
$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier: HFnBiS/wGYMQ4YettEFAa2KA2Z6pALNuXFROL6tcTBs=
Subject key identifier: 0F:BC:29:52:BE:6E:9E:68:F7:56:E2:5E:9D:67:9F:35:50:66:FE:5F
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial: 0CAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number: 0C90
Signing time: Tue 28 Jul 2026 18:49:50 +0000
Manifest this update: Tue 28 Jul 2026 18:49:50 +0000
Manifest next update: Tue 04 Aug 2026 18:49:50 +0000
Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: qD6DALrEd4SXQmvIe8eZfXGekrMGL2GkeDSvP2HmJJc=)
2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=)
3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Validity
Not Before: Jul 28 18:49:50 2026 GMT
Not After : Aug 4 18:49:50 2026 GMT
Subject: CN=6a68f9ce-74c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:9d:1f:3d:bc:13:f9:fe:75:01:3f:a1:c7:
e5:c9:ef:fa:8c:4d:25:3b:66:69:40:52:06:c6:91:
6a:86:38:7b:32:45:47:5a:93:34:19:4a:f0:d4:1d:
bf:6a:bd:fc:1d:b3:44:db:d6:07:34:49:9d:75:14:
ad:96:0b:d4:3a:a6:e6:ce:e0:92:af:5e:95:1d:9b:
59:d6:9d:5f:30:fa:f3:1e:c1:69:e0:47:1c:6f:4a:
8f:78:8f:9d:03:89:c8:c6:5c:fe:95:4b:57:01:f8:
97:4d:96:82:b8:69:1b:8b:63:6f:9d:b5:4e:01:f5:
96:58:e9:10:32:e3:43:5b:50:47:68:03:20:c9:15:
da:52:77:b5:a3:7f:04:ff:c9:78:1f:71:af:71:88:
ab:6f:08:a0:04:77:a2:a3:6a:75:a1:4b:a0:9b:7c:
31:4c:f5:33:43:45:21:c6:54:bb:19:58:0e:5c:92:
08:b5:12:4e:dc:ca:1e:fd:a1:24:a0:f1:19:d2:e1:
ad:ab:d2:db:ae:f9:a4:f7:83:1e:14:54:d7:c5:49:
30:eb:10:f0:4e:af:a0:a4:a2:32:1e:54:16:69:2a:
91:31:40:7e:3d:f3:4d:e3:01:4d:d8:c1:98:31:ef:
35:ff:a0:90:9f:22:ce:64:57:77:02:71:df:51:5e:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:29:52:BE:6E:9E:68:F7:56:E2:5E:9D:67:9F:35:50:66:FE:5F
X509v3 Authority Key Identifier:
keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:96:69:3b:6c:ad:93:96:3e:e9:c5:31:4f:d5:dd:34:c0:9d:
d6:bb:07:f1:5a:51:5a:4e:f4:c1:39:1f:b4:dc:ba:40:e8:14:
5b:a3:bb:01:1b:4f:8e:38:d7:59:27:de:8c:8a:12:ad:7f:4a:
df:cb:aa:ff:31:de:a8:1c:a1:2c:b5:5f:a2:53:8c:cf:2e:9c:
0b:07:f2:f5:27:b7:81:0f:61:d8:59:23:3a:f9:31:0e:2a:96:
b5:69:60:76:11:f8:30:87:9a:75:44:db:a4:cd:a4:34:8e:7e:
6d:66:d5:07:b0:e5:80:31:41:7d:02:50:ae:f5:28:cb:2b:28:
bb:d2:09:eb:c1:61:6e:09:09:e7:1a:0f:5f:ac:40:09:a6:b3:
00:80:69:45:34:f8:cb:f1:a5:31:ac:73:12:bf:4a:c6:70:4f:
6e:15:da:47:25:c6:46:04:53:dc:9b:e0:2b:98:d0:60:4e:0d:
58:c9:7f:35:da:fb:b5:8d:7b:28:73:07:74:74:e1:ff:51:ca:
39:88:91:f4:1a:88:f9:e8:47:7b:8c:37:4f:7b:94:76:c6:d5:
b2:cb:4f:28:eb:74:08:78:6f:6a:f7:7e:7a:23:b9:d9:33:ec:
d7:7d:f7:e1:1d:6e:8b:4a:80:6c:7f:1d:f8:32:53:01:8f:60:
0d:8e:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:29 2026 by rpki-client