
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: 2yTSXRQ43FIiRhmAj9EVqclBUdtvtVf7xUR7KJg7Uoo=
Subject key identifier: F7:18:F0:F9:C5:E2:FD:70:95:D3:D1:13:48:C8:1E:F0:37:90:82:87
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: 012A
Signing time: Mon 27 Jul 2026 07:42:09 +0000
Manifest this update: Mon 27 Jul 2026 07:42:09 +0000
Manifest next update: Mon 03 Aug 2026 07:42:09 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 0G9aQqHo2YC8yg1PCrun1oK2Zf3vwB/3pL8hKIYRHaU=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Jul 27 07:42:09 2026 GMT
Not After : Aug 3 07:42:09 2026 GMT
Subject: CN=6a670bd1-edb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:f0:6f:44:07:14:41:0a:f4:f3:e8:02:a4:
40:92:d0:2c:9b:1f:5c:62:26:a0:09:1c:de:1d:06:
dd:7d:2a:31:47:ee:9d:4f:c5:eb:59:fe:43:51:71:
a7:b8:87:0f:78:37:53:79:c7:57:39:e5:d2:b0:24:
86:de:de:ca:db:19:dc:bd:e8:11:43:38:19:1d:06:
99:80:15:57:24:72:55:a5:23:d8:40:a6:dd:62:8d:
55:b0:76:33:51:76:cd:cb:58:01:7b:8d:df:40:8e:
97:f4:02:6b:2d:e4:e9:c9:4b:36:12:f6:2e:ca:99:
a7:3e:d6:d5:d2:69:b2:f7:24:12:59:f3:2b:dc:e4:
38:61:13:d7:43:b2:83:0d:45:18:1a:06:b0:69:e8:
4f:ae:ce:f9:cb:28:3e:17:f4:19:45:07:c6:98:d6:
cb:55:ab:80:c1:fd:65:32:a0:fd:f3:89:1f:f3:1e:
3f:ea:fd:69:7a:9c:94:20:56:d4:3f:d7:75:58:ee:
e0:71:6e:0a:c0:c9:13:8e:bd:a0:15:90:50:f0:25:
27:ca:79:45:0e:68:fb:7a:12:81:4a:26:31:e3:7b:
1f:6e:12:8f:78:75:7e:9a:20:18:72:e8:df:0f:67:
7f:cc:f9:12:fa:64:64:03:28:a9:a2:c0:9c:f1:71:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:F0:F9:C5:E2:FD:70:95:D3:D1:13:48:C8:1E:F0:37:90:82:87
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:38:14:7a:34:1c:1a:20:f5:4a:b3:ca:ff:27:c0:24:72:db:
7b:9b:19:14:11:e0:29:b2:9d:42:49:52:35:18:44:cb:23:f7:
2c:cb:f0:ae:f9:f3:72:ed:33:65:14:e9:71:a2:54:51:6b:d7:
84:1e:09:d0:eb:8f:ed:b2:06:a6:db:29:7b:b7:78:d8:cc:31:
e7:72:0a:db:10:5a:6c:10:fa:b8:32:3e:3e:ab:15:22:14:ae:
48:40:5b:f9:1c:58:8b:01:7a:36:0f:42:b7:41:6f:fd:2c:00:
a9:5c:d3:fd:e2:20:b1:b6:bf:67:91:b6:3a:f9:e5:0f:bd:ef:
a4:45:8d:36:25:9c:a5:49:1e:01:22:7b:8b:49:4f:0b:9c:0a:
a0:a0:fc:e9:a2:0e:e2:12:da:63:38:4a:86:75:61:65:46:c7:
b1:95:de:13:03:55:79:ff:d8:02:d9:04:ff:25:9c:01:d5:ec:
24:13:62:b4:4d:d4:28:5d:d8:e1:e6:c4:8d:47:07:aa:a7:35:
6e:25:97:aa:a2:fb:43:62:38:af:ca:49:50:96:b1:7d:17:c7:
49:6e:ad:df:13:8c:ff:4b:6a:08:e9:2d:74:d3:e5:17:77:92:
c5:ef:e0:22:e0:86:90:60:ba:25:b5:d6:97:8c:ea:9c:c4:c8:
12:02:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:44 2026 by rpki-client