
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: iGZ3hIw2koqOuMuF32MZSW8CB9yxhYaIYj6Pb11MjLg=
Subject key identifier: 57:BB:BE:CF:3F:D7:15:0F:2B:2B:15:9B:2A:F5:76:01:7D:6E:64:23
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 0759
Signing time: Wed 22 Jul 2026 22:20:27 +0000
Manifest this update: Wed 22 Jul 2026 22:20:26 +0000
Manifest next update: Wed 29 Jul 2026 22:20:26 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: m6qENAS8SWjg3g9w4laWznTr2g8zKLa2VZGdLCLGJ/Y=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Jul 22 22:20:26 2026 GMT
Not After : Jul 29 22:20:26 2026 GMT
Subject: CN=6a61422b-ad15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:23:a6:ec:6a:ab:7d:48:f8:c6:3d:0f:c8:
25:69:1d:6f:21:c8:a5:83:f7:cb:65:66:58:db:70:
bc:4c:b4:95:19:98:3a:6f:81:c3:98:fd:fc:be:d5:
2f:d4:6e:c1:ee:50:e1:51:9d:35:bc:2d:92:3c:53:
76:df:60:d8:3a:92:da:4d:3d:72:e1:a0:eb:7f:7e:
a6:72:eb:9d:38:59:ac:b9:33:24:a4:f6:12:ef:3b:
dd:a0:0e:d2:b5:c5:2f:72:ab:84:db:a7:e8:fd:a6:
f6:66:d7:f8:38:67:17:a8:05:e7:dd:99:48:40:2d:
15:23:95:8f:d1:c4:4f:56:11:f5:5a:70:51:85:41:
12:6a:4a:54:94:c8:56:78:d5:ec:e5:7e:75:c4:bf:
5b:57:c6:80:d0:39:5c:2e:e6:ae:35:08:df:85:4e:
1b:e6:5e:a6:81:17:c7:a0:dd:56:18:ff:5d:21:3b:
a8:8c:61:80:88:13:9f:79:01:09:53:49:01:6d:34:
f0:00:41:56:5f:f6:61:12:5d:23:a0:d6:40:d2:e8:
1b:6a:4a:5b:00:98:08:74:d6:48:ca:27:19:af:28:
fa:48:d9:11:8c:60:fc:0d:3b:6f:09:74:9d:49:4c:
6f:5d:ac:87:c0:e6:4c:83:e9:cf:bc:27:2e:5e:3a:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:BE:CF:3F:D7:15:0F:2B:2B:15:9B:2A:F5:76:01:7D:6E:64:23
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:70:28:71:0e:c7:c7:8b:51:ac:76:c6:c4:11:49:34:51:11:
8a:26:f9:1b:4a:57:1c:63:25:31:63:cb:5f:89:81:67:0f:65:
ae:dc:d1:25:13:71:27:f6:a0:f8:fa:f9:f2:c2:62:aa:4c:f9:
22:c4:49:d0:0d:42:be:b7:e8:0d:4f:15:ad:51:37:8f:1e:af:
fb:16:f8:c5:75:50:94:b4:fd:96:92:8c:5d:83:43:62:92:9a:
bd:4c:15:59:a7:0a:15:ec:62:c7:c8:9e:da:8b:48:9e:f8:0a:
82:57:fb:87:8a:d7:60:88:82:31:3f:26:86:4b:dd:22:39:6d:
ea:0f:b4:e5:9e:fa:97:40:1c:ed:16:d4:d9:ce:7a:04:39:87:
6a:92:07:8b:eb:69:52:fa:2e:16:ae:03:9e:da:76:20:cd:af:
5d:74:d3:ab:9a:a0:92:3d:4a:f8:51:74:35:68:f7:4f:18:5a:
ef:ef:2e:6f:84:18:f9:74:af:1f:70:83:9c:45:b0:52:ed:2b:
d6:a1:c4:87:28:25:a9:70:f8:c3:56:e6:f0:1c:b1:db:95:d6:
54:5e:5e:a1:d9:fb:f4:3d:00:0c:31:f0:1f:13:34:24:8a:64:
c8:54:53:2c:fa:83:f0:6f:4c:c9:8a:74:e3:1e:ce:2e:4d:de:
59:d2:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:29 2026 by rpki-client