
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier: XEmzTkVybRcotDJMIOQeGWUFXZwAPktcQQNJAYTCb+I=
Subject key identifier: E0:84:A3:07:D6:EF:28:01:D0:AA:7C:4E:3B:D7:2D:4F:5D:9E:7E:0F
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial: 04DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number: 04C7
Signing time: Mon 27 Jul 2026 00:54:22 +0000
Manifest this update: Mon 27 Jul 2026 00:54:22 +0000
Manifest next update: Mon 03 Aug 2026 00:54:22 +0000
Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: PbJRS5a6PdaqC70Pn8sizzckNuKh1JK98E5mztAQhkQ=)
2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: uBxr7p6TwpA9INGB4KedC2EYtx+upfxJFxMsenv5Y3Q=)
3: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Validity
Not Before: Jul 27 00:54:22 2026 GMT
Not After : Aug 3 00:54:22 2026 GMT
Subject: CN=6a66ac3e-e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:8a:0f:27:2c:7c:a6:e3:9b:80:dd:27:3c:
35:71:2d:53:d9:a3:aa:79:98:d8:9e:91:c6:9f:04:
e6:35:c4:16:c4:f9:44:bf:50:20:85:cf:c9:0a:d5:
69:9b:d5:87:02:5d:0f:7c:aa:56:e1:99:b1:eb:24:
c1:fa:ee:d4:73:3d:c3:d3:b5:52:d4:19:a8:56:65:
6f:e9:74:9a:40:9a:97:97:b2:54:9a:8f:86:19:9a:
b4:96:53:52:e0:b9:08:d5:24:5b:2d:9a:16:e5:28:
82:c4:80:91:4c:c6:a2:6a:87:58:32:4a:4b:c4:4c:
0d:7c:78:2f:2b:70:04:72:6b:41:a8:64:d1:73:88:
ab:36:ee:be:b8:57:79:6f:39:c4:4d:af:51:48:86:
50:5f:66:9b:1d:af:fd:55:5f:1b:e8:ff:1f:db:46:
da:2a:7d:28:21:22:7b:34:31:db:08:13:6c:8b:57:
16:0f:13:ec:d1:58:56:4a:d6:70:b0:8a:71:cb:62:
a4:f1:26:1d:2f:e6:ea:9b:5a:83:68:1a:a9:bc:11:
7a:74:0a:dd:ef:ce:15:af:dc:5c:0a:75:3c:9b:67:
8d:3c:34:ec:aa:dd:67:dd:37:21:98:b4:27:00:1c:
0e:50:a3:e6:fe:f4:79:d1:4f:0b:e6:c2:7c:de:a3:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:A3:07:D6:EF:28:01:D0:AA:7C:4E:3B:D7:2D:4F:5D:9E:7E:0F
X509v3 Authority Key Identifier:
keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:20:8e:06:9a:40:95:12:52:8a:d4:67:d0:06:48:c8:b1:91:
82:45:43:b6:54:03:dd:e9:fc:d9:53:43:3d:c9:ee:33:53:80:
c8:71:56:d6:1e:d9:4b:17:82:cb:e5:f4:7d:a9:7d:8d:c3:a3:
04:86:a9:bb:15:82:01:a1:f9:55:9b:96:19:7b:7f:f6:8f:54:
31:ee:75:5c:4e:fa:57:64:34:41:ae:bf:60:1d:6d:71:dc:47:
7e:5b:53:88:82:67:dd:d0:ad:79:69:04:29:6a:0f:99:ba:74:
13:bc:ef:fc:cd:91:7d:e5:4d:56:dd:91:c7:e6:17:eb:f3:d4:
74:02:b3:5a:cc:e9:5a:c4:0d:f9:15:a5:93:77:59:6c:22:62:
5c:20:f2:47:44:2b:e3:cc:ec:bf:0b:75:22:3d:bf:f9:0d:7a:
a8:40:80:c7:e4:67:b8:8f:f8:5a:02:f3:be:03:96:a0:5a:40:
64:7d:21:09:05:a4:05:8d:ac:5b:37:31:8c:66:21:de:d6:2b:
02:eb:9c:e5:bc:e9:8b:1c:97:7c:91:8a:93:45:16:41:16:71:
49:d4:11:00:ca:24:88:17:ef:33:c5:f5:2d:22:07:af:c2:bf:
94:d2:49:06:d9:2b:fa:5d:50:f2:82:2f:63:4e:79:a4:6d:60:
2c:26:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:33 2026 by rpki-client