
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier: jlz6dGFFlyYZkoUJ6fJxwJJp6S1SJXAdZ3XkQaM13Mo=
Subject key identifier: B1:A3:95:73:2D:6E:D8:53:F8:F0:85:41:00:5E:E5:9A:FC:10:27:AA
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial: 0691
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number: 0689
Signing time: Tue 28 Jul 2026 23:07:18 +0000
Manifest this update: Tue 28 Jul 2026 23:07:18 +0000
Manifest next update: Tue 04 Aug 2026 23:07:18 +0000
Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: JURjNoD5ed2C76k8HjoCIdN6f/lDB5WYn9qULVsM21c=)
2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Validity
Not Before: Jul 28 23:07:18 2026 GMT
Not After : Aug 4 23:07:18 2026 GMT
Subject: CN=6a693626-29c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:d5:6c:83:ed:17:7b:c3:94:90:58:c9:8a:
e0:e0:c7:b2:40:3d:93:07:6f:f2:af:f7:04:e2:e6:
55:f5:ee:49:d2:16:d3:53:bf:30:4f:9b:c0:57:8a:
d4:68:78:49:0c:3c:7b:2a:92:7b:1c:9f:59:b2:1e:
c7:78:24:01:33:c0:ce:88:b3:f7:da:53:b9:81:78:
9e:32:28:98:9e:15:b4:76:6c:f6:84:74:12:d6:44:
5d:50:73:c5:8f:28:ea:c0:43:a6:b3:e1:3c:47:b9:
c6:c5:0f:ba:e6:2f:3a:97:f5:42:13:b9:73:3d:93:
ad:66:c1:e9:65:d5:03:f6:e5:80:92:43:c8:cc:9f:
6a:07:43:56:05:2c:4d:3b:f4:f3:19:1f:03:8a:b1:
b1:4c:ac:d7:fb:84:f5:7b:d7:65:ca:9f:47:b4:8a:
54:30:a0:32:c9:05:d0:51:a0:05:d6:ba:91:af:80:
6e:e2:aa:85:b7:40:5e:42:23:1b:e0:0c:70:b2:2d:
ce:a9:0a:2e:45:57:38:93:9f:84:45:c8:d9:27:77:
e2:bb:c6:68:7f:1a:44:9f:ca:ef:b8:82:85:77:2d:
30:2b:e0:47:08:0a:74:9f:db:e5:61:51:23:de:89:
5a:41:8c:ed:a1:53:65:2d:eb:93:ff:34:df:1a:b2:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:95:73:2D:6E:D8:53:F8:F0:85:41:00:5E:E5:9A:FC:10:27:AA
X509v3 Authority Key Identifier:
keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5b:74:d8:4d:20:a5:07:af:da:29:d7:00:d7:cb:62:02:d9:
24:85:08:8f:7a:4d:96:7f:30:32:89:ff:42:d8:ae:9e:72:90:
2e:9e:41:3d:cb:2d:19:fd:ea:37:d4:25:d8:e1:cb:c8:62:3d:
6d:91:8c:2f:6c:6c:e3:1e:48:21:93:74:83:74:13:18:dc:bc:
76:3a:8b:3a:64:32:db:41:6d:28:9d:e7:f1:98:9f:08:54:b0:
0e:f6:d9:cf:d2:09:bb:b3:d2:12:60:4c:3c:44:36:55:d3:5c:
fa:59:71:cb:d8:74:e4:6e:22:39:4d:5c:7c:dd:1f:d6:30:4c:
27:40:e1:69:bb:33:9e:32:6b:ca:44:e7:48:eb:2a:f3:ad:db:
8f:18:c5:26:d0:1f:d8:74:f4:3b:99:ca:89:83:00:76:a2:f5:
60:47:e2:6c:a5:ec:ce:b9:89:94:9d:11:a9:db:19:3a:8f:ef:
d7:39:7b:61:40:75:c7:d9:05:4a:c0:de:d5:43:85:08:b7:5f:
cf:20:89:43:60:7f:50:62:ce:c9:ea:d9:4d:19:90:f4:07:7a:
6e:b0:67:f8:79:26:94:b7:da:ea:87:f4:9a:4e:fa:5a:90:18:
53:cc:86:2d:19:5e:4d:64:f8:b5:2e:f1:e4:30:0a:1c:76:b7:
e5:52:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:13 2026 by rpki-client