
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: DzADh70pe+QUtNyWjtEDYb+CaXsqcM/gKVXLIqko0EM=
Subject key identifier: 5F:07:3E:85:CF:8E:6B:9D:98:52:94:BF:7C:9C:19:37:E1:1D:2E:DA
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 0A3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 0A2C
Signing time: Tue 28 Jul 2026 20:04:02 +0000
Manifest this update: Tue 28 Jul 2026 20:04:01 +0000
Manifest next update: Tue 04 Aug 2026 20:04:01 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: mgblINkiwFY5ZcQhcRz4NqsetejBdLiBgqN6WFMj0OI=)
2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=)
3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: Jul 28 20:04:01 2026 GMT
Not After : Aug 4 20:04:01 2026 GMT
Subject: CN=6a690b31-6fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:dc:ec:99:ac:4c:b1:3b:ae:ed:f0:14:bc:
e8:de:b9:ef:e3:07:f1:0d:75:59:81:5b:1a:88:19:
27:a7:1c:d4:cf:49:b5:55:65:f3:d2:cc:7f:56:36:
26:1a:d8:71:1b:30:78:19:1c:ec:6c:4f:a1:d0:fa:
72:39:62:53:8f:f4:dd:26:f4:6c:3e:c8:0f:a9:ff:
8e:e2:a7:c8:76:33:89:28:9b:23:df:11:a4:ec:03:
e6:86:cc:d9:27:f6:66:70:65:49:66:87:7d:a2:b8:
0a:9c:e8:b6:db:80:95:55:67:e8:fb:9c:78:a3:19:
0d:93:76:ec:42:8e:a7:1e:30:2f:b2:a0:13:70:72:
d7:f4:37:50:b9:f3:bb:ef:8d:f4:68:b7:40:6a:83:
6c:a2:31:86:20:38:2b:52:b2:54:0d:fb:8b:dc:4a:
1a:d8:98:cc:fa:af:c1:0d:db:da:0d:bd:0f:31:a9:
c5:10:3e:fb:17:09:2f:65:25:50:1e:72:62:c7:a3:
53:da:45:2f:3e:c6:eb:35:21:20:e1:75:e4:30:49:
80:b4:0b:ec:14:c2:bc:b6:e7:f2:cd:be:31:e6:8c:
dc:5f:4c:b2:e7:08:94:0f:cb:e4:9f:86:f3:c6:cc:
31:67:dd:a5:25:63:0b:7d:0e:d5:ab:b7:72:f2:ec:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:07:3E:85:CF:8E:6B:9D:98:52:94:BF:7C:9C:19:37:E1:1D:2E:DA
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:1f:b5:94:4f:b4:6d:25:45:67:ae:75:77:5b:71:51:c7:7f:
32:d7:e2:26:54:10:90:60:fa:25:e5:d5:02:a2:5c:db:28:90:
96:43:99:72:cc:b6:83:fd:81:46:8e:c2:24:41:3a:91:01:7d:
e2:17:11:7c:fa:a2:1c:c0:11:38:51:48:e5:82:d5:1c:16:4e:
2f:44:e8:5e:9e:62:32:24:fd:d6:d8:06:ed:e7:a3:73:f9:11:
f3:51:c5:74:07:56:6d:ed:42:db:ec:4a:14:47:51:8b:0d:d6:
68:24:c0:5f:40:9f:ba:84:c9:b8:24:f3:13:bf:e5:66:4b:71:
d5:2a:c8:5e:97:e1:62:06:cb:87:08:bb:cb:24:f3:3b:bd:5b:
d0:c8:7a:c0:8f:bb:b0:76:ab:d3:2d:2e:60:04:14:39:b7:d5:
94:da:d2:3c:e2:8d:53:4c:61:09:18:79:96:f8:df:37:3d:f3:
8b:56:0c:bf:79:64:8d:0c:cb:cd:7a:af:05:a1:de:d3:f8:84:
8f:a4:d0:ec:3e:3c:67:82:c2:15:b8:74:43:20:9f:23:8b:09:
89:7e:44:de:e6:6e:d9:d0:e0:7d:9d:91:08:d0:fc:76:39:90:
24:06:dd:12:fb:e1:80:d7:d4:4b:78:9e:94:78:ce:31:f6:1c:
88:f2:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:12 2026 by rpki-client