
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier: Tkso1GfV8gtW/mtzOLmjxdIHaoYjs3m4gHgpj04JM38=
Subject key identifier: 8A:B3:91:43:59:CC:57:47:29:0E:BF:D6:DA:11:7B:1D:F1:CA:15:D5
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number: 0122
Signing time: Mon 27 Jul 2026 07:45:01 +0000
Manifest this update: Mon 27 Jul 2026 07:45:01 +0000
Manifest next update: Mon 03 Aug 2026 07:45:01 +0000
Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 898DzAkQXg8ZFVcAuNmK7HrRLnotnG1zsMed6WxZ9wo=)
2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: Jul 27 07:45:01 2026 GMT
Not After : Aug 3 07:45:01 2026 GMT
Subject: CN=6a670c7d-9bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:de:6a:d3:01:40:31:28:fa:a3:09:53:bf:
c3:ff:77:47:f4:d2:9f:49:92:04:27:5d:03:75:66:
d6:05:21:30:6d:c5:72:97:f9:9b:fa:25:0e:43:40:
98:4b:ff:ee:41:ab:59:61:77:d8:93:6d:21:b9:0d:
7d:81:dc:a6:d4:f2:fc:e3:03:d9:9c:93:60:ca:66:
1e:c9:c2:d3:ac:6e:f6:13:58:9c:03:59:15:f3:0f:
a3:1e:ac:0e:43:2c:6b:3e:7a:e4:c9:f5:6f:1a:f9:
80:39:ea:e4:ca:2c:96:8f:55:70:0b:52:fe:b5:7c:
a8:b3:1b:0e:69:a7:13:26:f2:7c:b1:34:46:b1:da:
a7:2f:42:4e:4d:23:4f:0b:59:d7:d2:36:ae:9b:20:
81:d6:38:55:b7:f0:77:31:83:4b:e5:24:fe:93:80:
da:cc:77:bc:bb:5f:e4:e1:ad:61:53:64:be:31:e3:
75:4d:73:3d:fa:dc:18:0f:bf:63:2c:f7:ee:10:5b:
03:ab:61:e5:8e:55:0f:b8:2f:d2:af:0f:b3:f3:93:
93:4a:fb:58:09:73:77:f7:fc:38:d8:f1:5c:68:7f:
4c:14:6e:d2:e2:00:38:60:79:01:8e:e6:4e:b2:7e:
c6:fd:57:76:d8:74:ae:79:60:b3:54:3d:40:3f:8b:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:91:43:59:CC:57:47:29:0E:BF:D6:DA:11:7B:1D:F1:CA:15:D5
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:05:38:97:c8:27:70:d8:c8:2f:52:32:69:b1:f5:37:d5:87:
eb:bd:95:0f:ea:df:64:7d:d7:22:82:15:10:c1:03:ee:b7:d7:
f1:c2:72:9e:4a:7f:22:2d:65:98:bc:04:6e:03:86:51:7f:74:
bd:19:7d:eb:0d:5c:36:fe:62:95:c2:af:e4:2b:2a:b7:18:c9:
49:f5:49:eb:81:0b:78:b3:a1:8e:85:96:66:7e:8d:c3:07:d5:
23:aa:b6:7c:65:b7:c9:a9:c4:a6:5f:c5:01:f7:9c:68:46:f2:
bc:94:02:5f:fd:57:7f:39:56:47:69:d6:22:6d:26:b8:5d:15:
a0:2e:f4:78:a1:81:c0:6d:9f:ea:bb:64:dd:2c:ba:4b:03:e6:
6c:4c:25:10:5f:9e:b3:d2:b7:28:fc:16:97:17:da:24:88:5b:
ce:59:25:06:f0:0f:8d:2d:bd:97:07:4d:db:82:b7:7c:a2:02:
3c:f9:ef:3f:95:be:a3:c5:57:0a:00:e5:91:8d:4a:85:e6:e4:
b7:2b:23:01:c2:13:81:2e:37:77:fb:aa:a3:76:8c:20:00:f8:
ae:e1:d2:5f:cf:af:07:77:12:cb:57:d9:2c:a5:e0:82:0a:b2:
8b:a6:00:40:7a:bf:0f:cd:31:8c:6c:fb:6a:5e:ac:80:51:94:
aa:8f:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:31 2026 by rpki-client