
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier: jMv/1ki0lhfSTKjk9JR+ect2Dq3X6DGtCVgK/2p2i/g=
Subject key identifier: CA:AE:57:BB:48:74:63:CF:67:72:54:B8:DA:4A:96:8A:C5:90:82:76
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number: FB
Signing time: Mon 27 Jul 2026 08:21:59 +0000
Manifest this update: Mon 27 Jul 2026 08:21:58 +0000
Manifest next update: Mon 03 Aug 2026 08:21:58 +0000
Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: FF1IwLoM73VvPy/eLnNHb5x+NCKcspGZyr0PyexBQQU=)
2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Validity
Not Before: Jul 27 08:21:58 2026 GMT
Not After : Aug 3 08:21:58 2026 GMT
Subject: CN=6a671527-aadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:80:6f:3b:f9:f9:83:7a:5b:64:1e:7c:97:
d6:4f:40:c4:54:61:67:73:30:28:7a:c5:16:d9:91:
36:6b:ca:2a:91:d8:6b:06:cb:10:ae:2e:3b:fa:8c:
e1:33:f5:b2:4a:db:1a:d3:48:a2:81:18:b8:d0:ab:
e2:29:63:40:4d:d2:45:b3:5e:20:19:8f:cd:9f:c7:
a9:19:fe:63:c3:c1:91:10:e4:91:9c:bf:81:1d:28:
dd:d4:d9:f0:4d:40:a8:e5:e3:eb:7d:b6:96:6e:7f:
48:27:ac:11:1d:cc:2d:37:36:82:8d:86:b4:66:72:
f1:d3:61:1a:2c:6c:52:cf:1a:71:13:45:02:8d:ed:
28:4b:66:32:2d:fd:9a:fa:72:e9:79:51:7b:63:77:
6a:0d:b5:fc:1e:f8:ce:00:c1:49:9b:d3:83:93:e6:
dd:71:1c:6e:8a:b3:1e:57:ad:f3:e0:c1:b1:95:37:
0a:f0:82:46:e4:52:38:5b:4d:43:fb:23:a5:07:b8:
47:fa:40:b7:c2:c8:48:62:45:1e:16:fd:b1:28:bc:
2d:2e:f2:57:9b:20:55:9a:96:51:c1:3c:96:09:8a:
95:ae:9d:34:d8:84:f5:d6:2f:ad:f1:63:42:51:01:
dc:37:3f:0f:16:3d:3f:80:2c:3d:87:bf:35:39:3b:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:57:BB:48:74:63:CF:67:72:54:B8:DA:4A:96:8A:C5:90:82:76
X509v3 Authority Key Identifier:
keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:3e:fa:51:b7:4e:c0:63:63:48:7e:a7:77:59:66:34:2e:
41:d2:de:ff:bd:3e:87:42:93:e7:90:39:57:3a:e3:07:dc:ed:
5b:90:bf:fe:2d:cb:a1:96:63:53:a2:dd:6f:b7:50:cf:32:2a:
57:3b:50:de:0b:15:9f:dd:6f:6c:3a:78:a4:45:31:c7:68:dd:
99:4b:8f:20:bc:36:11:35:07:16:8f:de:59:e7:8c:ea:62:41:
4d:ab:38:5e:6e:77:e1:01:e8:ae:16:a8:3e:58:9a:3c:ba:a5:
a1:79:34:bc:32:f4:f1:3f:7c:6a:40:9e:0a:2f:5e:2c:46:5c:
8e:fe:c5:0d:7a:9b:c8:9a:d8:d8:bb:19:a7:4c:04:99:dc:a4:
f4:5d:3b:8b:e7:8c:f4:0b:7d:b4:3b:c3:43:35:03:56:12:f5:
06:eb:eb:0c:e0:5c:8f:79:d0:c2:90:0a:08:5f:5c:07:58:88:
b1:6a:cd:97:9c:62:15:09:dc:3b:db:cd:79:6d:7e:0c:86:fe:
a8:e5:0d:e9:df:95:8a:4d:3c:df:c9:7b:70:7a:25:0d:a4:c2:
65:db:a7:fe:cd:a9:be:fc:60:23:37:5b:be:b4:50:57:c6:4f:
a0:5b:d1:c6:07:d9:83:d2:e3:59:96:4b:35:cf:9e:43:f4:d1:
d4:e0:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:54 2026 by rpki-client