
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier: tE2fQBZGBdgvH/86qfJF/Q53AkMw7bQmGZ4VkWdoYyw=
Subject key identifier: D4:0E:36:A6:D4:8F:68:65:C5:06:21:47:6F:1F:1E:B3:CD:21:7C:7F
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number: 0114
Signing time: Mon 27 Jul 2026 07:59:54 +0000
Manifest this update: Mon 27 Jul 2026 07:59:53 +0000
Manifest next update: Mon 03 Aug 2026 07:59:53 +0000
Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: Nk5E6BUl9q1ta8GqKl91FM3Lhf1rQC/NZ7UJzcUSb4M=)
2: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
3: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Validity
Not Before: Jul 27 07:59:53 2026 GMT
Not After : Aug 3 07:59:53 2026 GMT
Subject: CN=6a670ffa-e9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:6a:4d:f2:ec:44:38:8d:0f:e6:6a:76:e5:
5d:da:d5:94:7b:8a:5e:0a:2f:80:35:90:2d:54:81:
3e:85:4b:21:2d:ef:23:74:30:21:bc:db:39:2a:ad:
84:fc:a4:4f:35:f3:e5:f1:98:49:58:42:1d:72:e3:
f6:7c:60:7c:b8:f3:18:d7:58:f7:f3:5b:51:e4:d0:
80:1c:f4:04:c7:af:cb:2f:7e:48:ea:bf:5a:00:90:
69:00:0e:95:a9:5b:cf:ec:ff:29:91:46:3f:cf:fe:
75:0d:74:20:68:dd:04:cb:52:06:5f:24:06:65:64:
5c:20:3c:86:d7:e4:9c:1e:8c:ad:6c:50:65:0b:a3:
f1:65:58:8f:f1:5e:fb:76:61:f2:89:ee:cb:07:a2:
9b:db:84:f3:ba:ec:a8:c4:8c:ee:62:9c:84:bd:6b:
07:cf:e4:8a:9f:c0:d9:f8:ff:ce:5f:ab:d5:7d:7f:
26:78:42:80:2c:cb:69:1a:44:9b:a2:b4:59:08:3b:
b3:7c:8e:dc:77:d1:30:58:70:9b:13:74:f5:70:f5:
ed:87:2e:9d:c1:26:6b:f6:d6:50:91:e2:75:5f:b3:
34:73:05:c5:4b:42:78:57:3e:a8:34:23:c5:07:df:
6b:a2:b4:2f:54:07:d3:70:42:07:62:f6:aa:27:5a:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:36:A6:D4:8F:68:65:C5:06:21:47:6F:1F:1E:B3:CD:21:7C:7F
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7c:fa:c8:3a:19:17:95:bc:a1:0d:a5:64:a9:3f:d7:ce:8b:
62:3c:c5:90:23:70:d0:71:1d:43:91:84:9b:ea:ad:b0:e8:07:
cf:87:90:cf:66:18:df:6f:97:fc:01:91:5a:a9:c0:d8:6b:24:
5b:ae:05:19:31:39:6e:ab:df:7a:c0:5b:4f:ac:0c:4d:6d:c8:
e9:56:76:97:cb:14:f3:35:42:94:19:31:96:b8:6c:58:77:c3:
3d:d0:a9:b3:ea:dc:5c:f7:eb:09:3f:ac:a5:14:83:af:39:4a:
a5:8b:6d:ad:22:df:11:e1:5d:e0:9f:36:76:98:ee:0a:9d:f9:
19:e6:f6:7d:47:06:00:cc:63:99:54:55:b0:1b:2a:fd:e6:53:
c0:7b:63:f4:fe:f0:97:d5:8f:4b:ac:7a:ef:a0:ca:29:ed:e8:
31:d1:2c:64:0b:9c:c2:3a:8e:5c:e1:9a:51:94:78:b9:0d:ef:
9d:70:d8:8d:39:c3:e9:7d:48:62:d7:18:ac:50:d1:fe:6f:2b:
fd:96:06:f4:97:0c:93:3c:c7:c8:ed:e2:f7:e2:4a:37:9e:fd:
15:23:bb:60:ac:73:c5:af:5f:cb:79:24:10:65:4a:6c:f7:74:
6c:c1:e5:c0:c7:92:a3:b3:e7:dc:e6:d0:f5:78:49:96:60:62:
70:f6:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:47 2026 by rpki-client