
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier: h8zZcl0WfjKlY8S/f4QeE2MoWAd2zRIphEaHs/FP1XE=
Subject key identifier: 3F:69:83:B9:4E:C0:32:E1:B9:1B:C7:21:5A:9E:89:55:DA:05:E9:00
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number: 5A
Signing time: Thu 23 Jul 2026 10:12:40 +0000
Manifest this update: Thu 23 Jul 2026 10:12:39 +0000
Manifest next update: Thu 30 Jul 2026 10:12:39 +0000
Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: SJEVnRlZop9hurnqICV7x2AkLIrYJ4WkWxiuKmNsaWQ=)
2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: 74mwc9LQpW/L2dkBvxUUTHTqTkYyfx6a6uTfz8A4a5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Validity
Not Before: Jul 23 10:12:39 2026 GMT
Not After : Jul 30 10:12:39 2026 GMT
Subject: CN=6a61e918-60c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:5b:a3:c3:ba:ab:00:b4:c5:66:66:42:4e:
ce:ad:52:ab:34:5c:33:c6:f2:00:fa:a8:8f:43:e0:
21:c6:29:fd:c0:f4:74:84:87:9b:26:43:cb:b2:24:
49:88:75:aa:5b:5c:fe:f7:bf:1a:43:24:35:20:6f:
d2:92:18:37:f7:f4:8e:f4:1b:a9:f3:fa:f9:ce:d0:
cb:a2:e3:90:ba:f5:93:71:94:e7:e4:ea:73:16:5f:
ab:df:ad:c1:a5:a8:4d:18:48:99:8c:e3:b1:69:ac:
52:a9:83:82:e0:c2:c6:ac:d0:37:fd:2d:f3:30:37:
77:48:69:c9:85:e4:6e:ae:19:58:bd:61:65:07:6c:
f5:7c:6f:c2:40:53:ad:00:4f:a6:76:16:75:7e:eb:
fa:c7:13:25:70:1c:97:a1:c1:48:46:aa:0b:5c:e1:
81:e2:a5:a5:4d:32:f1:b9:3a:77:05:0e:a8:7e:0a:
c2:68:5c:8b:f9:74:6a:77:02:0c:41:ce:21:2a:00:
4e:7b:34:77:9a:fb:9d:d7:36:80:0f:bd:a1:ba:e9:
a8:90:b9:20:a4:97:89:fa:d4:38:8d:cd:d0:e6:9b:
6a:f7:b5:f4:5e:a0:37:4c:d0:91:e5:9e:4a:08:4d:
b0:5c:11:45:67:5e:6c:ed:79:ce:1e:cd:2b:c4:b5:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:83:B9:4E:C0:32:E1:B9:1B:C7:21:5A:9E:89:55:DA:05:E9:00
X509v3 Authority Key Identifier:
keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:9f:3a:5c:bf:2a:52:6c:bf:ba:2a:6d:79:14:fa:f0:c8:21:
0e:35:13:a5:6d:19:23:fb:68:d6:8a:40:96:48:78:6f:f2:33:
c9:c2:fd:63:79:3a:10:74:5f:b4:fe:81:a5:95:d8:02:64:99:
38:ee:2b:1b:fa:15:e6:f3:17:8e:cc:7b:80:65:bb:64:57:47:
a5:d8:ef:16:50:73:9b:03:ef:7b:3a:7e:76:76:38:a2:bf:7b:
57:af:dc:7d:60:47:61:50:87:81:0e:c0:67:0c:37:90:cb:16:
cd:92:c1:23:62:62:43:e2:2f:df:c3:7e:fd:65:db:c3:ef:8c:
43:7c:92:24:d6:c9:b6:37:ae:a1:38:7c:7e:e6:4e:17:a0:fb:
f5:f6:9f:a4:ac:15:4c:4e:19:22:68:ff:5d:e4:f9:3b:91:1a:
7e:96:e6:7a:11:26:e9:93:4c:c4:45:54:0e:85:81:41:1a:8e:
2c:4b:d5:b3:71:d9:6c:ed:c0:29:8b:c4:9b:8c:95:06:40:73:
ad:33:d1:af:16:a5:8a:03:0d:ed:73:15:7a:57:80:c5:87:5b:
2d:22:11:5e:a3:ff:9b:2d:89:83:51:c4:8e:11:09:85:23:38:
fd:e9:ad:43:6f:ca:1b:cc:f4:b9:ac:93:4e:00:8e:fd:e3:83:
40:21:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:21 2026 by rpki-client