
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File: N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier: HniJ9ZptZOe0Z75Saw7CGoufMfi8lPGBnID5RbVa4pg=
Subject key identifier: E7:65:7A:3C:AE:B9:B1:8C:D1:E9:06:04:6F:AE:73:96:8B:D5:8A:25
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0F01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number: 0EBD
Signing time: Tue 28 Jul 2026 17:51:23 +0000
Manifest this update: Tue 28 Jul 2026 17:51:23 +0000
Manifest next update: Tue 04 Aug 2026 17:51:23 +0000
Files and hashes: 1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: EWIaJ7adXBCGRBjkwmPT4qDpA8dmOUR6g7TdZmwGFXU=)
2: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: aVXIUJfK9FK08WHFOHOccPnDr/uBpaJzWm5gZ9bFvys=)
3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: OesppDhUnoiJ2S/fvZH2VYA9rOlCiKhEiOUHt/iQgs4=)
4: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: Fqueet+ndFYhrCwbTP27Ycb9WerbdnToSLajJOuPvMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3841 (0xf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Jul 28 17:51:23 2026 GMT
Not After : Aug 4 17:51:23 2026 GMT
Subject: CN=6a68ec1b-22ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:18:1a:9f:80:35:b8:38:dd:fc:36:1a:4c:
81:a7:7e:10:a7:aa:93:8e:34:ca:fa:c9:2c:b4:6d:
e1:05:a5:88:76:2b:ca:ba:56:8c:83:c7:3d:51:73:
a6:5e:6c:b1:8c:03:17:ec:bb:90:b4:e8:ef:b4:b2:
96:3d:17:db:b0:57:8e:a9:90:7b:ce:d2:5a:41:8e:
69:e3:5e:86:69:ef:bd:b3:25:bb:04:d9:ba:6b:a9:
95:97:0a:ba:aa:81:d1:f0:a9:a2:f0:e4:aa:f2:4c:
a5:7a:cf:71:ba:7f:72:e9:63:a6:0f:6d:96:f7:de:
b3:32:9e:b4:91:61:07:2d:eb:8e:ec:06:c4:71:a2:
13:35:4b:9e:26:63:2e:a5:1a:e0:ae:c3:6b:3b:02:
6b:ca:c9:2f:98:9b:ec:a4:e1:3b:04:48:e5:26:f0:
e7:28:f8:0e:ea:20:11:37:2c:00:e0:a2:07:8d:a5:
d8:f2:4a:e4:5e:47:ec:22:13:2d:43:7e:19:31:a7:
b6:c9:9d:70:a2:bb:30:44:a9:d0:cd:51:b3:72:23:
99:c7:05:49:03:ad:22:c4:cd:3b:15:f0:d9:bb:ef:
bb:be:cd:2e:0b:17:65:0e:40:b9:1d:f8:3e:94:9f:
18:af:64:77:0c:ff:bc:6a:92:d8:5b:45:3d:8a:c5:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:7A:3C:AE:B9:B1:8C:D1:E9:06:04:6F:AE:73:96:8B:D5:8A:25
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:2f:b2:ff:cb:14:e8:41:5c:12:f4:a3:63:21:35:89:21:
08:2b:9e:e6:0a:77:b3:fe:d5:e5:71:78:5a:fe:47:21:57:33:
cb:be:d1:8d:69:c7:cd:6d:19:2a:65:83:19:62:ce:f3:06:67:
7f:69:5e:fc:72:f9:1b:2c:b6:2b:16:8f:b3:8b:51:02:bf:73:
ff:2c:bb:a4:54:ac:8b:99:41:25:b4:fb:12:a0:9d:29:30:40:
94:fe:98:e3:d0:b5:82:72:d4:51:53:e2:87:5e:9b:27:16:08:
f2:61:32:97:c0:55:22:98:26:30:a6:00:b4:db:87:d8:46:70:
05:9e:72:81:3b:aa:74:44:90:ef:fb:3f:81:a8:c8:c2:3d:1a:
31:68:e9:40:25:f0:b9:1e:4e:89:e8:4e:14:c0:d3:a2:0d:74:
d7:ee:d5:b7:d4:c8:41:62:28:d3:06:eb:76:f3:98:9a:a1:4b:
cf:f9:58:ae:63:86:13:d2:e1:b5:f0:0e:25:a8:07:08:c7:71:
61:8a:43:8e:c1:12:d4:af:97:81:63:f2:8c:11:7d:46:3e:eb:
0d:bb:c9:9b:68:85:da:e5:c6:85:73:4e:e9:8d:2f:26:91:37:
c0:40:dd:07:ee:62:39:5e:b7:47:12:e6:d4:d3:f4:95:06:01:
88:4a:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:56 2026 by rpki-client