
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
File: o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json)
Hash identifier: 4bvgXSNemMOjqpKlzPu+WwX9t6Gf4xtRI1rJ2CkTe9Y=
Subject key identifier: D3:21:3B:94:74:F5:EE:FA:1A:D3:E6:F5:18:A8:A7:8F:C3:5F:4B:B2
Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Certificate serial: 06A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
Manifest number: 069B
Signing time: Wed 22 Jul 2026 23:09:50 +0000
Manifest this update: Wed 22 Jul 2026 23:09:49 +0000
Manifest next update: Wed 29 Jul 2026 23:09:49 +0000
Files and hashes: 1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: BPy3Yd8yOYRy9OJsy3otLgfU0aWU6fevIjZYSQeBFjs=)
2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: 2vUhihaED6w0NtltV5YY0cnZSdZY6BU1ckAfgYDMpvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1698 (0x6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Validity
Not Before: Jul 22 23:09:49 2026 GMT
Not After : Jul 29 23:09:49 2026 GMT
Subject: CN=6a614dbe-f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:c8:bc:e4:02:a4:2f:ef:a1:44:8a:28:67:
5e:15:a5:ff:e1:87:4e:b0:06:57:a0:15:a5:a9:a8:
0c:f1:2c:d5:89:e2:cf:03:8f:89:f2:a3:71:e7:5a:
fc:64:5c:1f:b9:d6:fd:8d:07:4f:5e:d1:0b:5e:e0:
a5:eb:75:40:6e:5c:f9:89:ee:1f:d0:85:03:4b:a9:
a0:ff:a7:a8:a8:06:21:87:d5:29:43:40:46:45:50:
5f:47:4d:cf:2b:72:84:67:f1:98:da:73:ff:7f:f5:
4b:3f:28:81:50:04:3c:d5:2a:ae:58:46:8e:76:c0:
2c:fc:17:1b:11:79:30:a4:2a:48:1b:a1:40:78:02:
b0:2b:05:29:fe:d1:fb:95:66:48:c4:35:41:97:9a:
f8:8f:0f:13:33:f9:a7:9f:62:9a:1a:eb:15:94:b5:
ee:70:41:b8:59:2e:63:20:c9:ce:1a:3a:cf:55:91:
c4:3c:46:f8:c1:7b:98:68:f9:8b:a7:24:23:8b:cb:
8a:58:40:e5:a1:bb:c3:00:de:79:da:b7:b6:fa:99:
46:c8:a1:f5:db:63:8b:f9:27:e3:9d:8e:2b:a5:18:
5c:d1:13:0e:b8:3d:7f:be:fb:2a:eb:db:c4:2d:af:
3b:a6:bd:0a:09:25:63:dc:2f:c8:cc:a7:08:5e:f7:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:3B:94:74:F5:EE:FA:1A:D3:E6:F5:18:A8:A7:8F:C3:5F:4B:B2
X509v3 Authority Key Identifier:
keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:93:15:6e:fa:ed:2b:df:7a:9e:4b:bd:d8:13:6f:55:d2:32:
f2:d3:14:79:21:b1:b8:be:8d:e6:73:e1:6c:da:4b:84:c3:d1:
44:81:8c:f8:87:00:bd:4c:ab:23:3f:fb:96:e6:03:33:4d:94:
11:db:36:8b:81:5c:55:01:53:53:f2:e1:1d:b5:5a:10:98:ba:
22:00:9c:83:6a:c0:08:1c:42:8e:4f:46:3e:2f:8a:ec:b8:f0:
9c:74:0f:24:0f:9a:83:05:0e:ed:ee:f6:6b:0b:2f:76:14:e7:
fb:2e:41:f9:2c:36:86:ef:3d:83:c1:26:38:97:6d:e5:30:75:
4f:15:46:53:ca:f6:d3:ee:a3:73:cb:dd:78:7b:91:b9:7e:6e:
d6:e8:17:04:45:34:b6:0a:73:70:c0:3d:61:04:e8:89:03:41:
4f:75:4c:da:de:52:6e:9a:10:9d:f5:78:5a:68:9c:90:e0:1c:
6a:da:a1:ee:b7:54:5f:86:b4:a4:40:b5:95:cd:3a:84:51:a7:
5c:0f:0b:31:8d:22:e8:80:1a:23:92:f9:4d:71:c0:01:11:a3:
f0:66:54:82:1c:af:17:af:de:6f:57:c3:1c:59:0a:f0:92:75:
8d:a9:35:ef:0e:10:9b:2d:e1:d0:a6:12:7c:8e:c1:26:21:ba:
82:8b:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:57 2026 by rpki-client