
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier: HhbPRdt0QOYDr8ZqbS4FM7I9RYAjldmPGMi9yJSimxU=
Subject key identifier: 8B:EE:94:77:A7:23:A4:14:B4:97:5D:00:DB:13:1A:C7:2F:88:CE:A3
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number: 0238
Signing time: Thu 23 Jul 2026 03:49:06 +0000
Manifest this update: Thu 23 Jul 2026 03:49:06 +0000
Manifest next update: Thu 30 Jul 2026 03:49:06 +0000
Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: gUYIFzh7IPKkrwS9OSefthpVo+JZIsif/K51N21tAyA=)
2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: yd8nZQYXpuBuXMJow036oPSXKDSenHOrq9DNYBNpxgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Validity
Not Before: Jul 23 03:49:06 2026 GMT
Not After : Jul 30 03:49:06 2026 GMT
Subject: CN=6a618f32-9ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:97:b9:39:d2:9a:ad:7e:6d:97:f1:d7:22:
a0:09:ca:7e:54:da:87:26:66:46:c6:1e:1c:3d:a7:
b2:58:b9:9f:23:5c:f5:f2:5d:23:b3:f9:99:27:d0:
66:fd:93:90:ab:7a:d3:5e:69:db:bc:1e:28:b1:db:
91:72:69:a2:d0:dd:dc:36:a0:24:f9:27:f7:c4:4e:
75:8e:e5:a1:ce:4a:52:89:e8:23:09:81:20:e4:31:
a9:5a:74:d1:e6:fd:63:0a:7b:22:74:1b:97:dd:a6:
ce:cb:3a:6c:fe:95:30:4a:62:aa:fa:e1:19:0b:9e:
58:4d:f1:ed:38:38:34:10:de:4e:fe:dc:6f:4f:ac:
e1:72:2c:46:fc:34:13:ab:06:e1:51:0a:9e:27:45:
33:3f:3e:ad:01:3a:ce:38:20:94:cc:3e:b7:83:5a:
64:a0:09:be:86:c3:60:d1:d9:b5:9d:28:0c:2d:7d:
86:32:14:8d:f3:3b:d2:7d:a0:f5:b9:79:56:e6:11:
49:ef:3b:64:d7:35:0b:be:df:c9:fc:11:87:a7:30:
bc:2a:1b:df:7f:e1:ed:0c:27:f9:0c:a3:0f:e6:e4:
a5:67:59:e6:20:d7:d0:95:b6:8a:0f:44:f1:41:79:
82:20:e2:d0:3e:a3:db:c8:b1:43:3a:b8:d3:6d:56:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EE:94:77:A7:23:A4:14:B4:97:5D:00:DB:13:1A:C7:2F:88:CE:A3
X509v3 Authority Key Identifier:
keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:e8:64:56:43:ed:b2:65:8f:5a:05:88:9f:1c:2b:97:22:
f1:fe:1d:67:a6:fe:7f:5f:1d:cd:84:e9:42:1b:a0:e1:6f:03:
42:42:d4:76:98:f0:e0:de:69:02:23:06:b1:b7:fc:f5:08:b6:
e7:f0:10:d0:12:d6:5e:ab:18:dd:a4:eb:65:e7:8e:c5:42:fd:
a3:52:e4:07:96:7e:3d:70:41:78:9a:f5:e3:f5:f7:62:56:e1:
87:17:83:eb:67:bf:98:29:ed:98:95:a1:56:3c:89:ba:ac:c1:
48:b8:b6:1c:dd:ec:a6:68:0e:ec:8b:8d:50:a0:cb:70:07:e9:
7c:5c:2f:88:ee:d7:f5:8f:9d:e5:6f:38:06:70:50:b1:78:a0:
2c:e2:f8:fb:2c:d8:b8:6b:86:61:e4:55:c4:97:f9:8c:d0:e4:
58:ee:79:2b:85:a5:da:83:73:3f:6f:33:ea:03:ea:84:c7:66:
70:64:f1:28:99:26:3d:19:bb:8c:3a:c0:10:e2:1b:37:bd:c7:
a0:90:fc:b7:c9:f8:59:04:83:16:5a:46:cf:a7:c1:c1:f8:ef:
b2:d8:53:8d:17:1f:80:d8:84:29:69:87:79:c6:d6:fa:1b:51:
74:bc:32:e3:cc:fd:4a:ef:52:93:da:55:c0:4e:0a:55:dd:6f:
5b:66:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:33 2026 by rpki-client