a:f4:
22:0a:30:b3:29:a9:f2:ad:51:e0:fc:2f:ea:dc:9d:
fb:ec:51:67:fc:ec:4c:a1:ba:92:41:7b:cb:91:22:
e3:c4:09:fe:30:53:44:f3:8c:c3:9d:88:3c:fd:c6:
23:9a:f8:56:5e:8e:ab:e9:78:8e:9c:ea:4a:5f:47:
19:d7:a8:ad:7a:30:3c:bd:55:66:a0:12:d5:f5:18:
30:18:17:41:61:a5:b4:f9:43:40:c3:bb:cb:aa:29:
df:80:e2:e4:93:f2:78:06:2b:6f:d3:0c:ea:ae:d8:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:72:B0:0A:8D:F0:CD:AE:D7:6D:AE:B4:63:2D:03:70:9F:E7:38
X509v3 Authority Key Identifier:
keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:f2:10:e0:da:e0:70:36:6e:6c:05:ac:ec:2a:70:ca:f9:
58:ed:13:2e:ee:47:21:4a:b7:ff:3c:29:2e:10:ae:d2:99:fa:
07:bc:8e:c2:c1:e9:87:d4:62:91:b1:03:c2:e7:14:63:8d:48:
1f:2b:a2:03:e7:d3:d7:ce:38:6e:ed:19:01:ea:2b:a4:fc:05:
d0:5c:f8:54:91:e7:25:94:d7:88:06:91:5b:f8:ff:9b:28:69:
ed:41:2b:08:5a:08:51:ce:39:e4:1a:47:44:4c:27:50:0f:e3:
b1:df:79:d7:ff:c4:27:75:82:df:a8:ec:37:17:40:34:8b:fe:
94:cc:92:53:09:08:43:c3:51:6b:c4:45:8d:2b:35:f3:b8:f7:
81:b8:09:b0:8c:13:9e:f7:40:bc:13:56:5b:89:48:97:63:a6:
97:d2:19:5f:51:bd:c5:a1:31:54:b2:db:be:07:4c:27:1a:46:
37:f9:61:12:ed:28:b2:29:74:74:f2:06:c1:2c:6d:bc:1a:14:
04:2b:d7:3e:aa:16:02:54:48:cb:a6:5b:ee:f7:23:29:fb:a6:
05:42:03:e9:9e:7d:2f:57:da:39:98:f2:cf:a6:d8:13:a8:47:
4d:a8:26:4c:9a:ce:56:c9:67:a2:ab:0f:5c:9e:10:df:08:a3:
ba:30:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:53 2026 by rpki-client