
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier: uAeTw4rxkPzHVTp7spvN/iPA53web5s7bGlOwGnQ8s0=
Subject key identifier: CE:68:C8:06:81:F9:D9:12:2A:D2:86:B0:03:58:99:06:B6:25:9B:18
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number: 05DF
Signing time: Wed 22 Jul 2026 23:55:07 +0000
Manifest this update: Wed 22 Jul 2026 23:55:07 +0000
Manifest next update: Wed 29 Jul 2026 23:55:07 +0000
Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: gv8GuynCFlaToApSi6MWBCJPwsoOkNtNCCr47Ikctjk=)
2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=)
3: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=)
4: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=)
5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=)
6: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=)
7: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Jul 22 23:55:07 2026 GMT
Not After : Jul 29 23:55:07 2026 GMT
Subject: CN=6a61585b-111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:88:2a:d7:4a:1f:ba:34:00:da:a1:94:bc:
de:a6:8a:57:17:a9:8b:06:00:fe:6a:66:e9:d1:05:
0a:d0:ef:2e:1a:45:08:c3:e7:bc:db:28:28:b4:26:
4e:52:54:f9:bd:75:d2:42:e8:e7:2e:36:cf:09:c5:
e2:56:32:0c:cb:ad:71:6a:d8:40:8f:73:bd:d9:d0:
5c:52:62:34:40:b9:c8:9f:90:27:51:3f:68:7d:ec:
31:43:88:bc:06:9e:86:89:b1:80:55:a0:0a:09:d6:
aa:d1:4f:c1:ae:5f:91:5c:33:0b:5e:f4:4f:c9:c0:
fd:08:1c:57:8c:82:21:f2:ff:70:35:88:7a:ce:21:
86:99:6e:30:fe:07:a4:00:23:30:6b:27:a0:66:f9:
9b:04:7f:6b:5d:cb:2f:b0:9c:7c:80:5b:af:03:17:
33:6b:85:7b:40:1b:b1:50:11:4c:13:ac:70:83:9b:
03:65:15:49:1b:16:a2:57:62:c3:e9:00:53:3b:21:
e7:e8:18:cb:6d:56:a3:83:67:4c:55:88:52:92:93:
50:8b:7b:8d:db:0e:b3:fe:d0:cd:b2:d3:2d:4a:6e:
2a:35:45:41:5c:c7:4d:a4:c9:a0:4c:46:90:a0:45:
d8:07:da:07:07:9c:ee:88:82:93:8d:9b:90:13:43:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:C8:06:81:F9:D9:12:2A:D2:86:B0:03:58:99:06:B6:25:9B:18
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:ae:78:87:91:fb:d1:03:b1:a2:f8:a2:26:f4:1b:79:18:
43:2e:1a:1f:26:8e:84:61:33:9c:1f:48:1a:56:8e:46:60:4e:
3a:4e:20:1c:1d:53:c9:45:bc:38:ef:22:5a:bd:32:50:0c:b8:
8e:89:ff:cf:ce:7f:f1:05:a9:cd:fc:a1:98:6f:74:22:a5:cf:
e5:e2:4a:3a:d9:9f:23:c6:ff:1b:8f:d5:b5:0b:7e:42:79:3a:
b6:e9:6a:a5:0f:9e:94:f3:fd:11:69:c5:01:ec:b2:ae:2a:4e:
db:ec:84:fe:0b:7e:41:7b:31:c5:aa:df:53:02:10:a6:d0:5d:
3c:0e:f2:97:94:94:91:5a:ae:1a:80:04:5a:12:b0:9c:db:20:
fe:7d:1d:e0:b6:2a:25:87:a1:d7:c7:9a:2d:8a:4d:a5:81:df:
09:2e:9b:b8:6e:f6:82:fe:d7:dc:e3:b6:47:5f:d3:2b:c0:60:
e1:7c:42:d6:d7:74:50:fa:bc:34:a9:4c:84:2e:9e:69:db:b5:
0d:34:d0:39:d3:bd:2e:8d:db:39:d4:11:51:69:a5:78:1f:07:
fc:57:59:59:f1:2c:1b:8a:df:7c:0e:64:b3:1b:88:4e:9b:d9:
47:2f:f8:ef:8e:69:87:e5:54:63:a4:13:51:86:8a:f9:56:5e:
fa:e2:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:11 2026 by rpki-client