
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier: u8PqwCAl4P9b/C/9erInPS4ClGU0I7KZi5HQ8xxOvW4=
Subject key identifier: B2:3B:49:8E:B6:E0:2E:AE:E4:E7:FC:2D:E5:E6:59:2D:51:44:9A:8D
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial: 0A0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number: 0A03
Signing time: Wed 22 Jul 2026 20:13:04 +0000
Manifest this update: Wed 22 Jul 2026 20:13:04 +0000
Manifest next update: Wed 29 Jul 2026 20:13:04 +0000
Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: xP0JukDUrb2KuJBF8yLhuiAMOpEqAe3dLiCLiCASJLs=)
2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: 9FG0qENmdArxQzpwjYs9h3L8NGZ5bRfq2IDI4vhgwdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Validity
Not Before: Jul 22 20:13:04 2026 GMT
Not After : Jul 29 20:13:04 2026 GMT
Subject: CN=6a612450-6921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:70:da:2f:8b:19:71:f7:b1:4f:d9:7d:69:
a0:f3:7b:81:44:59:66:d9:2a:fb:08:76:65:19:38:
42:4e:e2:d9:fc:3e:52:bd:32:a1:75:4c:da:42:c8:
be:19:d5:e3:0c:87:8a:8a:f8:d2:96:03:fd:71:58:
95:a7:fa:6a:77:05:6c:33:9b:42:e2:69:32:93:28:
c3:c1:65:96:47:db:70:33:91:22:07:84:97:38:2c:
00:60:8a:ab:58:b2:e2:05:71:1f:87:e7:83:ff:99:
fe:6e:98:b0:ad:8d:aa:e6:22:e4:a7:da:1f:b8:87:
db:6a:88:7e:41:a0:75:b5:b8:fd:ef:a9:9f:ad:dd:
e6:2b:04:0e:52:4b:de:f7:1e:b6:79:fe:35:d5:da:
80:8e:f0:11:61:ef:5b:ac:84:f7:64:c9:4b:65:e8:
d9:b0:87:27:5a:b7:56:dd:f6:73:e9:90:4e:69:b4:
dd:27:a1:23:4f:41:af:e6:41:69:47:eb:98:38:5e:
8b:8c:a3:c9:c2:87:cd:25:89:7c:c6:7b:2d:4a:42:
4c:ad:c0:4e:80:10:ca:dc:20:91:41:1d:53:1a:af:
6c:d7:d7:cb:9f:a5:ae:75:cf:9e:65:9b:59:2b:b9:
54:e1:15:65:20:42:b9:4e:07:5d:05:64:30:07:9d:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3B:49:8E:B6:E0:2E:AE:E4:E7:FC:2D:E5:E6:59:2D:51:44:9A:8D
X509v3 Authority Key Identifier:
keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:6d:c0:71:96:bb:e5:aa:ac:de:64:41:96:40:0c:34:9e:
e1:c2:29:b3:1e:32:94:d3:cf:b9:3a:86:1a:7b:69:80:91:51:
a4:6c:6e:cb:4d:b3:a5:ed:76:56:37:f3:23:c7:8c:13:08:5b:
bb:90:8e:4e:62:e9:4e:54:6f:92:62:e8:e8:54:bf:be:c0:16:
66:e4:a6:89:7d:65:9c:1c:83:44:86:f2:34:2d:85:bb:ba:4c:
94:c0:7e:29:f9:cf:ad:96:9e:55:fa:f5:bf:4d:79:fe:00:50:
e6:72:9c:86:84:56:3a:6b:0f:08:de:cd:3c:40:6c:f9:09:3d:
57:c3:88:91:75:a6:bd:45:f5:ff:a1:91:82:c3:6e:eb:1b:5b:
93:5b:a0:9e:df:2a:5f:bd:e8:f9:0d:13:41:48:94:24:ca:85:
33:0a:49:2e:ea:af:3a:b8:3b:30:5f:ec:90:65:6e:16:fd:f0:
7f:72:67:ea:9f:48:98:55:5c:7e:b8:06:af:75:bd:44:19:46:
09:8d:a0:df:39:e3:f7:2f:3f:2f:46:a4:c8:84:81:3f:b9:91:
a7:5a:a0:c1:cf:ab:5f:3d:48:51:5d:ae:fc:3c:11:21:da:9f:
72:1a:42:b6:6e:75:b5:8a:1e:24:5c:4b:63:85:60:36:9a:db:
4b:c4:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:51 2026 by rpki-client