
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json)
Hash identifier: TIMsGCuXeBY067lrl6hnN6wuM65vhUKlCOMcetId3ms=
Subject key identifier: BA:D9:69:D2:DE:13:CA:2B:D1:04:E5:98:94:79:45:38:DC:22:4D:C6
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial: 066E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
Manifest number: 0651
Signing time: Wed 22 Jul 2026 23:26:03 +0000
Manifest this update: Wed 22 Jul 2026 23:26:02 +0000
Manifest next update: Wed 29 Jul 2026 23:26:02 +0000
Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: /ZaQoPcp4tQO11PAb7GoULYhqwzWfueZ5qFys8c7d1Y=)
2: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=)
3: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=)
4: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=)
5: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Validity
Not Before: Jul 22 23:26:02 2026 GMT
Not After : Jul 29 23:26:02 2026 GMT
Subject: CN=6a61518b-26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:de:60:37:ac:b3:c8:21:8e:3a:36:3d:2c:
cf:c4:ee:6d:a3:19:b6:1f:d7:10:5f:56:63:06:70:
36:08:19:aa:92:30:37:c2:60:ff:19:04:d1:4d:89:
6e:fa:d6:51:82:00:2c:46:74:db:84:54:7f:6c:5c:
8b:a1:89:07:a9:19:3c:db:08:97:24:f8:02:03:95:
f6:55:00:f2:36:22:c6:6a:24:56:e6:bb:94:45:7f:
1c:7c:c3:c3:2e:0e:40:94:19:c3:fe:b4:7d:e5:02:
f3:bf:76:e5:18:86:3a:4e:b3:47:20:a7:44:0d:10:
93:23:1c:db:3e:66:a3:e5:38:72:05:6b:33:89:3f:
0e:1f:bd:38:b0:28:39:54:93:65:5d:b3:eb:bb:10:
07:d7:bc:19:c0:e1:99:f7:3f:78:93:ae:76:53:73:
c8:00:b4:f8:b9:c2:98:07:3e:ef:2e:4c:67:46:27:
e2:0c:65:4f:22:ce:41:1c:8f:4d:d5:dd:3c:0f:d9:
f8:4c:1c:26:b9:59:de:79:cd:e9:59:6c:98:28:9b:
11:8e:6c:05:60:93:35:31:99:f9:98:6c:8b:5f:9d:
da:b0:e3:83:47:a4:cf:e6:e2:ee:ed:0a:db:35:f9:
92:98:d5:6d:15:eb:51:7f:7e:e5:cb:41:df:6f:e2:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:69:D2:DE:13:CA:2B:D1:04:E5:98:94:79:45:38:DC:22:4D:C6
X509v3 Authority Key Identifier:
keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b7:82:ea:2f:ca:2c:11:53:c9:53:0b:d6:4e:b7:72:e2:e0:
01:5c:d2:73:9f:1e:11:06:54:c7:5d:8a:ef:2f:a5:71:d2:09:
ef:36:e0:0a:a3:4e:a0:a5:c5:d0:5b:66:9d:0d:c8:de:74:2d:
8f:cd:95:b9:1f:a2:d3:1d:e3:45:92:7a:72:38:9e:e0:3e:ce:
53:37:9e:09:b3:3d:d8:61:4d:9d:6a:a5:8d:ae:6b:ea:b6:2d:
c0:40:59:e7:e8:c4:f7:11:30:91:89:79:7c:71:08:1b:fa:3f:
51:2b:e4:1e:66:05:00:8e:ff:77:df:95:0d:20:15:85:9d:21:
08:59:4f:a6:71:c4:58:d0:67:01:41:35:ec:3f:58:8a:96:de:
1f:86:82:58:f9:a2:4c:70:e9:49:d4:9c:1a:97:fe:48:e2:3e:
6a:81:37:e7:79:f5:6d:40:20:3c:00:78:46:e8:be:64:f7:e2:
be:78:e1:66:c4:33:bf:f2:1a:92:66:a7:72:64:0c:cc:fb:7a:
15:21:e0:7d:99:58:82:17:a3:81:74:2e:16:5e:b5:60:a9:bf:
06:f7:d4:a5:74:69:ea:c2:c4:4d:45:86:ef:25:e7:89:1d:16:
02:86:8a:69:d9:e2:09:0a:c1:ea:40:c9:3d:c2:4d:50:e8:9f:
65:12:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:58 2026 by rpki-client