
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier: /ep8MPxq5Vq2+JqUs5ImSPLlmMgCW00TOJI9BR+hFOE=
Subject key identifier: 12:15:F3:33:89:00:88:F2:86:9C:80:4A:20:88:79:90:6E:35:7E:3C
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number: 8D
Signing time: Mon 27 Jul 2026 09:43:04 +0000
Manifest this update: Mon 27 Jul 2026 09:43:04 +0000
Manifest next update: Mon 03 Aug 2026 09:43:04 +0000
Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: biDw2xUz2XgxarcX9T6R/ruwEX9kfv7672v7DO2OOcg=)
2: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: ZuP0uWcegjrbhw4CUiK7NSueNS7Vvex1xTz8Rpwula0=)
3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: QR8q+ALVePxBSGtk9U7glKgvftSJmjU/0bwUblLugJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: Jul 27 09:43:04 2026 GMT
Not After : Aug 3 09:43:04 2026 GMT
Subject: CN=6a672828-d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:b7:62:a7:cd:c5:c4:4c:47:bb:9d:71:77:
d0:de:04:31:fd:5c:a4:c4:91:11:78:39:6f:ee:c3:
88:d4:2b:94:21:5c:1f:64:01:5f:4a:7c:65:19:27:
97:b7:3e:c2:ed:fc:7b:ac:4f:4a:89:09:71:51:46:
ea:53:c3:fe:2c:4a:d8:5c:1b:bd:e9:49:a6:e9:2a:
ec:7c:e7:84:41:c2:a9:28:2b:d6:5f:60:e1:75:8a:
29:3d:59:c3:38:71:38:39:0b:f7:e3:e4:18:6c:af:
c9:9d:f6:d1:9d:22:1d:27:f5:9c:9c:31:84:29:45:
6d:a8:17:c3:23:ea:41:0d:86:dd:0a:6f:56:fd:26:
11:ed:d4:73:30:bd:e8:45:53:69:6b:62:b9:99:6c:
24:99:fe:ac:e1:2a:88:fc:8e:34:5e:21:ed:26:b9:
45:42:6b:4f:6e:8d:2e:9f:12:92:91:14:77:45:8b:
d9:6b:70:1e:7b:53:9f:24:da:f0:fb:84:76:31:d3:
94:bc:94:16:c2:2a:fe:b7:65:81:b0:a5:15:48:2b:
49:56:c6:f4:ac:f1:fb:4d:8e:70:11:8d:c3:f5:38:
5b:aa:2b:22:bd:dc:ca:cf:b4:e2:93:fb:4c:56:b2:
c0:ff:29:63:70:a7:09:9b:62:0c:e2:32:1c:5f:1f:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:F3:33:89:00:88:F2:86:9C:80:4A:20:88:79:90:6E:35:7E:3C
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:a9:9e:47:48:82:7c:d3:6d:b2:39:0c:85:f5:0f:21:60:e8:
bc:ec:a8:47:e1:a0:92:7b:1e:09:e9:e3:c6:89:50:96:97:21:
51:86:2a:98:41:e5:10:a5:aa:92:94:b5:fb:fe:3c:94:a0:f6:
27:81:c1:1d:a2:53:86:47:d2:52:51:7c:04:49:74:9c:f4:c5:
92:d3:ea:f6:f5:51:0e:33:da:3a:75:32:e7:34:1a:df:27:04:
f4:7f:8f:7a:f1:90:86:5a:7a:df:95:30:4b:31:6e:46:2d:1f:
64:92:fe:6a:c8:f5:2f:72:b4:12:e4:c6:c1:0d:42:0f:94:c8:
35:bd:61:b0:8c:84:df:94:d8:e2:dc:07:88:b3:f0:2a:ec:d0:
c9:f8:c0:13:08:4c:e1:ac:69:fc:08:3c:82:76:37:75:1e:ee:
a9:bc:23:08:fc:c4:54:e6:fc:5c:d4:f4:75:a8:2b:9f:62:bc:
f1:61:97:70:d5:43:60:09:18:df:28:47:ac:67:3d:e2:23:5c:
87:f8:a0:26:bd:14:9e:dd:89:e9:f7:0a:00:9f:41:d3:7e:3a:
52:54:92:64:12:87:fc:ff:e1:99:25:46:97:08:f6:f1:92:e6:
78:19:8e:e5:31:90:64:7f:ea:b6:69:99:dd:1a:84:7b:64:6c:
ef:81:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:50 2026 by rpki-client