
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier: E7WaBswdx+XG4Cbjwz31KvjxWmM/eis/imtIR2YWNxo=
Subject key identifier: 83:7C:E5:C4:A4:B2:6D:B6:D5:BA:3A:06:1D:F7:10:6D:40:11:60:76
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number: 87
Signing time: Thu 23 Jul 2026 09:32:10 +0000
Manifest this update: Thu 23 Jul 2026 09:32:09 +0000
Manifest next update: Thu 30 Jul 2026 09:32:09 +0000
Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: W8iMUfFg0Nro6Rn0x6vMu68AOlLESJqy3+7XQJGyHXw=)
2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Validity
Not Before: Jul 23 09:32:09 2026 GMT
Not After : Jul 30 09:32:09 2026 GMT
Subject: CN=6a61df9a-4834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:9d:7e:37:96:bc:07:4f:35:b5:b9:0e:48:
f9:62:b9:f3:da:2b:08:f7:aa:c3:8a:73:b5:f5:f7:
a5:dd:c5:87:8c:8c:e3:35:30:39:e8:f0:61:3c:ed:
9c:95:82:66:dc:f4:53:2c:3e:62:8d:c1:fd:27:ba:
d8:b8:f5:33:94:69:68:92:9c:7d:c1:55:75:05:44:
dc:b5:3b:cd:79:e8:60:57:0e:83:d8:6c:39:5c:6a:
80:32:48:ea:f1:f6:6e:83:8c:6a:cf:47:2c:e2:60:
91:8c:cb:54:66:db:2b:76:f5:b5:5e:86:f8:15:3f:
21:08:5e:25:2b:57:1f:b8:08:f5:92:1b:64:6b:18:
86:f0:cb:e5:29:26:fa:74:1a:83:26:4f:dd:c1:1f:
33:56:4b:d4:be:5f:05:d0:7f:01:d7:f3:6d:1e:f8:
61:09:4b:0a:2c:c2:84:99:1b:b0:53:d0:bc:0e:06:
3c:0c:ee:2d:cc:81:bc:ad:91:0c:b2:59:93:da:d6:
d2:52:08:e9:1d:eb:9e:38:95:1a:14:f7:87:cd:da:
08:94:23:73:10:53:7f:2a:c3:a2:12:93:6e:fc:c0:
cf:d0:97:90:cb:5d:15:01:fc:69:64:ad:f6:ce:a7:
08:23:cb:25:6d:2f:1c:0f:ae:d5:57:bc:fd:8c:e9:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:E5:C4:A4:B2:6D:B6:D5:BA:3A:06:1D:F7:10:6D:40:11:60:76
X509v3 Authority Key Identifier:
keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c1:6d:b6:09:44:e2:d6:79:56:33:78:c5:e5:49:71:dd:9d:
c7:b1:a8:8c:40:eb:cb:68:b1:cf:88:35:21:77:27:6f:d3:af:
25:f6:37:bc:22:ba:3a:6e:8e:b0:61:33:cd:da:2d:21:98:53:
9e:a2:e5:0d:20:d2:54:b7:53:57:1d:41:3e:6c:3b:46:2b:a4:
e1:c5:c7:bb:93:18:d1:9a:2d:f3:0d:c5:98:31:87:f1:6b:61:
37:74:7b:88:99:a8:8a:fe:c8:78:e6:b8:6d:e5:d8:79:08:79:
b4:f5:08:a1:64:26:c6:81:46:12:7b:3c:ff:67:2e:f0:da:67:
7e:47:25:e0:e1:1a:47:a9:6f:06:b4:60:43:b5:1d:5b:05:62:
b4:1d:d8:ba:66:e1:f3:5c:2a:ab:5c:56:16:f8:51:44:79:e5:
2f:a4:59:93:c8:ef:f9:5e:89:df:02:46:f5:33:99:82:ea:69:
b9:7f:ea:12:90:50:28:dc:2d:89:f0:c4:cb:a1:89:10:51:a2:
79:e6:a5:2f:f8:48:af:23:81:27:11:ca:c0:b7:8d:a4:77:50:
d3:7b:dd:65:8a:5c:c0:fb:91:4e:c8:3e:d0:01:44:02:e2:2f:
b7:cf:ea:81:9d:51:5c:9d:2c:1e:69:fc:ed:f2:f7:a3:53:db:
52:d4:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:15 2026 by rpki-client