
$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier: v7cibLOZyH5ttFDqOJbKiLpIqKW12rlrWYH2r2bVliY=
Subject key identifier: 60:10:48:2A:CD:25:BE:4D:03:8F:A6:AF:F8:41:36:40:F9:D2:CD:54
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial: 0606
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number: 05FF
Signing time: Sun 26 Jul 2026 23:46:08 +0000
Manifest this update: Sun 26 Jul 2026 23:46:07 +0000
Manifest next update: Sun 02 Aug 2026 23:46:07 +0000
Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: qwvisSdGOR2Ltti73RIxQ22Dnq8bJ/dKwlX090j/xWA=)
2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Validity
Not Before: Jul 26 23:46:07 2026 GMT
Not After : Aug 2 23:46:07 2026 GMT
Subject: CN=6a669c40-d9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:f6:71:01:ac:e2:4c:c9:67:e4:d9:03:19:
5a:7f:e5:e4:86:6d:47:d9:b4:74:f7:f9:6a:3e:ef:
44:b1:9d:84:c5:ab:48:eb:62:80:b1:15:e1:6b:57:
30:80:aa:4b:45:71:42:ce:b9:8f:ec:4c:22:9b:0c:
4d:33:09:bf:7a:21:7c:41:39:3b:97:a5:09:23:d1:
58:89:00:c7:55:1a:8f:9f:65:31:88:e3:12:b6:d1:
bf:1b:c4:3a:9a:52:11:0e:69:02:c0:08:77:51:7d:
47:8b:55:31:a3:a0:21:56:78:44:84:0e:98:3b:56:
8e:93:bb:cf:06:92:c2:ad:86:bf:f0:86:a6:c8:6e:
80:52:5a:2f:ba:eb:13:d9:90:e9:de:c8:9d:67:4c:
ec:df:a8:34:9a:2d:46:2c:2f:0d:cf:95:a8:0f:9d:
1c:f4:24:21:13:e7:d9:07:10:6f:ee:de:33:3c:13:
f1:b8:a1:dc:23:4d:f6:9d:28:24:0d:19:8b:c2:07:
98:92:0f:4c:f0:1c:e0:f4:29:69:2d:f5:ad:d1:b5:
e9:d8:3b:f7:b7:c5:86:92:e4:6b:91:0d:87:75:98:
b6:43:f8:47:7b:be:3f:6a:13:57:50:45:f2:01:34:
da:15:20:58:f7:97:d6:4e:96:07:e9:c5:b6:ca:c4:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:48:2A:CD:25:BE:4D:03:8F:A6:AF:F8:41:36:40:F9:D2:CD:54
X509v3 Authority Key Identifier:
keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4a:b6:33:b6:e2:7e:8a:9b:ba:ba:41:aa:71:11:c1:53:17:
7b:9f:a4:84:7c:5d:fd:d9:1a:91:8f:44:85:6a:e7:2f:47:f9:
cb:de:3a:70:50:72:76:6d:cf:d6:1f:a2:82:be:b8:28:f4:73:
8f:54:2f:fd:09:cc:36:17:1d:41:bb:0e:82:fe:77:46:34:49:
0f:d8:bc:31:38:34:94:4a:97:bf:6b:65:e1:82:5e:cf:17:dd:
05:4e:12:07:84:39:70:03:9d:0c:70:5c:ad:40:ec:31:32:5c:
c6:f8:95:c4:16:49:65:1f:2a:af:90:2f:f6:00:0d:c6:eb:e1:
b5:6c:55:4b:32:f7:46:3b:b2:1f:f5:88:b2:d1:f5:e9:89:44:
eb:f8:b5:39:60:0c:f2:77:16:b2:c7:1c:ff:f5:bb:6f:99:a8:
87:e0:ba:b0:52:8d:b0:57:a6:98:a1:72:63:39:92:e4:76:01:
2a:1c:66:09:2f:2a:b2:3d:d6:23:8e:96:49:86:3c:34:b0:5a:
7b:1b:49:cf:f5:25:dd:7c:2e:b0:2f:33:25:af:56:b5:ce:61:
30:5e:c8:9e:ea:8c:84:80:32:8b:50:0c:38:d3:70:76:38:17:
41:1f:f3:25:5b:c5:1e:6a:a9:a9:43:4a:14:04:05:a6:c3:d3:
af:25:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:28 2026 by rpki-client