
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: n2B9TP8qN5ZcEfmsLqhsRKFcL7iBXMfnv6gmjy33drI=
Subject key identifier: B0:B6:C8:CF:03:A3:72:BB:C5:65:E6:3B:BD:8C:8C:81:32:EB:01:27
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 0281
Signing time: Thu 23 Jul 2026 03:00:12 +0000
Manifest this update: Thu 23 Jul 2026 03:00:11 +0000
Manifest next update: Thu 30 Jul 2026 03:00:11 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: zEtRKItDNWJdIM/NHPeS2BYNOW/nZitWSHK23TycNMg=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: ylQZgSxpoYGOK3QMYk3CFuQ9Ou8gBsooYQ9v1rokCT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Validity
Not Before: Jul 23 03:00:11 2026 GMT
Not After : Jul 30 03:00:11 2026 GMT
Subject: CN=6a6183bc-4c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:58:1e:9f:89:24:47:f8:2d:ee:37:99:cd:
17:2d:56:c0:50:6d:18:50:0b:2a:bb:ae:02:f1:cc:
cc:21:74:51:4c:c8:12:9d:37:f7:13:0a:5a:31:b6:
be:5b:f4:6e:fa:ae:80:b7:27:30:68:46:99:bc:c2:
c9:48:57:91:dc:12:40:ad:8d:32:16:0a:81:60:82:
14:8b:e7:b3:0c:b7:29:91:9f:0e:c4:64:c2:a3:f5:
79:7f:b7:fd:a2:b1:27:5a:8c:01:36:67:d5:78:10:
2c:c8:8a:1f:6c:77:05:29:ce:fb:ab:00:af:78:9d:
ef:8e:6e:8a:f2:b4:5f:95:8a:56:a5:32:9a:96:22:
a6:d7:5a:28:77:7b:15:f3:ec:f9:3a:42:23:1b:5c:
5b:be:5b:19:da:8c:ee:c7:cd:7a:db:1d:be:9d:ac:
27:14:a4:da:89:eb:dd:4a:e7:59:7d:e5:79:66:06:
84:2b:f9:b0:df:2c:4e:cc:03:f1:33:eb:f6:4e:19:
97:82:62:55:9f:d4:d1:8b:72:19:3a:14:8d:b8:b9:
23:79:48:55:3d:6a:2f:cc:19:40:d3:b2:4e:11:72:
18:f6:c3:c8:f4:b5:4f:6a:83:30:2e:81:49:47:b4:
68:89:77:d2:fa:e3:65:cf:3d:c7:f1:2d:67:b0:b7:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:C8:CF:03:A3:72:BB:C5:65:E6:3B:BD:8C:8C:81:32:EB:01:27
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:bf:39:f2:6a:fc:45:a4:fb:ac:68:ba:96:31:d6:33:cb:
ac:d8:e1:82:40:eb:99:f6:63:c1:9d:98:e1:8a:52:d3:32:91:
1a:34:19:a1:b2:dd:cc:f2:63:80:93:7f:af:06:f6:13:6a:c1:
6c:3c:20:02:bb:53:c4:9a:75:53:dc:50:eb:9e:c9:19:79:f0:
f4:1c:3d:ea:84:aa:c6:a8:64:86:17:47:6e:51:7d:90:86:e8:
00:5f:2e:db:bb:c0:e5:bc:4b:61:6c:8d:27:52:48:ba:b0:a4:
39:22:5b:eb:f0:d6:71:a7:ec:2b:45:84:cc:23:44:52:4f:83:
5f:6e:31:61:1d:96:35:53:11:73:e2:d5:c8:8f:d0:85:b3:4d:
d6:69:97:5b:04:df:bc:5d:b6:9e:85:df:5a:bc:a1:f5:85:36:
c3:b9:00:b2:7e:d9:4b:17:9e:89:47:c5:a9:cd:20:df:44:be:
3a:f7:8f:2c:5a:18:7d:15:21:69:3c:3b:1d:e5:fa:40:5a:82:
63:be:02:c2:56:94:05:31:79:f9:e6:6b:0a:4b:45:28:48:3b:
c3:a2:6b:91:35:89:29:0c:3c:51:c0:ac:0d:4e:fa:47:64:80:
42:41:f8:7c:b5:1d:ea:1e:66:c5:0a:c1:fa:e5:50:4b:cf:3d:
16:46:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:40 2026 by rpki-client