
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: DdaFXLB86kXWB7TFlocwwKGD+P7jyDoTKB/uvil3cys=
Subject key identifier: 0F:4C:A2:F2:1D:19:6A:32:77:C9:2C:60:39:C6:60:A4:06:95:23:7D
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 120A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 11F0
Signing time: Wed 22 Jul 2026 17:17:41 +0000
Manifest this update: Wed 22 Jul 2026 17:17:40 +0000
Manifest next update: Wed 29 Jul 2026 17:17:40 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: Z0YonVTCm3uZDP13IHFIkq8sCB3u5XPJP9k/Jumf0kU=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Jul 22 17:17:40 2026 GMT
Not After : Jul 29 17:17:40 2026 GMT
Subject: CN=6a60fb35-8f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:57:32:ad:39:44:d9:ce:63:3c:ae:4a:8a:
07:9e:42:5e:59:46:73:ba:a9:04:59:3c:9e:65:f5:
95:80:43:5f:1e:fd:b0:6e:47:fc:36:7b:3a:66:3e:
86:91:ee:b4:79:c3:e4:7b:ca:d7:24:c1:d4:13:30:
6e:08:16:3e:da:a3:ff:c0:56:40:08:0a:3a:0f:40:
f8:26:a7:da:99:c9:78:d0:ad:8a:80:1d:a8:b0:bd:
d2:9c:7f:ec:e4:4a:9b:3f:ac:2a:28:67:66:5e:ed:
50:78:7f:33:88:4c:16:7c:c5:ea:cc:05:0a:52:b1:
23:a1:cb:40:f8:0f:1e:b6:76:86:9a:35:1a:21:8d:
f6:d5:a6:06:8b:ca:70:d5:3d:67:a8:bb:97:d5:b2:
5a:3d:38:e0:b7:f7:59:45:95:4c:af:5a:6f:4a:a1:
e0:79:89:72:a3:62:a8:fb:25:30:71:b6:15:a7:68:
1a:c3:c4:30:6c:d9:ca:17:1d:74:29:b8:5b:c0:90:
61:31:c1:24:79:3a:38:9f:88:7e:0b:e1:22:6b:3b:
74:1e:1b:fc:c6:b0:79:f4:3c:e8:ac:22:bb:aa:7e:
5f:b1:3b:69:8b:c0:dd:95:5e:19:37:07:61:77:b7:
af:ef:63:65:d6:51:71:20:17:f2:72:df:5c:44:1c:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:A2:F2:1D:19:6A:32:77:C9:2C:60:39:C6:60:A4:06:95:23:7D
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:f2:a2:9d:ba:bb:fc:c4:d4:df:0b:b0:00:a0:18:42:ff:
9b:8c:4a:e7:1e:98:50:ea:c8:b5:83:e8:26:95:d5:7e:11:65:
33:92:7a:85:e7:d5:14:c0:ca:8f:5a:e4:7d:78:9f:a8:c4:3a:
2e:05:14:49:4e:03:a9:01:95:a6:b0:89:1e:23:d3:ac:de:16:
4b:ca:4a:20:cd:c2:44:88:14:25:3d:bc:87:ce:87:14:af:2f:
79:5b:61:87:03:81:67:28:55:fb:31:72:b8:de:f3:a3:99:7d:
69:be:e7:49:d7:9a:9a:4c:13:67:09:fc:14:ff:f0:3b:99:00:
6c:84:00:be:9c:bc:45:9d:ca:a2:5a:70:b1:f7:dd:56:89:41:
9a:86:87:e4:58:e7:b9:6b:b8:d4:79:33:83:e7:2a:fe:c6:70:
d4:ad:5a:ef:48:85:83:f4:8a:49:fc:ae:6b:bf:b7:82:71:22:
8d:4c:5b:eb:5c:a6:3b:ae:4d:7d:4a:22:11:cc:5a:d7:95:cc:
9d:a2:e0:ec:8c:75:23:4a:45:43:d6:dc:bb:5f:f0:8c:da:2b:
7b:fc:99:92:7e:4f:73:ea:e4:1d:6c:29:8e:c3:64:34:a2:56:
f2:5a:61:a4:1c:09:b2:c0:fa:fa:a6:cc:e0:ef:4b:3f:59:1d:
33:40:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:32 2026 by rpki-client