
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier: V6vm2TwfKfb5tm+pwHDhAVIZU1DzE9+l3aVfruvjMi4=
Subject key identifier: A2:85:1F:81:97:D5:0A:A9:F7:07:EF:41:1F:60:12:38:30:10:06:44
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number: 01D9
Signing time: Mon 27 Jul 2026 05:14:57 +0000
Manifest this update: Mon 27 Jul 2026 05:14:56 +0000
Manifest next update: Mon 03 Aug 2026 05:14:56 +0000
Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: rESQhUG49PY+DTHT1NSM29NhtPqoz4thzsIQZApzuC0=)
2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: Jul 27 05:14:56 2026 GMT
Not After : Aug 3 05:14:56 2026 GMT
Subject: CN=6a66e951-61e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:14:c9:53:7e:23:65:00:5f:06:d6:86:b8:
f7:6c:18:c3:58:64:fe:ec:a9:8c:ec:2e:b4:6a:0b:
97:59:d8:e5:4e:df:ed:99:0c:a6:e8:91:05:81:51:
92:eb:9d:af:0c:fa:21:1d:43:9b:e1:51:80:81:9e:
36:3b:1d:da:c7:b7:cf:1e:bb:71:24:c1:50:a4:3c:
54:a1:bb:c4:9d:59:62:1b:08:32:63:97:d5:0a:b5:
b9:7e:00:ad:48:f9:17:ee:b8:10:1b:be:06:30:2c:
5f:be:fb:ed:e7:ab:4e:11:f6:ae:57:ec:31:d9:07:
56:c5:c6:ff:c4:dd:d0:a4:9d:ed:1c:85:4b:10:36:
3c:ca:29:2e:52:81:19:72:7d:1d:4f:4d:84:de:4d:
f7:fc:3a:4a:8b:76:3b:29:e8:c9:ec:f9:71:c5:ca:
37:60:14:ef:5a:95:3a:ec:1c:8b:3e:5f:73:bf:b9:
bb:e2:38:0b:91:72:de:9b:67:2d:0f:ac:68:40:d7:
57:16:ff:11:0b:4d:69:e7:7e:c8:93:05:73:4a:2d:
7b:6d:b0:5b:f6:d8:4e:cf:a0:61:f2:61:89:be:d0:
51:05:33:ce:48:d6:f0:3a:1e:92:05:fb:fa:59:4d:
4d:47:67:a6:f3:ac:07:4d:a5:c3:da:65:f4:4c:bb:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:1F:81:97:D5:0A:A9:F7:07:EF:41:1F:60:12:38:30:10:06:44
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b7:50:c4:b3:f1:18:25:25:1d:37:8e:5d:1c:b5:26:dd:e7:
5a:1e:ee:08:15:6f:74:8a:5f:96:ba:f4:28:f0:f6:ae:1e:f9:
82:ce:05:5e:4e:23:06:a5:31:14:1a:28:9e:f0:3a:88:15:cd:
6c:db:31:c8:e5:52:69:25:3d:d7:c7:43:3c:de:02:a8:0d:41:
78:10:98:e5:4f:4c:9b:74:ad:ed:49:d2:a1:e4:c7:6e:b5:20:
1a:62:f0:85:2a:21:75:22:82:8a:db:15:1d:1b:d3:49:8d:6f:
51:09:85:7c:3f:2b:b7:1a:89:79:51:d0:e7:94:da:1c:bb:6a:
3a:cb:0e:d6:65:02:ba:9c:40:38:c3:c1:a5:e7:63:ac:05:cd:
2c:59:7b:79:3f:cc:41:07:f0:d6:f6:eb:40:cb:0d:4d:fb:dd:
ef:43:39:a1:2a:79:75:19:51:d5:a6:0c:d3:2a:95:c8:ed:55:
0a:18:60:cd:b5:96:f0:8b:c6:6b:e1:15:f5:f7:09:7f:92:a5:
41:aa:be:1b:01:a5:09:5a:6c:36:6b:b2:73:bc:37:72:f3:06:
f7:76:02:de:d0:94:c0:d0:16:f1:17:10:ad:7b:6e:f9:ce:f9:
89:ba:5a:e3:4f:64:63:b6:87:c9:69:2f:e4:84:d5:2a:51:27:
0a:ac:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:30:23 2026 by rpki-client