
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: xHwF7+beLqzdV1gTy3OzlKgehavfcB9bfTmWcS5kqEg=
Subject key identifier: 3F:BD:88:1A:AB:D3:BE:79:C1:4F:60:16:D9:3A:3D:DD:0F:1E:51:DD
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0A96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0A82
Signing time: Tue 28 Jul 2026 19:54:36 +0000
Manifest this update: Tue 28 Jul 2026 19:54:36 +0000
Manifest next update: Tue 04 Aug 2026 19:54:36 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: qggf7xvLrf9ac8wbz2elLFoYTwN4/AanAmsxG2CByXA=)
2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: ayMh+xPpKV4MDa+xi4w8R4KTWxdFNv6TJ0EMYBEcXjk=)
3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: 5L+qG7S9tkiI9oResfgYtFZwd1jvISkOSfCq4CpLueQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Jul 28 19:54:36 2026 GMT
Not After : Aug 4 19:54:36 2026 GMT
Subject: CN=6a6908fc-e296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:62:ad:d9:71:d6:0a:5a:f5:45:b8:cc:64:
3a:e8:27:a2:31:37:03:4a:ef:7c:8a:ae:51:00:94:
ec:bf:e5:eb:64:17:d8:45:21:a0:b3:cb:72:30:24:
77:a4:55:b6:9e:37:65:ad:03:8e:fd:cd:1a:d6:12:
c4:65:e9:51:6d:6a:4c:00:ea:1c:a5:cb:35:26:a1:
90:9a:98:32:9a:b1:3f:1a:28:58:b8:1a:94:90:9d:
f3:cf:72:18:23:39:15:4a:86:31:9b:32:2b:b5:12:
c7:b6:b2:8f:b4:39:92:05:3d:4b:d7:14:6f:1f:1b:
25:77:98:ad:20:f7:e8:92:9f:f2:ae:66:7a:6b:74:
72:95:51:35:22:76:5e:82:7c:05:c8:6d:1b:a8:3c:
56:21:46:aa:d9:93:a7:11:4d:ec:da:77:e0:30:98:
62:a4:2a:87:2a:df:c4:15:06:5a:56:fd:9b:b1:34:
7a:06:a0:a1:32:ac:a2:7b:16:10:83:d1:d9:82:8f:
c6:05:e4:f6:04:85:e9:d6:ab:b3:3c:d2:0b:b6:18:
6e:4f:ca:44:e6:1e:b6:89:61:6c:ec:01:39:4b:99:
c9:e3:85:32:19:f5:bc:4c:ba:62:29:a8:61:15:25:
07:18:9e:00:4c:5d:63:5e:4e:42:6d:71:22:5e:c7:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:88:1A:AB:D3:BE:79:C1:4F:60:16:D9:3A:3D:DD:0F:1E:51:DD
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e7:2c:1f:4a:81:2d:b8:5d:e8:d1:fd:0a:8a:f7:d0:9f:e0:
6a:26:25:69:8f:81:a5:cc:cf:a8:e0:13:3e:6e:7e:fa:85:34:
dd:af:5f:0f:67:f3:6b:f8:c4:42:a8:a4:fc:fb:8a:03:db:fe:
66:90:20:39:4b:65:40:40:9b:88:24:bc:27:11:a5:e6:ce:d4:
f0:08:8f:fb:e9:c7:bf:cb:29:60:08:9a:9e:78:19:f9:d0:48:
9a:6d:32:72:34:ff:68:d3:c5:d2:0a:0f:45:2d:2d:ea:21:91:
c8:94:2c:cc:ba:7d:d2:bf:f1:4d:ed:e6:03:2c:36:d8:86:f3:
ec:b7:43:5b:b8:0e:82:f7:cf:3c:96:8c:3b:92:91:07:e2:84:
aa:b9:1f:d6:e9:cb:4d:24:44:a3:47:25:89:d5:ce:c1:c3:16:
0a:2b:13:37:35:cf:77:30:61:99:e4:58:ba:6e:34:66:5f:b3:
7e:59:83:c8:d3:22:f9:32:08:11:48:24:6f:85:c5:de:22:b6:
a5:a6:54:0b:f4:1b:81:ca:8b:e6:ea:aa:07:2e:dc:67:3f:05:
f2:86:30:99:d4:28:3b:47:57:f4:69:37:20:4b:0d:f7:e7:ca:
f3:0f:21:62:cd:d5:12:bf:43:01:3d:d5:36:73:ed:ed:52:0b:
22:0b:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:32 2026 by rpki-client