
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
File: j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft (raw, json)
Hash identifier: tpMe2auogdcmfcUaDOeFKP7/YgER+VTAPDhJ4ICoDC0=
Subject key identifier: 07:86:3B:55:E7:75:96:A0:3E:30:D6:57:E6:4C:72:48:A5:8C:44:17
Authority key identifier: 8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8
Certificate issuer: /CN=A91F9F3A/serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
Manifest number: 21
Signing time: Thu 23 Jul 2026 10:56:30 +0000
Manifest this update: Thu 23 Jul 2026 10:56:29 +0000
Manifest next update: Thu 30 Jul 2026 10:56:29 +0000
Files and hashes: 1: j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl (hash: snLaUZzt08FWpWK1Ip9YLYq01T0Xx9rEV/ytOpxxwyE=)
2: 606CBF12542411F18D5724329A833773.roa (hash: E5DSsr7ls+2R5IV+XJJedGkiZxXXiluiB3q0yuIQn0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl
rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F3A, serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8
Validity
Not Before: Jul 23 10:56:29 2026 GMT
Not After : Jul 30 10:56:29 2026 GMT
Subject: CN=6a61f35e-44c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:6e:77:d0:ec:ca:68:39:34:5f:b2:93:41:
c6:37:34:27:3d:00:f9:ab:40:e6:2d:31:43:f2:32:
45:3b:1f:96:14:4a:ca:60:32:76:7f:13:a7:92:da:
28:4f:ed:f0:94:50:be:1b:ec:0e:43:5b:53:ab:2f:
cc:0f:a5:5f:35:91:87:79:98:d8:bd:df:cf:c9:02:
c7:72:73:07:a3:6b:bc:ce:30:87:51:e7:59:86:18:
4e:6b:91:aa:8f:60:ac:35:f1:77:99:9c:6f:57:9b:
80:53:86:05:72:00:2a:90:8f:ee:b5:b1:42:d7:f3:
15:f2:66:e5:48:fc:9e:92:01:76:df:bb:c9:ef:0c:
0b:f1:62:4e:3b:48:ad:c9:56:5f:b3:c1:e7:0b:8a:
cc:e9:86:b0:37:b0:ab:aa:a3:21:b1:d1:65:f8:39:
78:a4:30:48:39:56:92:c5:39:73:82:73:0e:83:d9:
94:4f:39:c2:1e:e2:de:a2:e9:85:f0:00:3f:e6:5e:
ba:87:06:43:73:15:a0:b1:e6:ba:79:9e:97:73:eb:
96:50:7f:ee:06:a5:58:e0:09:7e:15:9b:31:e2:8e:
d5:3a:df:0a:aa:d2:eb:a2:e7:b9:90:b8:dc:65:18:
c0:11:92:a1:9b:fd:c9:91:c5:74:24:f2:99:b5:97:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:3B:55:E7:75:96:A0:3E:30:D6:57:E6:4C:72:48:A5:8C:44:17
X509v3 Authority Key Identifier:
keyid:8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:0b:e7:97:d1:38:5c:0f:82:bb:4b:ae:b6:1a:71:86:65:
cb:3e:a1:8a:5c:27:3d:62:a8:b0:cd:54:c9:11:a3:39:9c:7b:
0d:d5:6a:ec:df:a8:ab:cb:84:05:37:d4:46:ff:df:43:ce:01:
e3:47:a4:c1:45:d3:5c:87:39:b8:8b:0c:33:c0:e4:b1:10:e1:
4d:eb:5b:61:24:eb:12:1b:70:ab:b9:75:8d:b3:14:bc:50:4c:
76:f8:a0:44:d3:91:76:45:fa:21:44:97:6c:45:4b:e0:32:79:
2e:54:5a:d3:37:20:95:6f:20:63:7c:ad:76:8c:31:71:63:6e:
45:03:75:5c:4d:07:65:55:f0:a3:b3:22:18:5f:d5:63:60:b0:
48:12:5b:d7:43:d2:b8:a0:e0:70:a3:68:56:c6:87:53:ce:dc:
67:95:ac:d3:04:ae:44:6f:02:05:7d:8b:3e:ef:ea:67:c9:9e:
f4:1e:7c:d3:a3:2b:6e:2f:79:0d:51:10:65:aa:03:58:1e:c3:
31:4c:22:db:39:30:5a:0f:94:a6:8b:65:35:5d:c4:26:65:95:
d1:a6:72:91:06:4a:22:30:34:5f:08:17:6e:f7:ad:b5:83:50:
36:92:56:2f:0c:c2:2f:ea:5f:d6:c0:e0:f0:e2:dc:5e:a7:8a:
07:45:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:01 2026 by rpki-client