
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json)
Hash identifier: RzVOtdwPFHkufTpk6RJ1qEXKBFhFr4iqGlravOwaoh0=
Subject key identifier: D4:50:6C:11:7F:AE:BB:A1:8F:D0:DB:56:4D:D5:43:27:7C:C8:9A:CC
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
Manifest number: 02CF
Signing time: Thu 23 Jul 2026 02:19:18 +0000
Manifest this update: Thu 23 Jul 2026 02:19:18 +0000
Manifest next update: Thu 30 Jul 2026 02:19:18 +0000
Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: 2LUKx5d8CuDGW3TkS8F6pmBGgwXoyzpHVRDAk4aT8kg=)
2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=)
3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Validity
Not Before: Jul 23 02:19:18 2026 GMT
Not After : Jul 30 02:19:18 2026 GMT
Subject: CN=6a617a26-1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:29:95:5a:db:3a:69:74:74:3f:c9:b2:dd:
ee:80:a2:e7:04:51:aa:b1:13:9f:05:6a:56:a2:3d:
3b:1c:cd:f0:79:73:46:e9:0c:b6:f6:48:e7:52:cb:
67:34:58:e0:70:4b:2a:43:72:20:25:2a:a0:d6:73:
86:3c:cb:89:a8:49:0a:41:69:15:6f:b0:6a:be:06:
47:f0:a0:e2:5b:1a:95:6f:40:95:0e:56:ba:90:a7:
a8:5e:ac:2f:c6:41:5d:c0:9b:06:f8:8b:83:a1:2c:
d6:5c:ec:cc:c0:5e:62:93:d6:ae:c9:40:a4:d0:5a:
13:43:df:47:c9:31:02:a8:cc:76:9b:2c:48:74:62:
6c:b3:1c:7b:63:b0:1e:e1:9a:e6:cd:71:98:62:d8:
6a:a0:b8:21:e1:92:4d:f5:1d:4d:46:17:d5:43:91:
36:42:26:e9:aa:fd:52:c6:15:37:20:14:9e:e4:6d:
bf:b9:f7:3c:92:02:b4:dc:ff:e5:1b:7b:a0:56:64:
3e:53:5b:0f:9f:be:1c:61:26:2d:a8:d1:b7:5b:a8:
d5:00:4e:d6:5a:ab:48:c1:22:3d:58:7d:b9:2b:bf:
ea:70:c5:53:5b:36:ed:f5:50:18:97:fd:f3:6d:f9:
03:a7:09:fa:94:ad:f3:52:f3:50:1e:a2:60:f6:28:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:6C:11:7F:AE:BB:A1:8F:D0:DB:56:4D:D5:43:27:7C:C8:9A:CC
X509v3 Authority Key Identifier:
keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:db:4f:82:76:67:bd:35:95:e5:9d:c8:db:08:29:fb:df:
c8:ab:80:58:cd:71:09:d5:3a:65:bd:83:16:5b:13:73:1d:3b:
2e:93:94:8a:66:ff:b8:f3:7c:07:30:b1:c4:af:d7:ad:a9:ac:
3b:6e:ad:35:31:c6:0b:fb:89:6e:51:b0:e5:64:7c:ca:52:db:
50:e0:51:f0:57:29:ff:75:86:bf:b4:1b:b0:9c:b7:95:29:50:
1d:01:f6:6c:23:d2:72:18:16:c0:91:94:af:6d:28:0f:ce:d5:
61:a6:d3:6f:a2:4f:66:82:8f:70:84:34:76:44:17:4b:b8:8c:
d7:2b:21:fd:c1:20:ff:82:ff:e9:0d:dc:0c:e2:e1:1d:99:dc:
ea:09:ac:a3:d1:5a:aa:ab:d9:e3:5e:b3:1b:fe:e2:aa:83:09:
74:6f:6d:ce:ba:de:0e:ca:d5:8f:21:7e:fe:f7:ba:69:e1:6a:
d9:fd:a7:88:98:0f:22:a6:1b:26:e8:c6:b2:6d:74:d2:7b:00:
df:0c:e6:9e:81:5f:13:41:e7:0b:62:51:14:c7:84:9c:b6:ac:
a1:21:bd:2f:ba:b9:2e:46:0d:42:a5:6f:46:86:d1:dd:50:1a:
98:0a:ec:78:d8:4e:b5:66:c6:1a:c8:ff:e2:bc:d4:f7:fd:c6:
e5:cd:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:21 2026 by rpki-client