
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: 5SqzbrT2cIFgiHm34FWX7gGa7gT3QcBiFGcYZXfwmE4=
Subject key identifier: C9:0B:47:47:AA:C5:8B:91:3B:79:39:7A:01:8C:3A:6F:D7:54:2B:32
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0D9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0D82
Signing time: Tue 28 Jul 2026 18:05:19 +0000
Manifest this update: Tue 28 Jul 2026 18:05:19 +0000
Manifest next update: Tue 04 Aug 2026 18:05:19 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: Gxv09zvXPxhUfE4dQut9o+IJ3rRrt8QnO7U5/Cy4QzI=)
2: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
3: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=)
4: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3484 (0xd9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Jul 28 18:05:19 2026 GMT
Not After : Aug 4 18:05:19 2026 GMT
Subject: CN=6a68ef5f-aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:a1:08:04:00:29:84:79:a9:6c:86:20:d1:
09:ff:0b:a5:81:03:95:a1:05:87:8a:66:93:b5:f3:
39:47:be:32:21:a1:18:71:e9:7c:11:f8:8d:03:ce:
df:bc:41:d2:ff:a0:27:71:ec:eb:74:9c:ee:98:5c:
86:02:31:74:e7:31:08:4a:ac:8a:01:2c:71:0a:45:
06:8a:7c:a9:21:c0:02:49:38:2c:39:6f:fb:b2:9a:
c1:f2:49:0d:ed:e3:5b:5e:5f:8b:2a:81:52:ed:cc:
d9:c0:d3:fa:33:b6:8e:5b:c7:b5:14:8e:71:cb:1e:
21:9a:c7:9a:b0:a8:f7:b8:1e:72:07:20:9a:c4:6a:
74:41:2f:6c:56:41:d9:10:61:f6:8a:ef:57:ef:de:
6e:cb:17:29:47:9d:70:65:44:5f:ff:7e:2f:a0:0e:
0c:01:84:9c:0e:53:a7:a4:81:cc:c6:e2:ea:60:7e:
3b:76:62:c2:b8:11:8c:a5:c4:64:2b:53:10:9a:60:
d0:da:f0:d2:38:91:a9:27:5f:84:c9:6a:2d:5a:46:
b1:8a:5a:86:61:a8:80:2c:22:05:a6:85:cd:74:d0:
e7:f0:c8:2c:09:fa:98:c5:49:d2:a1:3e:20:e1:5e:
f4:46:98:ed:ab:01:89:de:57:85:11:2a:ac:2b:d3:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:47:47:AA:C5:8B:91:3B:79:39:7A:01:8C:3A:6F:D7:54:2B:32
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ae:58:79:de:0c:5f:ea:bb:e6:6b:37:6e:35:d8:d9:27:09:
d5:c8:0e:e0:2e:20:e5:6f:14:b7:ad:8b:20:bc:a3:ec:ed:91:
51:7e:a5:26:cc:a5:49:73:21:47:bd:21:e2:12:23:7d:a9:c0:
9d:34:06:97:ed:d8:6d:1f:a3:76:82:2c:2d:28:3d:c4:d9:b0:
50:ee:c7:ef:f5:5f:d7:0f:a7:ff:86:47:30:70:5b:21:ed:40:
9d:0d:96:f0:a0:11:41:53:4a:9a:8d:13:61:6f:a4:7c:87:1c:
1a:fa:99:65:a7:cc:4b:4f:b1:0a:85:99:c2:da:f8:b6:01:e0:
7a:b2:31:2b:4c:26:07:3f:b6:00:8e:77:a2:7d:a4:51:78:e6:
f0:3d:06:5e:0e:7b:94:56:00:c0:58:0c:dd:84:0c:4b:b8:1c:
85:71:30:e5:32:ae:bc:d3:5b:85:4f:8e:c8:b4:c8:0d:bb:2a:
9b:b5:c0:40:d7:bb:0a:59:1d:38:e4:75:58:f3:ca:6d:b2:3a:
68:3f:dc:ed:4e:eb:13:68:b9:df:b7:71:22:ee:f0:4d:63:86:
c5:cc:d1:ba:33:75:98:39:9d:94:82:2d:ec:b8:d8:c4:09:9d:
22:57:d7:bf:41:21:2e:b9:70:1c:43:2b:cf:78:35:9f:ce:41:
a4:e2:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:19 2026 by rpki-client