
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier: JEJjxC5l8Q1RqBz35+edUYdBLAdPN3zUA+FErgRQAkk=
Subject key identifier: 92:8D:E5:95:26:A2:21:5C:85:BB:28:A5:B4:AC:A6:44:1B:A0:A7:5A
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number: 0D02
Signing time: Wed 22 Jul 2026 18:34:01 +0000
Manifest this update: Wed 22 Jul 2026 18:34:01 +0000
Manifest next update: Wed 29 Jul 2026 18:34:01 +0000
Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: TozeW9iPXx/cQsKKTa8j/UQ3ZJ5rD2T/iqwd1eoXpLE=)
2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=)
3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=)
4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Validity
Not Before: Jul 22 18:34:01 2026 GMT
Not After : Jul 29 18:34:01 2026 GMT
Subject: CN=6a610d19-aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:12:27:f4:e5:16:80:ca:1c:73:2a:cd:b6:
61:73:41:5f:b5:31:2e:f6:fa:5d:a6:e8:31:64:d6:
7c:c5:41:a2:74:a5:86:9b:36:fc:71:84:b6:7a:9e:
0a:fc:8b:c7:bc:ef:76:63:67:dd:20:97:a7:08:da:
e2:f1:50:75:3a:91:f4:ec:83:5b:ed:1b:00:60:59:
ea:fd:d2:57:e3:9d:bc:a6:28:b4:07:18:7b:25:14:
90:09:7e:eb:c3:b7:b2:28:c1:c2:60:2f:ac:e7:21:
3e:fb:8c:4a:22:b7:1d:da:5b:7f:4f:ce:fe:8d:04:
5c:90:71:2e:0f:15:ce:a4:82:f7:c1:16:a8:18:32:
0a:3e:c2:f9:25:d7:a3:fe:ba:0f:d3:c9:5b:71:1d:
d5:b3:64:39:6e:65:06:dd:e3:f8:08:f6:bd:ee:c6:
a7:80:3e:2f:7e:ff:8c:98:69:ee:ee:1f:fe:d7:d3:
40:a3:cf:74:18:b7:5e:ab:8f:b6:c8:2a:48:26:98:
3a:79:15:33:de:88:58:3c:ce:4a:a9:8c:f7:2f:1b:
fa:2c:50:08:73:c2:13:06:19:a4:18:ae:fd:f3:eb:
20:2c:b8:76:ee:e8:2e:14:ad:d0:dd:da:70:c0:0e:
a1:38:d8:aa:a8:8c:5b:ed:6c:26:ee:7e:60:e2:18:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:E5:95:26:A2:21:5C:85:BB:28:A5:B4:AC:A6:44:1B:A0:A7:5A
X509v3 Authority Key Identifier:
keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:eb:36:59:cf:03:8e:96:66:ab:b8:69:c5:c6:7f:46:36:bf:
f5:09:23:8a:d1:80:29:84:cc:23:8a:29:fc:03:ee:43:ad:f1:
61:97:fd:2a:79:ec:30:6d:3a:a1:a6:24:23:d5:63:91:70:76:
6a:97:24:49:5b:79:26:29:f2:eb:f0:56:e3:89:e3:d4:fb:d5:
30:7c:6f:14:22:59:26:20:b1:df:92:b0:8b:8b:58:ae:41:18:
fb:72:3b:d7:b1:c4:f0:f0:5c:4c:65:4a:f3:d0:0f:92:19:ed:
d0:e2:ec:ef:59:bd:1c:94:6f:44:8a:70:d0:70:09:01:40:fc:
bc:3f:5b:0e:b3:a2:94:ea:5a:ad:35:6a:7f:29:7e:0c:4e:85:
ad:f4:35:9e:0c:04:0f:19:f0:1b:9f:bd:ea:3f:3e:e5:c9:b8:
ef:36:da:9d:2c:f7:81:47:9c:5f:c2:64:33:08:2d:d4:93:79:
0b:ae:9c:d5:1b:6d:11:30:fa:33:dc:74:df:18:b1:5c:38:23:
af:d5:79:c3:81:c4:29:de:a4:b6:20:0f:aa:0c:05:d0:35:d2:
64:b6:13:cb:6b:2b:95:e5:65:74:18:3d:6d:73:ce:bf:7d:72:
66:88:f0:1e:4b:fa:13:5d:a1:b9:67:b7:8a:e2:3c:81:fb:20:
6a:11:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:04 2026 by rpki-client