
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File: o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier: 8Xmu0dhidHl4MQMBx+BULS5un3dTgusq/4yP8ohEtSs=
Subject key identifier: FC:FF:EC:35:B2:00:1C:95:D1:F1:1A:8A:EC:FA:88:4A:A5:06:61:1B
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number: 58
Signing time: Thu 23 Jul 2026 10:13:42 +0000
Manifest this update: Thu 23 Jul 2026 10:13:41 +0000
Manifest next update: Thu 30 Jul 2026 10:13:41 +0000
Files and hashes: 1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: ijKeg34yDtw6oSH9d+uuFxCQWcVioIu4YSK+aBlX/Ek=)
2: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
3: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Validity
Not Before: Jul 23 10:13:41 2026 GMT
Not After : Jul 30 10:13:41 2026 GMT
Subject: CN=6a61e956-e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:24:d7:04:4e:29:d5:64:1d:d1:f3:d3:2f:
20:11:a4:3c:95:77:00:45:6a:00:52:34:01:d8:9e:
a7:99:53:93:3e:67:e1:71:72:12:73:df:b6:4b:78:
ad:97:df:32:49:c3:11:40:7a:9d:5c:6f:99:ce:f1:
60:23:51:c2:45:b3:94:bb:1b:86:b4:63:d9:62:a3:
4b:fc:ad:50:34:3a:c8:bd:42:07:e4:49:fa:47:11:
b8:7d:3c:93:47:c4:d8:e3:d0:b3:3f:8c:f2:93:b0:
97:9a:96:0e:92:37:4b:79:05:85:94:98:16:50:73:
11:da:20:d6:49:4e:21:f3:97:3e:aa:c6:17:8a:b2:
fc:3f:d8:79:55:a7:e7:c9:6d:c0:29:f9:d2:8a:51:
63:6f:2d:92:d2:8e:14:e0:85:07:dd:af:9b:fd:66:
17:6b:b9:c3:b2:fd:54:e9:31:68:7e:b5:ab:41:c1:
40:04:b9:26:54:2e:95:99:26:f9:29:54:a3:39:d7:
c9:5b:9e:5c:c1:68:6e:45:16:c7:1d:e3:23:c0:9e:
a5:14:e9:55:fe:e8:ae:7d:33:4f:16:89:a2:33:a0:
9e:79:ec:4f:59:e9:04:f9:ca:6a:34:71:69:95:73:
65:3c:2d:41:d6:98:9f:58:e9:59:80:21:c7:82:8f:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:EC:35:B2:00:1C:95:D1:F1:1A:8A:EC:FA:88:4A:A5:06:61:1B
X509v3 Authority Key Identifier:
keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:fb:d1:c0:b8:d6:e6:59:63:40:6c:3f:f6:89:80:f0:2a:
4d:92:cd:56:ef:8e:62:6b:1e:ae:94:fd:8c:67:bc:dc:bb:90:
9a:32:2a:c2:84:f5:e8:d1:db:65:fb:e6:a6:28:c5:8e:52:b1:
43:ac:83:c7:e7:08:e0:fa:6d:71:b5:ea:a2:d6:59:3a:f0:2b:
9c:ef:f8:f4:1d:e3:ab:78:f3:80:68:2c:a6:7b:07:7a:40:dc:
a0:26:c8:e2:38:6b:2f:61:a6:60:ef:6e:92:27:2b:58:ed:7d:
3a:a1:2a:7a:f7:e2:ec:0d:57:44:f0:4c:7f:e6:59:05:99:fe:
80:76:55:ad:00:af:25:3f:58:2c:9b:85:78:d6:b0:a2:11:da:
ab:a1:d5:40:4a:9a:1e:80:d8:0c:55:e4:82:37:f6:b3:e3:20:
c5:80:6d:0a:54:3a:3e:19:52:e5:dc:57:42:dc:b4:3e:97:50:
7f:ea:dd:98:72:bc:a2:f7:bd:69:9a:ec:be:c4:6a:87:54:32:
c2:0c:57:20:ad:e2:9e:8e:14:44:9a:0e:b1:86:24:5e:b2:fa:
95:a9:72:9a:5d:5a:b4:09:3c:71:57:d7:56:4d:ac:6d:21:bb:
99:5f:db:d0:72:d3:0d:64:2a:d3:2c:a0:56:36:ae:a4:7a:41:
8e:0e:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:21 2026 by rpki-client