
$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier: AMiMuYV6yhymsAgFwnk0/30ewQ9T3zEP2G1R/dbNorU=
Subject key identifier: 20:B3:9B:7F:00:D0:1F:C7:62:B7:B4:E4:49:7F:7F:2D:88:74:4E:1D
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number: 023A
Signing time: Mon 27 Jul 2026 04:04:55 +0000
Manifest this update: Mon 27 Jul 2026 04:04:54 +0000
Manifest next update: Mon 03 Aug 2026 04:04:54 +0000
Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: a5+x+YQWY5LLwkXEAcH1lg/H19uH+TcN8aQ0P7UFyCM=)
2: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 6fOOVMWHz8uhdua83reqWb8mHIqUK8rXDkUTcJOKXR0=)
3: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 7EElla54PME6t43EGMTvu4HFDw83uuSq/ww5cJrQdjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Validity
Not Before: Jul 27 04:04:54 2026 GMT
Not After : Aug 3 04:04:54 2026 GMT
Subject: CN=6a66d8e7-04ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:95:e8:2c:26:e1:19:cc:b5:d8:78:48:bd:
49:63:3c:04:fe:f6:37:10:db:51:28:c0:e2:d7:8a:
5f:ab:b6:47:98:c2:5c:89:1a:dd:01:5b:23:6e:12:
92:09:b5:d1:93:6a:66:45:47:5e:1d:48:ff:5b:c0:
e1:46:ca:20:f6:ea:90:fc:72:fd:1e:5e:ec:df:b1:
41:37:3c:01:ba:50:59:3a:84:39:c6:bc:1c:7e:46:
c2:b4:98:76:6e:de:89:c7:ca:82:d1:62:99:04:4e:
dd:1f:da:27:78:b0:1b:80:b9:15:0e:64:a8:b9:f0:
f2:78:25:54:30:fa:64:2a:fb:88:61:25:66:38:d3:
e9:5a:b8:5b:94:bc:7c:bf:93:f5:c4:6a:38:75:db:
6d:1f:d6:6c:04:99:3b:85:29:d5:e8:41:45:74:a8:
37:40:b2:fc:69:17:ac:f1:4f:55:a8:c5:98:29:c6:
6f:ee:6c:9d:1e:33:76:be:ed:b9:71:09:d0:cd:55:
70:9c:90:bb:48:3c:da:41:59:61:2b:a8:f9:3d:f7:
ee:b7:c9:48:d6:19:df:d3:a8:95:2a:7d:a1:8c:ce:
db:15:81:d8:aa:33:c7:fc:4e:60:9f:fd:08:67:2c:
96:72:54:28:54:52:ad:ed:ee:c2:92:d6:24:cf:76:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:9B:7F:00:D0:1F:C7:62:B7:B4:E4:49:7F:7F:2D:88:74:4E:1D
X509v3 Authority Key Identifier:
keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:0c:1a:1d:0a:36:ef:7b:08:63:4d:a7:b8:82:f3:df:dc:
33:af:f7:1c:d3:97:ed:49:3a:f5:35:bd:b5:25:7e:06:70:5c:
ba:df:fc:28:9e:bf:5d:39:e0:f0:17:c7:96:b7:20:96:32:16:
57:e4:7a:00:3d:44:9a:d0:6e:f0:38:c4:e1:44:9e:2d:0b:de:
f5:11:86:ed:b8:69:1d:61:6a:92:b9:a1:63:ed:f6:e9:ac:de:
a1:13:f3:58:cc:ce:66:e7:ab:29:69:e4:d4:c6:d2:25:7f:15:
82:f5:47:a9:45:64:be:c6:f6:d3:15:72:97:6b:ee:c5:dc:ed:
a4:73:bb:9c:fa:19:79:29:54:24:55:42:91:cf:b1:1c:38:49:
21:86:c1:9d:f4:1d:68:b3:14:01:a6:f6:eb:41:93:4e:3b:b2:
d5:bf:19:02:11:ce:d3:da:66:16:36:af:d4:19:cc:6c:27:cc:
fa:0e:cf:bc:d5:8c:f7:0a:fa:6f:36:a6:80:27:52:11:14:5d:
e8:75:25:1e:68:33:d6:8a:64:24:7c:73:84:f3:ce:47:9a:13:
51:8e:58:b4:ce:68:d9:18:02:0c:65:8f:f3:c1:c3:ce:33:f2:
9d:0f:45:32:ce:85:61:c0:8e:96:dd:e8:63:d4:3e:96:07:4d:
83:82:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:26 2026 by rpki-client