
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
File: 0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json)
Hash identifier: jVnCODBzvCmPnVej4jvYh7GgbhAr0h8IisqkUA7vcdA=
Subject key identifier: A7:42:91:31:2F:05:93:3D:BE:44:66:B5:62:03:A7:1F:6B:A9:D3:D9
Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
Certificate issuer: /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
Manifest number: 0151
Signing time: Mon 27 Jul 2026 07:13:57 +0000
Manifest this update: Mon 27 Jul 2026 07:13:57 +0000
Manifest next update: Mon 03 Aug 2026 07:13:57 +0000
Files and hashes: 1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: tO5OcfUEKONH+yDfMacGlLoJSFPHxq/8MjDdtV/OUMU=)
2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: RSWSsqKVGFqnc5MjQ5V0wfdqY1cc/uC9LzB1g38vtcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0E9D, serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Validity
Not Before: Jul 27 07:13:57 2026 GMT
Not After : Aug 3 07:13:57 2026 GMT
Subject: CN=6a670535-5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:15:c1:43:b6:50:3d:ff:ab:63:89:0c:12:44:
d7:b0:98:67:c0:d8:95:68:c3:c2:72:f4:84:61:09:
08:f1:64:6e:d7:4c:f0:28:c1:f3:22:92:99:3f:50:
ce:a8:bf:ab:a6:5f:31:c7:bd:07:b3:63:f5:d6:d0:
25:a7:d4:2e:4b:17:2d:bf:9b:a4:1d:d5:5d:bc:7f:
f4:a6:1a:53:52:ca:ae:05:ba:c8:f9:af:98:bf:6f:
87:15:de:11:a6:d4:c2:5a:66:06:b0:db:48:9a:34:
ea:40:02:58:3a:14:c0:7c:a5:10:5e:87:f7:09:93:
9c:f1:c6:1f:00:c7:3f:e3:f7:c4:1d:fa:30:52:65:
48:f4:d4:d3:29:71:11:cb:fb:ef:6e:58:e2:95:ef:
ec:e1:70:0f:89:67:c5:61:64:5f:8c:99:da:d0:6c:
0b:bc:64:13:c0:7b:1a:60:55:76:ec:08:c4:df:0b:
7f:73:b0:73:92:1b:d4:a3:18:f5:de:77:2f:15:75:
53:5f:27:fa:dc:f0:5b:d6:db:88:60:26:fc:c8:54:
8a:81:52:e2:3e:37:af:22:82:23:9b:07:5e:af:5c:
32:83:a1:f0:46:48:6b:31:d2:d7:c7:54:d6:d4:97:
4e:f4:f1:1b:a8:5a:38:d9:b8:62:1f:da:73:44:8f:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:91:31:2F:05:93:3D:BE:44:66:B5:62:03:A7:1F:6B:A9:D3:D9
X509v3 Authority Key Identifier:
keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:0a:b1:28:35:a5:2d:3e:2d:5f:70:8b:58:22:fb:35:37:8f:
d8:10:c3:ec:63:36:b6:50:e2:58:4a:de:5d:3a:3d:61:25:d4:
ff:8d:86:a5:68:d2:8e:40:c0:1e:4d:a5:40:90:45:fe:c5:1a:
a0:30:17:1d:34:27:6a:69:92:c5:02:77:de:29:6e:83:57:cc:
db:1b:3e:33:a2:1c:1c:81:5c:87:c9:e5:c8:85:c8:50:6e:a3:
0c:35:f5:20:30:f0:54:fd:88:f1:2b:4c:c3:78:5b:d9:a7:12:
b0:b8:9a:e1:76:0b:4b:5f:98:0a:26:fb:86:d9:0e:ef:00:c6:
3d:6b:b4:c1:8d:60:6f:11:3e:43:b3:ec:ee:99:12:c5:8a:6f:
09:82:fd:21:5f:f3:b5:3a:7e:66:54:62:2a:df:8b:71:56:ba:
1a:bf:a2:43:0f:c7:df:70:41:53:83:95:ba:63:2f:fa:2a:11:
ed:1b:07:ce:65:12:6e:4e:b8:12:0a:22:aa:b6:78:31:ca:bc:
5c:a9:2d:fd:ef:ae:36:53:a5:ff:5a:f5:23:9d:f1:bd:40:03:
17:7d:ec:c2:ee:d2:b5:ab:0d:c4:de:a0:0f:5e:43:9b:f6:c3:
74:c2:84:0f:d6:61:47:40:f5:37:05:61:65:61:c8:46:76:af:
df:0b:47:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBFOUQxMTAvBgNVBAUTKEQyMUIwRDVBQzVBRjkxOTAwRjUwQUQ5NjAwMzMxM0U1
MUVENjBBMTAwHhcNMjYwNzI3MDcxMzU3WhcNMjYwODAzMDcxMzU3WjAYMRYwFAYD
VQQDEw02YTY3MDUzNS01NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RXBQ7ZQPf+rY4kMEkTXsJhnwNiVaMPCcvSEYQkI8WRu10zwKMHzIpKZP1DO
qL+rpl8xx70Hs2P11tAlp9QuSxctv5ukHdVdvH/0phpTUsquBbrI+a+Yv2+HFd4R
ptTCWmYGsNtImjTqQAJYOhTAfKUQXof3CZOc8cYfAMc/4/fEHfowUmVI9NTTKXER
y/vvbljile/s4XAPiWfFYWRfjJna0GwLvGQTwHsaYFV27AjE3wt/c7BzkhvUoxj1
3ncvFXVTXyf63PBb1tuIYCb8yFSKgVLiPjevIoIjmwder1wyg6HwRkhrMdLXx1TW
1JdO9PEbqFo42bhiH9pzRI/D7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdCkTEv
BZM9vkRmtWIDpx9rqdPZMB8GA1UdIwQYMBaAFNIbDVrFr5GQD1CtlgAzE+Ue1goQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEU5RC85NTY5QURCNDk1
REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmtaQVBVSzJXQURNVDVSN1dD
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBoc05Xc1d2a1pBUFVLMldBRE1UNVI3V0NoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEU5RC85NTY5QURCNDk1REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmta
QVBVSzJXQURNVDVSN1dDaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5gqxKDWlLT4tX3CLWCL7NTeP2BDD7GM2tlDiWEreXTo9YSXU/42GpWjSjkDA
Hk2lQJBF/sUaoDAXHTQnammSxQJ33ilug1fM2xs+M6IcHIFch8nlyIXIUG6jDDX1
IDDwVP2I8StMw3hb2acSsLia4XYLS1+YCib7htkO7wDGPWu0wY1gbxE+Q7Ps7pkS
xYpvCYL9IV/ztTp+ZlRiKt+LcVa6Gr+iQw/H33BBU4OVumMv+ioR7RsHzmUSbk64
EgoiqrZ4Mcq8XKkt/e+uNlOl/1r1I53xvUADF33swu7StasNxN6gD15Dm/bDdMKE
D9ZhR0D1NwVhZWHIRnav3wtHVw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:47 2026 by rpki-client