
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: WppJur5Pu7H6dNQpg9jdfVUT4Xzv/8HlFR9jc/u3LKg=
Subject key identifier: 56:2C:AB:C8:3B:05:35:78:68:62:15:A7:A4:8E:45:C2:FD:8F:E1:19
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: 0202
Signing time: Mon 27 Jul 2026 04:43:44 +0000
Manifest this update: Mon 27 Jul 2026 04:43:43 +0000
Manifest next update: Mon 03 Aug 2026 04:43:43 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: BiyzVap0JG3Eo/vxY5CZDNmTjtpjXNDDVOTp21dHQec=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: zNUB+vibuX3nQWmpbN4PBwL7Sq5HwZSp7xD/bsaKx34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Jul 27 04:43:43 2026 GMT
Not After : Aug 3 04:43:43 2026 GMT
Subject: CN=6a66e1ff-b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:0e:85:68:2b:13:d4:0e:7e:cc:d7:f5:2f:
e4:e1:7f:66:b7:4e:0b:74:84:46:ae:a7:05:c0:76:
47:96:cd:92:c5:6e:bf:38:f0:10:6e:75:55:26:2c:
bf:dd:d4:9c:36:2c:f5:fc:54:f3:9b:c8:56:bc:d2:
8f:b6:6e:ae:79:ba:3a:37:20:cc:9a:ad:6b:18:1b:
2a:d3:d6:a2:f7:8c:a1:b1:1b:2c:fa:00:d6:da:39:
5c:10:65:0f:50:89:29:d1:4b:47:7a:a6:11:2f:16:
bc:e5:c4:ac:3b:52:28:35:4b:cc:e4:70:fb:85:a6:
9b:b0:b9:8d:14:cb:ec:4d:fa:36:88:c8:7b:a6:cc:
9e:fd:2f:d6:36:07:33:9f:90:0d:a3:ce:19:6c:bb:
62:88:0b:1a:59:f0:3a:72:f0:93:87:f9:4c:86:7b:
f5:99:a7:15:e6:a2:8a:15:ea:b2:a6:39:ef:17:6c:
09:e3:fe:07:1b:66:5f:e4:f2:82:27:7a:1f:7c:9b:
f7:0b:de:89:8b:9a:da:7b:83:4a:eb:71:13:27:8d:
bd:e0:fd:00:70:7d:6b:84:61:a0:c1:85:2f:47:b7:
c4:a8:ed:1a:5a:6a:c9:69:bb:d0:68:1d:4e:ed:cc:
2d:42:e7:f8:e2:ac:b9:0d:a6:20:ef:91:bc:22:78:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:AB:C8:3B:05:35:78:68:62:15:A7:A4:8E:45:C2:FD:8F:E1:19
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:1e:87:df:d7:54:b4:3d:61:b2:6e:70:e8:ca:be:7f:9c:
09:bd:26:4d:6d:7d:81:d5:5b:ae:94:a5:35:63:0e:c7:98:42:
ce:a8:89:32:69:47:e8:2a:28:d3:ef:e2:e1:d1:03:94:e0:d0:
b8:f0:d8:0b:91:31:9e:c8:8e:ab:cc:31:29:c4:e8:1a:8f:a1:
79:fd:b5:70:36:b4:2e:aa:68:fd:56:c9:28:f4:a3:b2:be:95:
bd:90:c0:04:e2:e1:75:e7:c2:e9:56:72:7d:1f:bc:0b:ce:85:
42:f2:fe:98:f1:83:f8:b4:06:7c:e4:83:32:b8:bd:02:f7:fd:
ed:92:5d:54:b6:41:42:60:47:30:ad:21:61:31:54:38:5b:3c:
88:de:54:92:80:51:0d:a9:b6:6b:08:05:10:a6:3c:90:2a:16:
70:f5:1a:af:cb:d2:87:20:d2:d3:7d:57:8c:97:a9:f6:8b:b0:
4b:01:6f:a2:e8:f0:d6:a7:ec:da:3a:de:2a:e8:7e:4c:22:fb:
66:7a:0c:92:e2:2e:d2:62:53:53:3d:cc:f5:c8:b0:47:be:80:
99:0b:94:08:d0:51:be:5c:64:9d:6a:31:3e:5b:74:18:8a:8b:
96:e1:1d:3e:e2:98:86:7a:f6:ec:d6:10:5d:f0:fc:76:d9:94:
02:db:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:08 2026 by rpki-client