
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json)
Hash identifier: P3hfM+RMH9VxQlL9JM6idyDelikHRyLXlLVs3HU63WU=
Subject key identifier: 6C:AD:7F:DC:4E:46:A8:51:5A:5C:6D:6D:77:56:62:06:F6:14:85:FD
Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
Manifest number: 5C
Signing time: Mon 27 Jul 2026 10:26:22 +0000
Manifest this update: Mon 27 Jul 2026 10:26:22 +0000
Manifest next update: Mon 03 Aug 2026 10:26:22 +0000
Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: dlySwGdh7M2Mnv7BxIqdGoIAbbhuNO6Rxb0C/P9cT4c=)
2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Validity
Not Before: Jul 27 10:26:22 2026 GMT
Not After : Aug 3 10:26:22 2026 GMT
Subject: CN=6a67324e-5027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:31:eb:00:4c:20:ee:17:5f:28:29:17:f6:
02:65:8a:b7:9d:52:bf:cb:d6:1e:9b:4b:91:fb:a2:
41:76:d2:bf:5b:96:3e:a6:33:b1:98:0c:ab:c2:7f:
e7:e6:20:fb:69:ea:28:6f:59:e2:b8:51:1c:11:4e:
f5:68:0a:aa:c2:f8:2d:81:06:82:1f:e4:40:6e:65:
58:f6:cd:36:e1:5c:b9:a2:c7:de:f5:ec:06:f2:fa:
cd:1d:72:fd:16:fd:d7:1f:65:36:2e:05:b4:f5:62:
b2:6a:c1:e2:2a:62:30:ac:6f:5d:46:7e:8d:df:68:
58:70:f3:98:06:46:66:35:f4:cb:32:cb:39:0f:19:
4a:20:cc:ce:be:09:97:86:a7:7a:90:59:48:4f:a3:
b8:d9:51:47:57:7b:fa:af:c7:15:30:1a:6f:34:ab:
5c:69:cb:0e:4b:2c:95:8c:a5:ca:73:e9:8a:b4:f0:
eb:49:03:a3:4f:80:1c:b2:d6:29:6a:fd:16:88:8a:
66:fb:9c:84:e5:cd:05:90:7a:a0:13:3d:e6:39:0c:
77:c9:90:1b:00:0b:21:22:b4:a6:a5:28:2e:c8:de:
68:4b:92:37:f2:02:34:69:04:bc:b8:e4:06:13:70:
65:fa:5f:41:cc:2c:cf:91:2a:26:26:1c:31:8f:78:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AD:7F:DC:4E:46:A8:51:5A:5C:6D:6D:77:56:62:06:F6:14:85:FD
X509v3 Authority Key Identifier:
keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:0c:2d:73:48:0e:ca:bf:51:c5:c5:d4:23:1a:c0:ea:39:
ab:fd:3b:f9:73:f0:46:ec:ba:25:20:46:68:60:1c:f9:35:16:
58:91:93:d8:45:8d:f5:eb:0c:9c:51:b3:d0:a9:a5:2b:32:93:
3a:c7:43:09:da:dd:54:45:22:06:a4:0e:6b:85:4e:88:fb:5e:
44:3a:72:a0:57:4a:18:2a:9c:5b:63:c8:a8:9b:f5:76:83:6b:
40:c3:92:dd:45:c1:2e:3d:bb:ae:d7:5f:d1:cf:3b:91:23:d6:
02:9d:73:42:5b:70:79:f3:39:01:57:03:a1:e1:4c:9f:41:74:
c3:ae:ee:87:5c:db:56:fa:6e:75:26:3a:f2:8c:c6:c0:5d:70:
96:10:81:67:f8:6d:cc:e0:1f:a5:43:63:9f:ac:e5:70:74:8e:
f2:0d:5f:c4:10:d5:b2:e1:20:3e:a3:a8:0b:58:d7:34:7b:8d:
1a:42:41:2d:b5:cc:de:37:6f:08:bc:24:85:c2:ec:f1:81:af:
13:ef:2a:4d:eb:33:2f:3c:43:97:b5:18:1c:9d:a4:dc:31:83:
81:81:7b:ed:fd:b9:50:aa:e1:4d:a9:48:91:52:c7:3a:c3:c3:
a7:94:6d:f7:51:bf:03:be:60:35:c6:fc:94:9b:aa:25:84:57:
27:31:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:46 2026 by rpki-client