
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: JhRREXnHJ2v34EEAfcUt3an/zKrBde/nRE2SaunSVO0=
Subject key identifier: 1D:9B:D2:DB:DA:EB:FD:EE:9E:1B:A5:0A:B6:86:97:D2:AE:44:91:F1
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 0282
Signing time: Mon 27 Jul 2026 03:55:06 +0000
Manifest this update: Mon 27 Jul 2026 03:55:05 +0000
Manifest next update: Mon 03 Aug 2026 03:55:05 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: t1LThu8ZGsT9D6rK39fxriZIsKsil/L65aaKIlidLnI=)
2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
3: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
4: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
5: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
6: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
7: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Jul 27 03:55:05 2026 GMT
Not After : Aug 3 03:55:05 2026 GMT
Subject: CN=6a66d69a-ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:76:88:28:fa:a8:92:94:33:42:f5:99:e1:
de:b4:0a:b5:e2:52:b0:a1:98:46:97:17:c0:44:d4:
4f:35:7a:29:14:09:70:4e:8f:12:83:33:6d:28:cf:
fd:c2:e5:cf:77:73:45:c7:cd:e1:15:8f:00:e4:99:
3f:5a:d5:9c:3f:9f:d5:9b:89:e9:75:b1:9a:81:b4:
01:74:5d:a9:87:db:18:36:74:19:e9:7c:d5:c0:71:
07:f8:9c:bc:7f:58:df:7a:4c:d8:70:3e:49:b1:ef:
d5:fe:3f:71:2a:6f:43:82:aa:6c:b8:24:89:dd:bc:
31:35:b2:2d:a0:41:a9:02:62:b7:b6:ea:72:17:9f:
88:dc:a0:ac:b3:6b:f2:04:25:cd:0b:bb:e9:8b:ba:
83:c6:da:89:0f:c7:23:ac:86:aa:66:be:bd:b6:25:
7a:dd:46:bb:2d:69:79:55:4b:06:b3:de:b7:2a:cb:
79:fc:8e:e5:9c:50:a5:b4:9a:fa:f5:69:ab:ca:95:
c9:e0:67:dc:38:01:ee:34:d0:90:b8:1f:97:c3:ed:
3f:a5:20:1c:b5:bf:62:a8:9c:e7:fc:88:a0:70:c4:
eb:54:c1:7b:00:23:e6:2a:6f:d5:9b:72:cf:8a:7d:
a0:4d:e3:ba:42:b7:a2:94:fe:c9:73:69:f8:e5:25:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:D2:DB:DA:EB:FD:EE:9E:1B:A5:0A:B6:86:97:D2:AE:44:91:F1
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:e7:79:1a:4f:8a:24:10:aa:f0:de:16:51:f4:03:56:4d:
49:15:ef:79:e9:e9:ab:53:b3:dc:2a:9d:f2:6e:7a:56:24:45:
7f:7f:0c:8d:ce:89:1c:aa:39:18:2a:db:97:23:f5:17:97:95:
18:ed:60:31:04:16:09:b4:54:31:47:ea:97:d5:7c:15:f9:fd:
a4:22:bc:7c:63:9f:89:8a:8f:ef:fb:63:27:e6:78:b4:4a:e0:
2b:e5:15:8a:72:93:d6:f0:b8:2d:33:d1:5d:11:be:8b:ee:22:
2e:6e:33:7b:9a:58:6d:ab:a3:56:d1:8c:a2:9d:be:c5:d9:e3:
e0:ae:f8:8b:79:c9:36:96:9e:eb:39:be:a5:39:13:c0:4b:ff:
cd:f3:5b:7b:86:56:a3:df:9c:73:3c:97:a4:2e:c9:c5:6e:62:
47:6b:bb:c2:8d:3e:3c:81:12:e4:31:2d:f7:de:9d:f1:52:04:
d9:b9:fa:56:a0:5e:bd:c2:26:78:2b:16:f8:1e:fc:29:b0:3a:
4a:15:0e:85:e7:ba:97:78:d1:1e:1c:e9:4f:d4:81:f8:8f:c1:
f6:82:4e:7b:d8:0c:4b:39:3b:f4:e9:90:9f:f6:d5:1e:a8:58:
c0:51:4e:4f:63:f8:fc:61:47:d0:74:39:3a:ea:8b:43:12:4c:
9b:ae:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:49 2026 by rpki-client