
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: bSmdJHxYK8RdzhzYOkd+5fH1ExKMpBqLSm+2egxpYHc=
Subject key identifier: 3C:BB:38:37:AC:D0:75:5D:4A:6F:B8:EA:6F:3D:6A:9E:BC:86:74:70
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 0210
Signing time: Wed 29 Jul 2026 04:07:06 +0000
Manifest this update: Wed 29 Jul 2026 04:07:06 +0000
Manifest next update: Wed 05 Aug 2026 04:07:06 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: z0B7sQJbMcsfqDZ3keDzmHQh9dDUnCz3ay+RRj1hc2E=)
2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Jul 29 04:07:06 2026 GMT
Not After : Aug 5 04:07:06 2026 GMT
Subject: CN=6a697c6a-503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:12:77:23:5c:52:b1:02:7a:a9:80:05:33:
b2:71:60:cf:f3:de:e0:8f:b5:8d:36:2b:cf:0c:f2:
c7:f6:aa:af:c4:b4:08:9c:6a:13:b0:1f:e7:a5:d1:
9c:00:6b:51:fa:8a:74:f0:03:0f:6f:41:c8:15:80:
0a:c8:c8:b0:6d:a3:d6:d9:8f:89:37:12:27:bb:ce:
0d:3e:5d:c5:2a:62:ad:39:a1:5e:fa:c1:76:aa:de:
e9:09:09:39:08:1d:20:6a:94:36:46:75:19:e8:34:
e6:57:52:5c:53:0d:ac:c8:f8:f7:84:36:5d:8f:bb:
d9:bf:11:60:5c:b5:bd:09:b2:9f:8b:1d:b4:72:0b:
6f:2d:78:3b:aa:57:63:7d:8a:bb:6a:7d:db:e1:31:
21:62:ad:39:05:61:89:61:a4:3d:56:d6:86:b1:5d:
f0:48:87:3f:b2:b0:14:1d:db:3f:0f:21:e0:45:93:
fb:e6:41:06:77:a0:13:14:bf:07:22:ec:85:8e:66:
03:42:15:3b:c2:62:aa:a8:92:2d:c9:de:99:07:9b:
dc:78:0e:a5:c3:c7:22:e6:2d:6f:17:bf:ea:03:a2:
ee:ae:6b:90:24:2b:22:4e:34:77:05:25:b4:02:0a:
85:9f:2a:ca:f1:ab:bd:dc:26:c5:70:f1:63:ea:f8:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BB:38:37:AC:D0:75:5D:4A:6F:B8:EA:6F:3D:6A:9E:BC:86:74:70
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:88:ad:2d:7e:9e:2d:01:c8:c6:a5:cd:49:9f:15:3c:89:
ff:fd:25:3c:ee:4b:84:78:e1:bf:07:84:84:c2:88:00:6f:b7:
55:00:8a:3f:65:12:13:6e:ae:ae:74:28:7c:c4:21:54:21:c2:
2e:4e:88:3b:da:10:42:35:5c:1e:bb:d3:25:dc:83:59:cf:a5:
28:f3:6c:7d:95:44:92:09:a0:3d:6e:c6:0e:f9:b4:eb:6d:92:
8f:36:05:07:f9:53:7e:b7:6d:35:c1:95:f3:1e:9c:45:b4:be:
52:94:1c:21:68:5d:e8:3b:4c:00:65:81:f4:3c:ac:5f:74:6e:
60:e3:aa:76:83:72:99:15:54:26:e3:95:5c:69:db:01:ce:18:
c3:ef:84:1b:74:a4:93:8e:1f:70:e0:db:4d:c9:54:a2:71:4b:
9d:42:e2:1a:0c:59:e6:a3:c1:a9:ee:81:31:a3:52:36:8f:94:
89:1d:09:3c:08:b4:6b:6d:52:26:5e:63:c5:29:d4:2e:b2:aa:
d1:e7:50:94:f1:ab:e3:80:36:f0:27:aa:42:db:00:ce:47:16:
e6:f0:b2:ea:2e:40:57:ac:13:02:d7:01:08:6b:05:60:d7:e1:
fc:f6:0c:01:a2:ff:c9:c2:a3:6b:92:77:2e:b0:25:d5:ad:1c:
25:2e:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:55 2026 by rpki-client