
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier: LMvJmLhYRGM2EnuJJrz1ceggH4WcNAPdHuArV/D24VY=
Subject key identifier: 27:F9:3F:46:90:3D:F5:34:2D:52:72:22:9C:A1:C2:6F:3C:B2:69:11
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number: 0123
Signing time: Mon 27 Jul 2026 07:47:53 +0000
Manifest this update: Mon 27 Jul 2026 07:47:52 +0000
Manifest next update: Mon 03 Aug 2026 07:47:52 +0000
Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: i6p9mduqk/jYWtN57iRtoJdpaUd0Hs7yeuXgvXaJsRs=)
2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Validity
Not Before: Jul 27 07:47:52 2026 GMT
Not After : Aug 3 07:47:52 2026 GMT
Subject: CN=6a670d29-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:f8:ab:d1:e7:91:a2:d1:cc:f6:64:2c:37:
db:93:56:2a:d2:3b:17:cd:bd:2f:37:9a:28:80:35:
ca:f2:ea:e2:1a:fd:d7:e0:84:0e:67:97:e2:d9:ef:
9c:58:30:55:09:66:78:6b:13:79:fa:1c:5c:0f:19:
26:85:f6:90:42:e1:33:49:6c:cd:e9:71:b9:0c:68:
38:fc:06:c4:09:a5:f6:35:cb:cf:02:93:75:f7:fe:
65:74:39:db:cc:4a:f8:32:1b:b9:f5:4f:0e:59:e3:
7d:55:1c:ec:db:45:6e:a0:3b:76:07:03:b2:43:aa:
de:d9:f0:3d:23:05:61:49:cb:81:d6:d0:ea:91:d2:
16:0e:06:a7:18:85:59:60:1f:ea:a9:1f:9c:e9:35:
15:c5:b1:23:95:75:75:b7:b2:2a:ac:78:34:87:f9:
35:fd:d3:7b:7f:e3:ef:0d:97:a4:0d:ca:ff:c8:3c:
1b:8d:2a:1f:ee:8d:3a:a4:87:c3:49:95:82:ff:94:
c7:92:b3:e3:de:d7:b9:c6:31:e7:db:48:d9:8d:14:
e8:f9:5d:f5:d7:82:3b:4a:72:4d:2b:6f:5d:14:80:
1b:5e:32:d6:fc:a7:57:43:6d:12:6c:bc:bf:9a:52:
fc:95:e7:9e:1c:75:58:43:4e:7c:1e:d0:74:72:6f:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:3F:46:90:3D:F5:34:2D:52:72:22:9C:A1:C2:6F:3C:B2:69:11
X509v3 Authority Key Identifier:
keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:3c:cd:34:e0:6a:33:30:77:23:79:1f:23:84:e3:ba:61:
14:a5:56:37:87:bd:66:63:d6:14:1d:51:ce:e5:42:ae:9a:0d:
08:0c:0e:9b:ce:af:f5:4a:c8:0a:96:48:b6:4c:68:e0:bc:e9:
65:f8:b4:24:b6:3b:31:3f:96:8c:8f:fa:47:c2:1d:65:84:b8:
09:eb:2f:e8:93:6a:4c:41:4e:4a:d9:fe:25:6e:e3:50:12:3e:
a6:9e:5a:19:90:ac:99:0d:5c:e5:21:15:66:84:ff:87:ae:43:
1c:c0:72:0a:98:b7:6e:f8:47:c4:1a:5c:ab:f3:c5:14:74:b6:
ba:10:a0:1d:a2:10:3a:0d:54:35:34:45:22:f8:99:16:62:7d:
93:33:d0:be:e2:06:49:84:db:c5:f0:74:1f:ba:17:f3:18:26:
6d:66:bf:86:07:83:56:c2:41:de:8a:05:a9:da:f1:38:7e:85:
0a:7f:ea:af:5b:3d:a9:e2:00:f6:85:76:85:1c:0a:ff:60:93:
29:6a:91:36:ce:bf:bf:13:a7:de:e7:c5:c0:87:a3:04:59:f0:
cc:87:16:85:2c:53:ce:3c:4b:1f:ff:4e:6f:2b:cc:27:65:94:
ac:a4:01:29:23:cd:64:42:c0:f9:8b:ab:5e:2a:8f:2b:da:10:
88:6a:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:51 2026 by rpki-client