
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier: na9yudNY/Oz0mMEZEnSJ/cyAtU7nB9FVdgdjvRVmU2g=
Subject key identifier: 42:B5:E2:17:42:0E:67:55:D7:00:88:CD:DD:2E:BC:3B:41:37:82:B8
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number: 118F
Signing time: Sun 26 Jul 2026 17:45:09 +0000
Manifest this update: Sun 26 Jul 2026 17:45:08 +0000
Manifest next update: Sun 02 Aug 2026 17:45:08 +0000
Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: gcySQCsXqdtPq3mm0MSbCJJiqBTr6Sll/izkp67MV+8=)
2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: FdVP/EbnoWbW+SwswO9IBvz4Tx/t0gGhpNr1OdlhBmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 17:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Validity
Not Before: Jul 26 17:45:08 2026 GMT
Not After : Aug 2 17:45:08 2026 GMT
Subject: CN=6a6647a5-1964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:4c:64:25:c1:a1:23:ec:6e:3d:53:e9:bf:
34:ac:a5:0e:1a:3c:47:6c:91:15:cb:e6:52:7a:6a:
48:6b:ed:56:98:1e:c8:33:70:1e:76:81:30:38:2f:
16:22:1d:65:42:3b:23:2e:a3:02:38:45:a3:ae:61:
13:5b:8a:dd:0b:42:07:e2:ec:00:30:df:52:e8:65:
b3:72:40:6c:10:85:ad:36:06:d2:5d:a4:f9:6d:b4:
8f:b0:23:1b:6b:ed:ae:18:d9:54:c1:38:43:6d:17:
a3:b3:5c:96:19:ae:27:db:dc:19:2d:34:82:b2:45:
8f:38:ae:f0:f8:9d:11:ca:69:ab:4a:fa:2c:d5:0a:
07:a0:b6:34:04:f7:c8:f7:72:34:11:90:ca:b4:80:
7d:ad:ea:02:2b:ca:b2:14:09:f8:3e:0e:7e:94:14:
fd:f7:b6:40:b4:43:e9:05:d3:3e:3a:4e:bd:35:48:
5a:2d:38:b9:0e:e2:50:8d:99:16:d0:3d:9e:15:99:
6e:fe:c5:4b:74:70:16:e7:e4:40:3b:26:f3:66:0c:
a7:f9:2b:5e:30:a1:ce:80:4a:e3:05:87:3f:9b:30:
a6:91:8d:27:64:a0:4c:65:1b:c1:75:08:5c:35:40:
aa:53:e9:46:25:f6:0b:b4:9f:69:0b:6c:77:40:c6:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:E2:17:42:0E:67:55:D7:00:88:CD:DD:2E:BC:3B:41:37:82:B8
X509v3 Authority Key Identifier:
keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:bd:41:84:ac:03:09:62:5b:f7:53:95:dd:96:4b:9c:ce:
dc:04:a3:57:f2:44:24:8d:17:b5:9f:e9:e5:c5:a1:62:3d:3f:
fa:ac:69:c7:4e:89:4b:ac:64:13:55:dd:58:35:34:2e:e5:8d:
06:8c:b5:53:fd:33:6c:75:cb:52:cb:e7:4a:00:95:27:c3:cc:
c1:ad:76:ee:bc:b7:97:9e:a9:a3:b5:d3:7d:01:59:92:77:4b:
9e:55:f7:99:89:19:fe:d0:e6:dc:fa:1f:17:93:d6:f6:cf:97:
ee:53:03:34:9a:3d:a7:be:3f:13:0c:fd:e9:bb:27:69:79:06:
07:d9:b0:b8:b0:0e:37:a5:6b:6d:16:a7:4f:0f:d3:54:4c:8a:
9d:db:47:d2:aa:35:6b:9d:c6:d1:bc:d3:18:cd:47:80:90:d6:
0b:9c:35:4b:a0:3c:5e:74:2a:83:91:a6:aa:13:4b:24:7b:1d:
58:4f:d4:b3:88:0b:c0:82:7a:ea:aa:2a:40:1f:eb:0f:03:36:
ab:bd:64:73:a3:66:a7:cd:b5:02:53:59:d8:59:83:9e:7f:04:
36:55:76:32:b2:80:7a:e1:04:90:6f:4f:1d:de:9b:27:a1:90:
c1:4f:e4:2c:86:2b:97:89:92:2e:0f:db:c7:08:5d:dd:c2:17:
dc:5a:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:43 2026 by rpki-client