
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier: zmcdkwu1ZvNRzKIJw569MC8aDhOD0Is9RxbhTTk0lx8=
Subject key identifier: 7B:FD:4A:1C:05:A3:68:31:FC:21:F3:F7:F9:67:FA:AB:DA:87:1C:60
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial: 1240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number: 1210
Signing time: Wed 22 Jul 2026 17:15:49 +0000
Manifest this update: Wed 22 Jul 2026 17:15:48 +0000
Manifest next update: Wed 29 Jul 2026 17:15:48 +0000
Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 5wCTLu54/YNy25JZS7E2kXZ0QhcJ3nLNp6HFHuHbIR4=)
2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=)
3: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=)
4: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4672 (0x1240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Validity
Not Before: Jul 22 17:15:48 2026 GMT
Not After : Jul 29 17:15:48 2026 GMT
Subject: CN=6a60fac4-66d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:f2:39:5f:76:0b:10:c4:fd:f0:83:31:14:
5e:8a:37:84:7b:ba:c0:0c:21:88:bf:99:3d:6b:d8:
87:1a:c4:f9:8c:f3:f8:95:2f:f9:09:38:12:b2:db:
22:d5:44:51:f3:b8:b4:24:6e:75:04:a4:8a:a7:a7:
8f:aa:df:3f:2f:5f:34:71:44:e2:a8:a3:db:03:6f:
23:b3:b4:78:17:81:7e:12:c9:1d:3e:45:07:27:96:
b9:8a:9f:ff:94:39:b2:ed:e5:d8:01:0e:84:dc:77:
49:18:7d:ac:eb:bd:12:67:33:a1:7e:ee:c5:50:a1:
31:da:2f:2e:75:0d:f6:28:03:5f:b1:13:09:c6:20:
76:8b:9e:6c:c2:f9:71:07:8f:cc:51:f7:d2:c7:73:
c1:59:f7:8e:62:eb:5d:49:65:78:6e:28:12:3a:b0:
c5:0e:b4:b5:ae:9f:9c:1f:b5:d0:37:20:6a:60:62:
6d:1a:dc:b7:bf:d6:f2:1f:b2:b5:0e:ad:33:4a:d0:
89:2c:8c:43:d7:09:1a:d6:e6:e6:08:ea:cf:65:79:
2f:23:48:36:dd:3a:8e:13:a4:25:11:a2:af:62:cf:
ff:34:c7:5f:9c:aa:57:0d:cd:eb:41:fc:29:b4:05:
74:79:97:b9:dc:ee:3f:27:8d:a5:50:27:4b:12:89:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:4A:1C:05:A3:68:31:FC:21:F3:F7:F9:67:FA:AB:DA:87:1C:60
X509v3 Authority Key Identifier:
keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:75:63:e5:c7:11:e3:1a:83:5a:85:28:26:c6:d6:c3:fa:27:
bf:71:68:29:ab:2d:6a:be:f5:84:63:47:5c:d8:50:d0:9b:bb:
d5:5f:54:d7:6d:47:62:85:43:fc:c8:3c:dd:0b:84:b7:00:5c:
e8:b1:db:7e:19:d8:6a:a2:33:6e:5d:d7:42:a9:c6:ab:5b:89:
87:de:ef:88:e1:22:4b:ae:5e:97:b6:47:6f:14:c2:02:36:c8:
41:c9:73:d5:4d:fd:e1:c7:b3:f9:5a:f3:c2:70:a8:3e:af:ca:
54:3e:2b:98:ed:45:9e:f5:79:64:c4:18:e1:3f:6a:05:21:f9:
44:71:b9:a9:95:ab:50:41:32:cc:3e:c1:26:28:4c:1c:b7:3b:
4a:76:e1:8f:6b:c5:01:49:55:fc:70:27:b2:30:07:40:03:82:
a6:54:33:38:b5:92:5d:e0:53:5c:64:62:89:13:51:d9:5f:ae:
32:91:00:7e:9b:35:3b:f5:22:bb:93:87:dd:0c:95:3c:26:2f:
5b:38:29:c7:4a:7e:f5:5d:51:84:4c:a3:22:22:93:34:49:17:
29:9a:39:5b:90:fc:d5:c9:fe:6e:bb:5b:42:9c:d2:cc:ec:5e:
6b:48:f8:18:d9:ed:a8:5c:c0:ab:7b:7f:55:06:da:aa:0a:b7:
cb:26:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:18 2026 by rpki-client