
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier: arf84x65m9udjKC/8+a5F0LO2wVpAeT5p75alY4Y2ps=
Subject key identifier: 7F:84:2C:B4:82:DC:5A:75:11:6B:FB:F1:6E:59:16:30:AA:40:D9:21
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number: 01BE
Signing time: Thu 23 Jul 2026 05:43:47 +0000
Manifest this update: Thu 23 Jul 2026 05:43:46 +0000
Manifest next update: Thu 30 Jul 2026 05:43:46 +0000
Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: /QbweFpGozVNojlBrEHwCyumTxy9xOXUt9tFap3ytE4=)
2: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=)
3: EEC42F86232311EFAF815012C4F9AE02.roa (hash: o8afSdgZmX58QcVUZe75xNDu09+q2TPxGPAeyh/MOEM=)
4: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Validity
Not Before: Jul 23 05:43:46 2026 GMT
Not After : Jul 30 05:43:46 2026 GMT
Subject: CN=6a61aa13-a416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:c0:14:77:46:9c:27:f6:85:b4:55:9f:a3:
f9:72:04:36:c9:dc:5a:50:27:2c:89:34:67:bd:6c:
18:97:7c:a6:8b:40:2a:99:06:d4:fc:5b:c1:e1:23:
90:48:39:68:da:e5:6e:50:ef:33:ed:47:e5:fa:f7:
32:50:0f:1f:36:7e:81:d6:44:cc:ea:dc:ba:1f:22:
26:61:66:d5:ff:de:f4:fe:1a:7c:b2:1d:c9:ad:ea:
14:33:18:f8:24:04:f5:b0:33:ed:14:68:a4:20:36:
96:b0:27:32:ce:ae:ee:e7:57:cf:dd:48:64:fa:a3:
a0:fb:7a:34:6c:21:75:f9:cf:35:47:d2:2e:b2:87:
c7:d7:a0:1d:5b:72:17:93:d9:1e:4b:1c:f2:5a:d5:
83:63:26:9d:00:5c:19:97:23:86:62:e2:ac:71:4b:
6d:68:69:1b:c8:c0:07:e1:e4:04:aa:aa:08:b2:25:
8b:54:94:d2:5e:dc:c8:da:80:1b:8c:66:79:fc:79:
20:b2:6b:b0:88:43:ea:32:6d:15:41:3f:56:f4:2f:
a3:e6:d9:a1:6f:5f:cd:f0:81:5e:8d:38:f7:02:d6:
89:91:88:d6:c8:fa:e7:99:06:54:e4:6b:0e:a7:ed:
8b:7b:e0:91:9d:8a:e2:8f:6a:fc:cd:c6:c1:52:fe:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:2C:B4:82:DC:5A:75:11:6B:FB:F1:6E:59:16:30:AA:40:D9:21
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:9f:59:bb:da:9d:5f:fb:76:c9:04:31:76:40:47:cb:4c:
97:2d:de:d0:00:ee:bd:02:21:60:c3:f0:39:fe:61:28:13:e2:
1a:90:85:cd:d6:93:48:da:d1:32:9b:22:84:0f:8e:a4:85:8a:
94:aa:10:e4:c6:e7:9c:6b:9d:70:c1:39:0c:60:e3:44:1c:2f:
4c:87:7d:45:c6:08:e4:1e:a8:f0:37:64:d9:5a:01:ef:2e:21:
2f:fc:10:97:8e:49:ef:58:0a:14:34:e0:62:8a:f5:3f:7e:f5:
73:51:dc:e1:d9:7f:53:6a:77:d0:2d:58:69:c9:4b:b2:1c:ea:
73:8b:69:30:13:81:b1:40:b3:25:95:4c:87:6a:da:6c:17:f7:
e0:ac:07:0b:a1:07:b3:a6:1f:3b:c4:03:15:90:56:35:2e:12:
38:45:b9:32:34:76:00:71:f4:3f:fa:cb:13:36:80:0d:f9:ca:
03:d6:34:3e:d0:aa:24:8f:04:27:a3:09:49:83:33:a7:e8:68:
bd:b4:64:c1:e1:cc:22:33:b9:40:01:05:36:13:08:b6:1e:b0:
89:35:5d:10:83:5f:5e:cc:da:7b:e0:75:4e:4f:81:13:75:2c:
9c:f0:11:65:c1:d4:4e:c1:d9:16:bf:8c:64:eb:f5:3d:bf:4d:
34:7a:6a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:14 2026 by rpki-client