
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: qqvcyI83zqlcqSuDcdZAhwBlkF3bnfhWDlXMwxBho3c=
Subject key identifier: F8:95:85:43:74:90:40:AA:B0:6C:C1:B8:5E:4D:C9:EA:4D:16:D6:BF
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0E19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0E06
Signing time: Tue 28 Jul 2026 17:58:36 +0000
Manifest this update: Tue 28 Jul 2026 17:58:35 +0000
Manifest next update: Tue 04 Aug 2026 17:58:35 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: fGZ0hhksInTN1JpvusY5871txlrhG9VXFw04t0K239A=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Validity
Not Before: Jul 28 17:58:35 2026 GMT
Not After : Aug 4 17:58:35 2026 GMT
Subject: CN=6a68edcc-51c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:e5:29:4d:0f:f1:f5:7c:56:76:ba:4b:64:
d4:92:a3:a7:e1:b8:3d:4d:34:19:f5:aa:64:ed:93:
fe:82:b6:1b:e2:b5:c9:4d:da:26:9f:35:2d:d4:75:
22:0a:13:cc:8b:34:40:f5:09:ac:d3:48:f1:f9:c6:
22:ee:5a:31:10:87:d6:2f:50:21:be:c0:81:12:ba:
a1:31:7a:8c:05:57:db:89:50:57:e1:96:5d:72:1e:
db:ce:0d:be:79:3d:70:bb:b4:78:a5:78:b7:6a:2c:
03:db:94:88:19:ee:c0:e8:c0:6d:bf:a6:a6:2d:ac:
b2:55:12:12:0f:b6:7d:c1:3c:14:06:b4:5e:54:73:
c9:66:f5:b0:96:30:1a:3b:25:b5:8a:3c:2e:9a:f6:
3a:56:b2:ff:0a:f2:bd:f4:0b:9d:34:67:11:e2:1c:
a3:22:97:64:32:a7:32:73:a0:e2:ca:7b:85:ac:67:
db:b8:1d:e4:8a:83:12:eb:12:c2:b4:30:4a:3f:9c:
8e:0b:dc:ef:ff:d6:ab:2e:37:54:a2:43:af:e0:e1:
35:4c:bf:63:65:ad:f3:11:2c:28:d4:36:a8:d7:57:
69:e4:c8:b6:98:bd:4b:94:26:43:44:39:d3:09:7b:
e9:71:3e:e5:42:de:eb:70:1e:65:4f:a8:ce:ca:cd:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:85:43:74:90:40:AA:B0:6C:C1:B8:5E:4D:C9:EA:4D:16:D6:BF
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:6a:c5:b6:bc:0e:94:15:23:b6:68:c3:80:59:75:c6:0c:
96:05:8f:2e:7d:ad:b9:8d:8c:27:68:a4:d9:e8:25:09:cd:fe:
c9:56:95:ab:a0:de:64:75:15:b4:c8:ff:ac:8e:f1:46:3d:5e:
99:9a:65:5d:1c:e0:c8:4b:a4:aa:c8:e0:af:1e:31:08:b3:db:
22:11:08:35:3a:28:84:1d:65:40:f5:65:cb:c8:c7:f1:3e:27:
65:83:c8:14:9b:58:34:5c:b6:fe:af:10:08:46:ff:47:fb:8e:
6e:c5:39:6f:42:98:d1:3c:e6:58:e2:72:f7:71:d7:67:e7:b0:
bd:a1:c8:97:0e:52:d4:6e:74:9b:99:69:2d:71:5e:96:df:27:
53:80:ff:b3:b1:34:46:55:47:09:23:d8:30:d8:ac:06:48:d4:
c7:9a:1d:a1:41:dc:a3:ba:a8:53:e4:39:fc:f9:73:97:8a:83:
35:69:98:86:e8:a3:54:5d:37:b2:41:94:44:eb:28:ba:6c:08:
06:1a:e2:51:70:a6:12:05:69:00:83:47:25:0b:ac:80:88:26:
38:a0:64:b5:c8:1f:d7:25:cc:6e:6b:5c:d7:c7:6f:07:17:4b:
78:2d:a5:07:78:ac:65:fd:02:6d:86:e4:bc:45:ac:06:6f:dd:
c1:96:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:54:57 2026 by rpki-client