
$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json)
Hash identifier: 9Rp+x0ZwArNOsWHPzmXGuNGBTAkWwR1FESspNej+50M=
Subject key identifier: AC:98:D5:7C:56:24:DE:EC:73:64:81:DE:24:05:80:79:2B:7C:99:4A
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
Manifest number: 027F
Signing time: Mon 27 Jul 2026 03:23:42 +0000
Manifest this update: Mon 27 Jul 2026 03:23:42 +0000
Manifest next update: Mon 03 Aug 2026 03:23:42 +0000
Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: N0SK7kRZVPzXrJEqwLZ6Xq2d/+1kPIjj7UPkiAnFnW0=)
2: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=)
3: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Validity
Not Before: Jul 27 03:23:42 2026 GMT
Not After : Aug 3 03:23:42 2026 GMT
Subject: CN=6a66cf3e-9928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:2c:7b:e2:e0:57:27:41:54:e2:76:cf:2e:
19:98:39:1a:79:b4:20:77:e9:ff:6e:da:d6:b0:15:
e8:a1:eb:d4:f5:19:f2:e4:15:22:e5:82:1d:c0:5f:
81:27:fd:27:39:9f:a7:b3:af:60:6f:c4:ec:53:fa:
e4:fc:8e:c2:da:d8:d7:fc:38:62:7e:04:1a:8a:94:
42:15:74:5b:b4:23:1c:cb:d1:81:12:31:02:c1:2b:
c5:2b:23:6f:c8:92:44:53:e3:4b:ba:9e:52:8f:94:
47:21:c2:cc:2f:62:f3:fc:64:b4:3b:19:cd:07:13:
7e:17:3b:81:c2:11:6c:c7:9e:0a:91:7d:87:e5:a4:
a7:56:1d:9a:23:3a:00:48:3b:a5:6e:d5:10:f5:e4:
66:f1:51:16:55:5d:d1:89:08:1d:13:88:2c:41:63:
e1:44:8e:9b:c1:d6:78:c4:ac:61:28:6d:0a:d5:a2:
2e:2e:56:14:61:6e:c2:a3:06:72:c0:b7:7a:56:13:
b1:6a:c4:a7:8d:58:75:f9:fb:92:b9:78:0c:95:af:
7a:ed:29:fd:c4:7c:83:76:22:b8:de:e4:53:2f:78:
f4:7e:05:44:32:db:e0:81:f3:84:b5:35:43:d2:ba:
ce:45:ff:5e:30:6c:57:67:d8:14:d5:ee:0e:da:b1:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:D5:7C:56:24:DE:EC:73:64:81:DE:24:05:80:79:2B:7C:99:4A
X509v3 Authority Key Identifier:
keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:8d:72:90:ec:4d:c9:97:3e:41:6b:98:44:ac:e6:85:48:
ad:24:e0:49:41:e9:7b:d2:08:6d:f8:e1:d9:42:b5:3d:6f:21:
af:e2:16:c9:2c:e9:45:63:37:46:be:88:1f:62:bd:55:ff:24:
56:72:01:43:e0:a9:1e:ec:93:7c:1a:52:1d:78:71:fc:d5:57:
9f:7b:d9:3c:66:8d:ab:b9:04:31:b8:53:79:5b:50:0a:aa:87:
47:e1:4e:3e:49:7f:63:8f:7a:10:c7:98:5a:cf:5c:62:eb:38:
31:09:ea:c0:b7:3f:5f:f6:69:a6:ff:b7:6e:b6:c3:80:ff:4a:
8f:88:6d:80:6f:45:c8:de:3a:c2:6e:c4:61:8b:93:11:24:c5:
2b:94:ba:92:a1:bd:3b:2b:88:60:8e:d1:da:8c:0a:82:7e:11:
72:50:7b:95:4d:39:21:de:05:80:93:19:c0:35:39:05:46:e6:
af:3a:48:e8:58:b5:49:c6:15:25:8c:bc:c5:5e:93:d4:0b:61:
e5:99:74:84:f3:c6:43:53:ae:69:01:62:bc:04:29:fe:78:ef:
33:1f:6a:90:f2:70:f4:8d:d2:32:22:e0:e7:25:d7:b1:97:93:
7b:4e:a1:9d:a6:29:15:8b:bf:d6:b6:a9:45:a1:31:31:fd:58:
eb:b6:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:23 2026 by rpki-client