
$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier: Rke/oyGlO9Zn/P1scSQ7KLpRWFeRw3Q8TbxnZ64YyXg=
Subject key identifier: EA:54:E7:4C:94:A8:A6:E7:E9:D7:96:15:F9:41:6A:B3:F4:D7:99:D4
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial: 064C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number: 0632
Signing time: Tue 28 Jul 2026 23:25:50 +0000
Manifest this update: Tue 28 Jul 2026 23:25:49 +0000
Manifest next update: Tue 04 Aug 2026 23:25:49 +0000
Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: xbZu0/pW2a2GVF3mkkYHdfx1NvkC2bfCLnLOCCsTs9c=)
2: IUG9L5m58RrR5e-PCCPPJ7bpO1o.asa (hash: WX1vQdXkitB45U5G8/qBobTgRVzuTOaZMPWToidMcRc=)
3: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: LMoK6W32MRhH2sWdtFfKukoaxVo2lgpAN0mzc0aoUcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Validity
Not Before: Jul 28 23:25:49 2026 GMT
Not After : Aug 4 23:25:49 2026 GMT
Subject: CN=6a693a7e-86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:5a:68:b2:8b:fa:ad:c4:11:0a:52:7d:ca:
13:a8:d0:a2:9e:39:af:ae:cd:07:91:0c:51:b2:18:
74:c5:8d:fe:22:bc:3d:a7:99:21:80:91:01:e0:7f:
d0:3f:17:24:09:ca:01:41:00:5a:20:c1:9a:90:1a:
84:ed:47:16:71:0b:c8:7f:a7:a5:6e:f7:ff:d9:e5:
a5:dd:a6:b8:cd:f7:31:1f:a1:c5:73:1d:bc:e3:de:
db:b2:5a:e4:53:a2:67:a6:05:aa:c9:22:a2:7e:8d:
71:36:1b:2f:bd:a4:d4:1c:42:35:79:54:94:80:16:
b8:a2:b5:46:d4:21:ba:4a:97:1f:53:94:90:96:56:
34:50:f3:dc:ce:1a:b8:36:ee:3a:6b:5b:74:36:ff:
ee:6f:ab:b3:70:6a:78:f4:f1:2c:7c:06:8b:d7:97:
09:ca:ae:bb:c7:7b:69:e7:e9:a1:5b:57:9c:65:e3:
ee:c4:a4:a5:59:15:52:7f:fc:e3:13:88:69:17:8e:
1c:13:93:fc:09:03:9a:1c:7e:1f:b4:ed:81:d5:88:
ea:7e:c8:1b:6b:21:d4:1e:3f:7f:09:15:62:b0:28:
0a:fe:7a:02:e7:52:c2:bc:91:fe:86:33:40:68:d0:
be:ef:7c:e4:9d:5c:22:65:1b:20:94:c1:da:8c:6a:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:E7:4C:94:A8:A6:E7:E9:D7:96:15:F9:41:6A:B3:F4:D7:99:D4
X509v3 Authority Key Identifier:
keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:bb:d8:64:dc:ba:41:d9:47:82:47:c6:df:6e:1e:05:07:76:
aa:af:7e:8a:45:4f:46:39:ca:9d:82:5e:c3:98:84:d5:a0:76:
e1:6f:07:e5:0d:d7:d7:33:47:41:ee:05:78:8c:39:2d:a3:cd:
e8:30:e5:21:de:96:a8:1c:a2:6e:87:1b:1c:aa:ae:89:22:40:
93:44:da:a0:54:00:c6:e3:91:e5:9c:1b:ff:17:83:ba:7d:79:
4f:74:95:0d:0c:c0:a8:ae:13:88:34:fb:ac:9b:a5:97:ef:0b:
e2:db:1a:9a:20:c5:d3:91:f6:1c:db:21:e4:a2:31:3f:70:52:
81:80:5f:4b:9f:94:88:92:f7:fd:8b:f4:20:3c:88:75:3e:59:
8e:5e:5c:90:c5:73:9c:2b:d6:83:0e:be:ad:de:f5:88:b9:04:
18:36:41:29:2b:0f:6f:39:d5:d0:3f:0f:34:b2:b0:fa:05:92:
f0:48:53:ef:55:7b:10:9f:1c:7c:98:5c:f6:a0:e7:c3:25:69:
13:2a:09:8e:08:c5:b1:b8:56:18:ef:5e:b9:18:75:58:10:49:
79:f1:dd:7c:53:b5:32:7e:f3:6f:54:61:b9:d4:c0:4e:fa:16:
ee:98:08:c4:5c:56:0e:c0:ec:2d:44:2d:e7:b5:7e:b2:04:b7:
35:82:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:12 2026 by rpki-client