
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier: ucBqzqAIOvIksycHMAsPZDc2CRmPD/RryBkmu+6Ooe4=
Subject key identifier: B6:E5:EB:1A:A3:D8:66:30:07:44:FB:FD:03:F8:BC:B2:06:C6:29:5F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number: 0464
Signing time: Wed 29 Jul 2026 00:54:44 +0000
Manifest this update: Wed 29 Jul 2026 00:54:43 +0000
Manifest next update: Wed 05 Aug 2026 00:54:43 +0000
Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: gxskf7rJ2q5uSUdbevHeqZ+PAzk9Ub2gsQcGF2hEfNs=)
2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
3: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Jul 29 00:54:43 2026 GMT
Not After : Aug 5 00:54:43 2026 GMT
Subject: CN=6a694f54-b874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:4c:e3:7c:67:33:1e:d4:74:0a:e1:6a:98:
3c:41:35:f9:e5:55:84:21:4c:88:be:fe:c4:c0:cf:
f0:03:53:b6:6e:f5:fd:49:46:96:0e:86:47:2e:d3:
fc:a1:8b:36:01:c9:06:d0:67:dd:86:3d:b0:8e:c4:
2b:2c:25:b1:3b:07:58:ac:88:a5:85:18:6f:f8:9b:
21:be:01:eb:3b:b1:85:dc:4d:14:d8:25:45:57:e2:
c3:3f:7e:4b:00:90:ca:0c:53:b0:cd:b4:ee:14:02:
89:ae:80:06:f8:cc:a9:37:d6:bb:fc:4a:9f:89:df:
8c:59:88:5b:72:9e:59:63:49:70:eb:0c:a2:8f:57:
7b:0f:63:12:33:79:9e:0c:9d:e7:a2:23:12:2a:27:
09:b1:d7:2b:e1:31:4c:cf:c1:92:a8:8e:e5:89:08:
a5:8c:06:26:d6:c5:5d:84:58:88:7c:36:ce:87:0f:
b3:5a:e5:88:5c:1e:62:8c:c5:34:5c:01:d4:0b:57:
7f:32:50:b2:89:8d:3c:d0:a3:96:a1:49:f9:31:14:
88:68:e5:3e:32:9a:7c:8e:52:63:65:8e:e1:34:aa:
74:16:d1:3e:6b:95:71:39:13:c5:e6:bf:48:53:ea:
cd:c8:b9:e5:08:17:c8:5f:74:12:d3:99:91:39:47:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:EB:1A:A3:D8:66:30:07:44:FB:FD:03:F8:BC:B2:06:C6:29:5F
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:59:08:43:0a:b6:83:80:7b:bd:0a:d0:be:09:18:32:28:b0:
15:05:d4:b3:8f:3a:5d:3f:f4:53:34:86:80:19:ec:fe:8e:f1:
99:c8:e9:2d:92:bc:a3:c6:bf:4d:8b:ed:40:c1:3a:dd:64:df:
8a:fa:1d:14:49:a8:ea:e0:3c:20:fb:ce:61:a8:63:4a:5b:1d:
07:6c:83:1f:b8:e3:45:56:59:19:d9:a9:c9:df:9b:84:b1:00:
d5:2f:43:7e:bd:9a:52:e3:5b:51:8a:0c:0e:60:f5:5d:46:57:
bd:c0:75:69:f6:80:6c:2a:51:01:64:56:d5:98:72:01:e0:46:
bd:a4:13:3e:0b:23:a7:09:30:da:74:ba:1a:8b:70:62:25:a8:
36:1f:c4:fe:71:38:d9:fa:17:8a:85:93:f5:a7:5b:d1:1a:98:
d7:29:0d:8f:4a:ff:4e:73:21:6c:78:ba:00:71:0a:b2:48:3d:
18:35:56:7d:40:40:6e:50:da:0a:a8:33:5b:cf:8e:c3:84:f0:
79:01:6c:20:8b:56:2b:bf:1d:10:01:79:fe:95:86:e9:6b:49:
69:e5:d1:0f:2b:60:6b:ba:54:f2:ba:38:0e:16:1e:d2:48:60:
7f:1d:84:12:f6:27:d2:28:24:12:2c:18:1f:17:a4:04:69:fe:
f6:aa:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:21 2026 by rpki-client