
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier: +v99pavQpbO2ze6DDiZMfPNqlZHlTkO2Hdt/p9k8IF8=
Subject key identifier: 2E:2C:43:FA:89:77:71:99:9F:8B:5F:79:3A:BA:42:52:36:67:13:FF
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number: 050C
Signing time: Wed 29 Jul 2026 00:21:45 +0000
Manifest this update: Wed 29 Jul 2026 00:21:44 +0000
Manifest next update: Wed 05 Aug 2026 00:21:44 +0000
Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: /XjiY8tsRm+P+0HOsi9TlS94Cuey76mz5/YRglmDkOo=)
2: D94FB378415811F196DB41B8CB833773.roa (hash: gXPdtCnPPAjwnP0Rk/2BzP0izBu2JHp7rkBkmk8m4yU=)
3: FE761E84630511EC86F9726BC4F9AE02.roa (hash: rgJw06hmsB9fncZWEsFDb5n/GUpL32l6BWCvyNuaqQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Validity
Not Before: Jul 29 00:21:44 2026 GMT
Not After : Aug 5 00:21:44 2026 GMT
Subject: CN=6a694799-ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:65:1f:60:d4:5f:4f:df:13:04:82:0b:97:
f7:d1:bb:bd:53:bb:1c:21:21:dc:76:17:c5:d6:ff:
7a:e1:8b:8f:d2:72:79:47:9c:1c:0f:4b:da:39:24:
56:95:e1:f5:75:c0:5b:de:f7:ec:92:f5:0e:48:24:
24:ba:7c:78:68:7e:f5:b3:45:e5:cd:1d:c3:77:42:
ea:2c:5a:73:f8:d2:17:5e:41:a4:e5:6a:f5:cb:e8:
1b:67:c7:3e:59:d3:dc:b8:5c:6d:13:6b:3b:47:63:
2d:77:03:a8:b3:72:41:6c:61:a0:1e:ca:2e:d7:4c:
78:46:08:7f:15:6a:ef:91:95:17:99:40:9d:e0:d9:
23:e5:80:10:0d:e9:a3:57:1d:97:b9:59:9e:2c:13:
eb:39:56:a8:62:43:b3:82:f9:a2:2a:d0:e0:96:ad:
ab:1a:e0:5c:09:6b:6a:32:0a:af:b8:af:1f:e2:bf:
20:04:bc:9d:48:04:a3:72:8c:2f:da:54:db:af:b7:
bb:3a:75:ad:e5:45:d9:20:85:86:c0:ab:8b:35:ed:
c0:ae:48:56:8e:df:3a:6c:c7:dd:f2:97:36:3b:df:
14:90:37:90:a9:50:d4:f3:c4:b3:4b:f8:dc:11:bb:
8e:14:f9:ac:9a:db:c6:af:12:43:9c:b5:05:f2:7c:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2C:43:FA:89:77:71:99:9F:8B:5F:79:3A:BA:42:52:36:67:13:FF
X509v3 Authority Key Identifier:
keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:e0:86:bb:91:1f:62:6a:1f:a0:e9:26:eb:78:71:52:c3:
06:a3:ac:9b:29:63:c5:81:00:a2:92:c8:13:ad:32:64:d2:0b:
de:1e:89:06:85:27:a5:2c:77:e7:4b:0b:68:61:b5:11:81:0c:
82:15:1b:0c:e6:91:81:e2:78:8a:06:f4:6e:5a:e9:3f:2a:9d:
b5:54:e2:60:d4:c2:bf:c5:fc:55:a1:a4:4c:ac:29:be:01:e2:
96:88:83:73:8f:b9:99:12:b3:c8:cf:a5:4c:e6:81:17:80:c8:
4b:c8:e2:ee:61:b7:fa:30:77:de:84:a0:4a:b2:aa:a9:d7:15:
01:92:85:9d:69:4d:05:b1:be:74:47:f0:2d:e2:11:f5:32:80:
ca:e1:e7:cb:52:f5:e0:71:f3:47:a0:39:47:f1:eb:8e:6f:6b:
96:e0:a5:3b:b1:9c:ac:9b:bd:02:5a:58:3c:2a:be:35:fe:4d:
ff:2c:bd:76:3b:3e:d9:55:42:68:8f:fb:1a:aa:18:28:c0:17:
4f:a0:12:fa:b2:5e:55:e4:69:75:f5:57:bc:e8:00:0c:27:a1:
d5:b7:9f:a3:9d:27:fd:03:b4:3a:16:e1:5c:f2:81:99:7c:6a:
14:99:c9:f0:89:9e:91:14:07:e0:d4:7a:3b:13:e1:a1:fd:8c:
72:49:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:32 2026 by rpki-client