
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: FbcQeRcl21mWaHLz3B6kxmF1tlfOXh/w++kyk/PzxGw=
Subject key identifier: 5B:06:5C:9E:FA:C9:87:97:80:2D:19:40:4C:E3:2E:98:C5:C8:08:56
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: 0159
Signing time: Mon 27 Jul 2026 07:06:07 +0000
Manifest this update: Mon 27 Jul 2026 07:06:06 +0000
Manifest next update: Mon 03 Aug 2026 07:06:06 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: t0BGBOgpB5tStSYu8pkH2dOJ2K17pex9cIfALjmh5Bg=)
2: 900E2938699411F19844B5108747A888.roa (hash: jus1+o58HPMre2DMSzeD+2S7keAR6F7xQ/skabW/OhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Jul 27 07:06:06 2026 GMT
Not After : Aug 3 07:06:06 2026 GMT
Subject: CN=6a67035f-2ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:cd:19:f2:8e:8c:64:33:1d:c9:a5:29:d2:
4d:64:dd:49:9d:df:00:7b:ad:c4:90:19:08:fb:13:
0c:fb:27:5e:63:47:e5:9d:33:cf:e3:61:f5:5e:23:
63:bb:8a:7d:4d:8c:42:14:f4:fb:f0:29:7e:1d:72:
a4:a3:a3:fd:52:0f:67:33:3c:50:2e:3f:b0:86:17:
8c:93:83:03:cd:03:b6:f1:71:0c:37:48:2e:df:e8:
93:52:17:e5:f5:2f:cd:ec:80:b3:a4:e5:e5:0e:a0:
1c:3a:f7:cc:2d:d3:b7:1b:dd:96:f7:c9:a8:c3:e3:
54:24:34:f9:07:65:34:8c:17:fc:51:6c:21:3a:f7:
e5:fd:f4:b2:45:21:c8:a4:05:ec:83:c2:b1:0d:a8:
53:43:ac:09:ce:15:f2:99:bf:ad:4a:73:00:29:65:
0c:91:04:da:1d:86:a1:2d:7c:29:2f:e5:68:3a:ce:
71:aa:3f:bf:7a:97:54:c2:42:9b:24:30:89:f8:6d:
df:c5:de:25:62:dc:3d:d1:e4:b3:28:39:6f:c8:7d:
9d:39:73:71:e4:88:8b:96:63:50:73:54:72:24:84:
fc:ea:1e:e1:77:ca:f1:58:3a:70:8f:f2:2f:c6:4d:
9e:df:19:b3:5d:dd:2c:29:ab:8e:f7:01:41:55:04:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:06:5C:9E:FA:C9:87:97:80:2D:19:40:4C:E3:2E:98:C5:C8:08:56
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:38:2b:63:a6:b5:cd:62:4d:0b:c8:55:1b:3e:90:04:d3:07:
94:43:b7:97:ba:45:55:cb:6d:80:3b:e6:c7:1a:6a:d5:57:fa:
4a:61:1e:42:61:3d:97:37:23:ef:77:03:9f:d1:37:02:17:59:
2b:e6:af:c8:31:24:e6:7b:b2:fc:6c:16:1b:a1:2b:10:a0:7a:
c6:7f:7f:e1:b2:ba:47:69:5b:aa:ed:b9:e5:b8:58:ef:83:25:
68:fb:06:02:40:e1:1a:3b:78:f2:76:57:74:8f:6b:ed:62:ab:
e9:a2:e6:40:e5:6b:dc:f3:f3:8f:0a:97:f0:e8:89:3d:69:63:
34:33:d2:f7:8b:51:fc:86:21:1b:19:34:bb:1e:7f:9a:37:9b:
29:4a:a6:70:e0:1b:fd:7d:c7:44:53:e2:dd:ec:3f:13:4d:1a:
6d:81:4c:19:92:5f:2f:cd:bc:85:cb:4c:d5:86:7a:be:58:11:
85:05:55:4b:c6:d2:b6:70:23:f3:f7:f7:ad:a6:4b:bc:be:36:
8c:b6:88:d1:54:b1:13:ce:17:25:54:79:8e:06:f7:95:c0:7a:
3b:11:48:f9:f0:d3:9d:77:42:fb:7c:d8:90:35:23:9e:69:ac:
9f:43:3c:bf:c5:99:8d:1f:13:80:ba:42:cb:9e:81:98:89:11:
ac:da:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:49 2026 by rpki-client