
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: UmSMXfkFL1t9Z76flr9ctVBk6E1Pqer/sukdoZZ9cU0=
Subject key identifier: CD:53:DE:5B:38:4B:37:5E:02:5C:C1:E5:CD:FC:BA:EC:87:9A:C6:AC
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0AA9
Signing time: Tue 28 Jul 2026 19:49:16 +0000
Manifest this update: Tue 28 Jul 2026 19:49:15 +0000
Manifest next update: Tue 04 Aug 2026 19:49:15 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: bjh2RBboTXRPUZKOg+fPTFE5y/pF1bIr1vLL7y+bJm4=)
2: 0A5A5A8C868611F1834D6ADF67A30FBC.roa (hash: EnnfgpQNdSPaqBnvSKsk/cfhTzDdzQOYchOp4FDnxR8=)
3: D520BC1A7F2511F193FF4ECD8AA30FBC.roa (hash: cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=)
4: 2ACA766C751511F18829B6FC70A30FBC.roa (hash: fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=)
5: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: Vj7o88kIi1gzoKZrYduw49KYBvPlvY9XiAyKSejHJoM=)
6: D61FACAC7F2511F193FF4ECD8AA30FBC.roa (hash: Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Jul 28 19:49:15 2026 GMT
Not After : Aug 4 19:49:15 2026 GMT
Subject: CN=6a6907bb-7383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:42:8a:93:6d:1e:1b:66:81:85:80:68:a5:
64:dc:f7:55:37:8b:1e:ee:1d:8b:62:9f:17:e6:02:
58:08:89:8c:49:d1:5d:1b:8d:fa:b6:ce:43:fa:c4:
7c:64:31:ec:5a:94:61:8f:5a:5b:a8:4f:9b:2f:49:
07:3a:f3:70:4f:d5:2e:92:25:4b:66:15:27:cd:1d:
9f:03:26:5a:d2:e0:04:bb:1d:68:7b:ad:1e:fc:41:
44:ac:73:2d:f6:4d:e3:e8:16:97:70:8a:31:c6:50:
68:a2:49:2d:59:8e:d3:22:3f:d5:da:ad:b3:0b:eb:
dd:5f:cc:07:25:db:44:40:72:d6:b0:b6:c9:ff:98:
ce:1c:0b:ce:7e:67:d3:e6:1e:73:b6:85:01:b8:d7:
37:c1:63:09:a4:cd:e2:f2:e2:8f:95:88:58:44:79:
b6:00:64:26:5a:e6:7a:57:bb:eb:8b:cd:91:d7:62:
94:fb:da:43:3f:99:ac:fc:65:72:4c:50:dc:49:91:
24:37:90:0b:fc:de:cd:81:63:de:84:91:d5:28:9a:
8d:6e:95:fe:ff:dc:5a:28:a1:12:77:aa:e1:ad:00:
c7:21:80:b2:2d:7d:2d:fc:db:e4:e5:0d:85:78:e0:
46:8a:f3:08:af:57:f7:8c:14:f0:ef:c5:07:e1:4c:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:DE:5B:38:4B:37:5E:02:5C:C1:E5:CD:FC:BA:EC:87:9A:C6:AC
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:af:f9:fd:b5:fb:ac:35:e1:9b:c8:3a:cb:00:ef:a0:08:
d0:70:4d:78:a5:b4:28:14:3f:65:fc:2d:42:29:99:96:12:bb:
a3:c8:2e:c2:c2:e1:ec:d1:a1:13:39:a2:ec:3b:3f:34:1b:30:
1a:d1:b7:90:2b:89:d2:05:94:b2:f4:1b:7c:00:f2:29:c8:8a:
c5:fc:6b:2a:54:dc:29:90:65:3d:6f:a9:43:21:2e:c7:b3:06:
e2:2c:93:07:0d:79:c7:e6:0f:26:21:01:13:a7:27:52:a2:39:
8e:ef:d8:73:82:33:80:52:37:20:87:aa:d5:f4:3b:d1:39:2f:
75:c1:5f:d1:41:ec:37:2a:94:0e:d2:05:da:f7:03:28:bf:d5:
13:b0:63:1b:8b:27:36:3e:49:9f:1f:1f:ef:2c:ff:ab:f6:44:
8e:47:86:a8:6c:70:cc:e2:4a:c7:52:3a:2d:67:e7:2c:73:6a:
09:c2:42:51:3c:58:9e:cd:e3:39:70:fa:2b:fa:73:ff:0d:75:
a3:cc:fe:24:de:aa:22:58:1f:f8:96:03:83:de:4c:c9:01:fe:
de:99:65:a2:79:a2:f7:31:c4:d6:d1:32:98:e7:cf:e9:7a:39:
ee:53:4e:64:2e:d3:62:9b:c6:fb:ee:72:fd:93:48:cf:f2:c6:
f2:db:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:49 2026 by rpki-client