
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier: r7F9xzfDtP5f0cjCYPO8Zb6AYMvhM1nuvi9hcTE/QW4=
Subject key identifier: 95:ED:43:CD:29:AC:D2:85:CB:6A:38:94:22:77:68:47:D8:B6:4D:66
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number: 0594
Signing time: Wed 22 Jul 2026 23:57:58 +0000
Manifest this update: Wed 22 Jul 2026 23:57:58 +0000
Manifest next update: Wed 29 Jul 2026 23:57:58 +0000
Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: ppbBzzNT7RuNw9+H4/ACtC6N60E7lXIQaaixF6Mbv94=)
2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: W1EP3IxXiJCk2UOf11rTChQuuxRnXDrkYltbGuUo73Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Validity
Not Before: Jul 22 23:57:58 2026 GMT
Not After : Jul 29 23:57:58 2026 GMT
Subject: CN=6a615906-64b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:e2:c2:67:9c:ef:c6:a8:37:53:b4:80:10:
1e:ec:4b:3c:3b:02:71:91:d4:3f:ad:10:b9:24:17:
a9:d2:db:be:5b:9a:b7:f2:9a:37:4f:ec:f1:f5:cf:
3d:c1:0d:94:af:18:08:b9:23:a6:0b:d3:31:0d:7e:
c5:f2:99:e8:f9:e1:3e:bd:26:7e:72:f1:fb:ca:b8:
f5:ae:54:4c:d6:9a:8b:db:57:b8:d6:00:81:d4:a4:
13:f3:0d:7f:82:51:0e:30:45:6f:78:70:05:6a:c5:
1c:a3:1d:18:ad:8e:95:ab:ed:fb:f7:7a:8b:37:82:
81:a5:28:a9:71:67:3b:58:71:da:27:e7:05:30:24:
e7:1f:3d:d7:39:96:ce:91:f3:5a:bb:32:f5:41:00:
ef:86:8c:68:33:19:89:c5:c4:06:f3:91:b2:3f:58:
db:cf:d4:43:99:df:32:1d:6f:34:0a:d5:0d:ee:ac:
8e:5a:7e:19:f0:4a:6f:93:60:34:fc:42:01:a3:d1:
94:00:d4:a5:de:28:ca:42:2c:7d:04:b8:11:1d:54:
5d:d4:d2:c7:02:41:a3:c9:7b:4e:1f:3b:bd:39:11:
87:ba:29:1f:fa:0f:6f:24:4b:8f:f5:f3:31:5d:c7:
eb:6f:74:b2:da:fc:4f:ec:0d:5b:29:8d:1a:4f:68:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:43:CD:29:AC:D2:85:CB:6A:38:94:22:77:68:47:D8:B6:4D:66
X509v3 Authority Key Identifier:
keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:be:b8:59:70:94:d6:86:97:8d:47:7a:e5:1e:51:46:60:53:
9a:9d:97:3e:95:47:46:54:45:a7:40:14:c1:49:2f:0d:fc:12:
fd:f5:95:98:9a:32:62:25:60:34:e5:6f:02:c9:36:ca:46:f4:
96:43:b0:8f:54:00:5e:59:82:27:9c:26:40:7c:ea:a6:64:4c:
65:7f:94:88:be:e3:82:70:ce:69:85:60:3f:a7:6b:a2:a9:7c:
7b:a5:2e:0d:5f:10:f9:5c:82:6d:01:55:e1:8c:1f:c0:4b:33:
52:98:c2:f5:35:92:4e:a6:dc:ed:b0:73:5e:a3:9a:82:89:bb:
bc:c5:69:72:fd:81:cf:2a:22:bc:8a:91:50:cc:64:36:ae:0c:
c6:cf:6a:48:c2:4e:c6:5f:66:66:d8:6f:8d:ea:0a:d3:25:ee:
0f:c0:2d:25:2b:63:59:e6:38:04:e1:b5:56:f4:28:73:51:4c:
0d:51:e9:af:81:ab:54:cc:a8:74:62:b6:2c:96:c8:48:69:52:
65:9d:5f:60:0a:0b:ad:6e:6f:d4:45:42:31:7e:5c:95:48:3a:
0a:74:6e:f0:14:21:ff:3b:01:3e:9b:c7:95:67:99:7d:8f:e5:
24:84:b6:b1:c2:db:0c:a4:1d:26:4d:14:7c:55:75:5b:1b:e8:
dd:cc:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:37:56 2026 by rpki-client