
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json)
Hash identifier: p5AL0zMczr/GMdyhqnN+uajaeeQitz3WjZHzk9mATlU=
Subject key identifier: 4F:EC:C0:C1:88:1B:58:55:5F:14:C0:C7:92:43:C0:B0:09:79:4D:DD
Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Certificate serial: 03AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
Manifest number: 039A
Signing time: Mon 27 Jul 2026 01:50:28 +0000
Manifest this update: Mon 27 Jul 2026 01:50:28 +0000
Manifest next update: Mon 03 Aug 2026 01:50:28 +0000
Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: iiSmQDzOINTMKPhFXVvTC3xmKVxfLb8tc2wIc9CZkSU=)
2: 54EC15820FED11F18E9367ED083D8C67.roa (hash: kTSpS6sGcw85T0kUTUglByhkD7FGKjkERY57VqRm12k=)
3: FF738C40C00311F08A308247C4F9AE02.roa (hash: WwWfN8n49QXtx18GkQBNYqXSvXrwLDxQrddpbMjZfyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Validity
Not Before: Jul 27 01:50:28 2026 GMT
Not After : Aug 3 01:50:28 2026 GMT
Subject: CN=6a66b964-f317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:d6:94:d9:02:ab:f9:a5:9e:d3:cf:1b:c2:
b1:ef:15:53:84:47:eb:8f:c1:bf:05:ed:e0:1b:f4:
95:47:86:0b:0e:26:ab:01:c2:03:b9:cb:89:77:b7:
6a:ce:a8:cb:c1:47:fe:e5:f4:85:37:c6:6b:76:a3:
dc:b4:cd:0d:b1:ac:1e:d5:55:03:50:38:6d:d6:43:
1c:1e:47:77:28:1a:1b:5d:c5:37:98:57:69:78:37:
5a:a4:4f:ec:3b:f7:07:24:ad:e2:4a:b2:c6:f7:48:
69:ca:b3:b6:f4:82:34:99:fd:f5:5c:9d:89:1c:a4:
26:9f:cd:bb:ce:5f:7e:2e:e9:01:f5:01:34:92:f6:
e5:0a:20:6b:70:de:e4:0c:46:a6:ad:a1:38:7e:ad:
0a:ac:f4:7b:2e:c1:24:9b:42:3a:f3:f3:66:b0:c0:
ff:47:75:b0:f5:32:63:9e:ae:d8:e3:7a:b7:0d:f7:
d7:51:fd:13:a6:15:ab:1e:95:36:89:44:2c:04:58:
0a:9f:b6:78:c0:b2:f0:28:27:35:f2:d4:24:d1:c2:
61:a8:60:a4:0e:51:ee:06:99:b0:a6:18:53:c7:a1:
06:4b:61:b7:91:ca:ea:69:0f:1c:f4:57:13:1c:7f:
03:2f:02:c8:0d:2b:83:c3:5e:29:88:98:7b:09:97:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:C0:C1:88:1B:58:55:5F:14:C0:C7:92:43:C0:B0:09:79:4D:DD
X509v3 Authority Key Identifier:
keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:61:bf:13:2c:04:19:97:ae:a2:5c:0e:28:3a:19:94:95:
2d:e2:b3:5e:df:c8:b7:6c:62:d7:ee:62:8d:76:0c:7d:1d:89:
d8:84:f4:39:25:a0:22:6f:fd:09:a8:b5:e4:6e:4b:27:ba:6d:
60:c8:71:38:1f:07:ff:7b:6c:ef:d3:55:99:f8:c2:75:8f:26:
39:5e:4a:9e:13:88:dc:de:1a:a3:a3:7a:f9:c9:d6:89:40:10:
5c:b3:7d:b5:03:9a:4e:58:dd:9b:70:6c:09:c3:91:5b:80:1c:
e3:3e:99:54:fd:a2:f0:94:03:b6:d2:eb:67:88:36:e1:73:53:
b8:5c:b6:79:41:a8:84:bb:99:1a:1f:68:a7:8c:83:ec:9e:ca:
97:6b:83:d3:85:95:83:26:78:91:8e:a4:08:92:28:1b:31:bd:
2f:cf:16:57:95:43:eb:58:67:0f:f0:a2:b6:d1:91:9a:25:2d:
36:89:b8:b6:1c:af:d7:94:82:af:5d:61:93:eb:62:6d:d4:f2:
ed:4b:0c:b1:7f:ed:e4:e3:4d:cb:fa:35:fa:c8:46:63:c4:73:
16:75:72:50:d3:8c:72:64:8f:76:9b:d7:cb:f2:19:88:37:d2:
cc:aa:96:a0:d4:74:3f:d4:55:19:a6:97:04:7f:16:c9:bc:11:
21:4f:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:42 2026 by rpki-client