
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: /loCPSmIymL76P9MQNO/h4jbLN8fmFauCJpJgStgO+4=
Subject key identifier: 6A:31:6F:43:6D:F4:5D:2F:64:C4:DF:7E:0B:BC:6D:26:4F:04:4D:73
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 0901
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 08EF
Signing time: Tue 28 Jul 2026 20:41:42 +0000
Manifest this update: Tue 28 Jul 2026 20:41:41 +0000
Manifest next update: Tue 04 Aug 2026 20:41:41 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: wOUuKjHx79FzP6iGHsU++jCMrNhwP1ly4GmOaApBKKo=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Jul 28 20:41:41 2026 GMT
Not After : Aug 4 20:41:41 2026 GMT
Subject: CN=6a691406-0f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:7a:3e:da:22:36:ec:f1:53:9b:a1:08:38:
eb:97:d0:60:06:ac:a9:77:b0:d7:61:99:62:27:3a:
29:f6:7c:34:ef:1f:ba:7f:4d:7e:31:9e:9c:ab:3d:
ee:3b:36:45:da:4d:8e:f6:a6:8d:24:51:24:1c:97:
59:b8:c3:70:78:62:35:a6:8c:d5:37:2c:97:31:a3:
72:e2:75:37:f2:cd:29:cf:f3:aa:be:ba:31:43:04:
59:19:56:08:61:89:3d:7c:57:4e:fe:5c:b1:01:ca:
69:01:89:bd:f8:0a:de:fc:60:97:3d:8f:78:e6:40:
08:33:a5:b6:c1:8e:eb:bd:71:71:a6:e7:d2:9c:ee:
b0:29:74:5f:fb:1e:70:72:c4:51:e5:95:ca:0d:27:
8b:d7:1a:0d:67:f8:c0:7e:5a:26:92:26:24:26:95:
b5:7a:42:5e:2b:72:a8:cf:1b:01:b8:81:61:28:a3:
14:2b:e5:f4:67:e6:1a:56:19:0d:d8:62:33:55:05:
a1:85:cd:44:ba:9f:ea:2f:35:f4:7b:e5:8d:88:46:
46:7f:a9:08:aa:61:12:e6:5a:54:28:6f:96:cb:60:
fd:97:0d:13:92:c8:5b:ca:48:b0:9b:92:57:a1:ea:
b7:f1:27:b7:ca:c0:bd:10:c6:64:5a:27:70:ce:71:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:6F:43:6D:F4:5D:2F:64:C4:DF:7E:0B:BC:6D:26:4F:04:4D:73
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a7:bb:51:f5:ec:03:c2:70:11:e1:00:1d:35:cb:e8:18:d8:
94:d6:79:7d:6e:fa:eb:69:c3:2d:81:3f:fb:30:79:00:17:95:
6c:b3:a2:cf:2c:64:f9:3e:32:b3:2c:cd:7c:56:25:85:8a:1c:
c0:38:d7:2a:91:88:f8:3d:62:04:23:40:3c:2f:80:78:f0:f9:
f1:bd:eb:f5:3b:ea:1a:62:80:11:90:91:74:4f:d0:67:33:4c:
ee:fe:46:5a:e9:a3:aa:b3:81:c3:2c:4d:e6:ff:79:91:9f:67:
b1:51:21:84:d0:98:8c:b2:8c:b9:3b:c0:1b:f2:c3:05:17:e0:
fe:9e:58:b7:b7:80:c9:26:20:80:bb:94:91:71:5c:7b:6c:aa:
68:11:f6:c6:82:16:bc:87:0d:35:c9:cd:da:73:3e:dc:0a:eb:
32:95:9a:08:42:ef:12:12:9a:9d:55:48:86:2e:45:cf:16:16:
f9:6a:27:f5:f7:5d:a2:dc:cb:fb:b1:d8:f7:62:60:80:ee:09:
10:a3:c4:e8:b2:24:3f:9a:ce:1c:cb:fa:a6:59:26:d3:ec:ed:
f9:d7:73:13:be:13:1f:12:40:06:67:98:89:3a:3e:23:37:4f:
eb:1f:26:fd:ee:9c:22:2e:7e:b4:d1:27:83:1d:f9:46:ef:a9:
06:98:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:32 2026 by rpki-client