
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: fBWxLqoK5OVniPq8oSg0RCL3er9Qd/WOYZqowqW5CFc=
Subject key identifier: 42:6C:43:D9:49:76:6D:95:E5:02:CC:76:DE:BF:FE:F7:4C:98:5D:91
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0A4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 09D3
Signing time: Tue 28 Jul 2026 20:28:35 +0000
Manifest this update: Tue 28 Jul 2026 20:28:34 +0000
Manifest next update: Tue 04 Aug 2026 20:28:34 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: YbdU1yxfvB+qRjWJozSBb6SrLiv1pevYMT9Dw38HLzc=)
2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=)
3: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=)
4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=)
5: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=)
6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=)
7: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=)
8: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Jul 28 20:28:34 2026 GMT
Not After : Aug 4 20:28:34 2026 GMT
Subject: CN=6a6910f3-c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:b3:e6:2c:2e:5b:dd:06:47:40:71:2f:99:
ee:ce:2d:64:69:39:dd:a2:62:24:ba:3a:5c:80:c8:
71:45:b5:b4:a9:5e:c6:af:ed:bb:ea:68:73:54:55:
70:19:2f:75:6d:f3:d1:70:0a:7e:10:52:31:6f:91:
92:db:9d:cc:3e:9b:a5:fe:01:41:c9:63:94:d0:af:
de:08:c4:4e:89:41:0d:d2:bf:1b:e9:95:4f:2e:93:
c2:78:66:62:d7:48:1a:2b:28:89:7c:ed:a8:00:57:
40:46:c0:e4:66:a9:ee:f7:83:f7:1e:84:d6:a5:35:
50:c4:30:86:42:b2:db:c3:c4:fd:f5:08:b8:5f:b6:
23:fe:47:89:9a:cf:63:1e:b5:7f:f1:d5:09:77:0a:
fd:71:6d:63:98:d3:bf:94:b4:35:fd:ba:24:db:8c:
49:01:e6:8c:bf:81:36:2d:be:01:b9:07:07:89:e6:
70:58:7f:22:0f:d4:3b:4f:3c:9a:a9:bc:06:47:3d:
30:a6:9a:bc:13:0a:1c:08:2f:d2:cf:1e:1e:25:b2:
4c:85:04:02:e4:32:a1:27:98:68:e1:50:83:9c:16:
2e:31:93:be:bb:1f:0a:59:56:52:26:48:06:b4:5f:
98:32:77:74:3c:e9:c2:08:0c:c5:a6:fd:80:57:59:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6C:43:D9:49:76:6D:95:E5:02:CC:76:DE:BF:FE:F7:4C:98:5D:91
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:93:19:a3:f0:0b:a5:08:30:20:59:cd:ba:e2:23:1c:3b:3b:
92:72:da:bf:09:f6:6c:65:55:6e:79:da:99:e6:31:9d:f0:db:
9b:eb:09:34:66:c0:ed:f6:10:c4:7a:b5:a4:dc:b8:0a:41:38:
c1:eb:68:c6:b7:32:84:21:6f:a1:14:5f:f7:cf:31:f5:95:0f:
68:10:18:b8:ef:3d:8c:3d:51:46:59:eb:36:7c:5c:ea:38:c5:
0f:c4:5a:9b:c9:1f:81:7f:e8:04:96:b6:1a:54:cb:5f:80:43:
69:8e:c4:8d:f6:00:47:b4:18:65:58:e9:c0:ed:7e:f3:b2:c6:
3d:55:e1:58:62:49:c1:dc:0c:de:99:68:a6:ea:44:5e:20:61:
da:81:cd:c2:c9:a5:22:0a:02:e6:79:de:f9:17:cd:7c:5f:a6:
14:bb:37:aa:27:78:19:a9:34:df:03:b3:1f:b8:55:c3:5d:6e:
78:70:37:a9:e9:c7:8f:d9:ed:29:ff:db:22:c3:86:03:d5:45:
cb:a9:6b:d0:39:2d:56:5e:d7:d8:7b:f7:f1:e6:90:f6:ad:75:
3f:d4:00:40:27:c1:70:01:92:7b:7b:97:47:c6:d6:d1:3b:68:
3f:5d:c6:a4:a5:c1:6f:1d:7b:cd:f8:c0:3f:fa:f9:18:9b:31:
cb:f4:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:49 2026 by rpki-client