
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File: kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier: aKxerIeHfNCAjIKhEQ4kcuP7Ypo8mlC3rkgRrtwCkls=
Subject key identifier: BE:E6:46:E1:D0:89:02:CB:57:DB:37:A2:5C:A9:A2:63:90:0A:4C:E9
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial: 1976
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number: 1937
Signing time: Tue 28 Jul 2026 16:32:00 +0000
Manifest this update: Tue 28 Jul 2026 16:32:00 +0000
Manifest next update: Tue 04 Aug 2026 16:32:00 +0000
Files and hashes: 1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: nHPE8ehJwBxLmuSooevWfdLUiRd2VLLOGATeER7v0Oc=)
2: FCDF983C4B7411F19F4B0F3BB6833773.roa (hash: 6PczisSqxXOoG4GpKjkiVPbqFf7Z32JMD/yyHEXImvA=)
3: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: EVQn/KNomyKNTdeIsk8hWARt5eleL1I0XO8r52dM3Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6518 (0x1976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Validity
Not Before: Jul 28 16:32:00 2026 GMT
Not After : Aug 4 16:32:00 2026 GMT
Subject: CN=6a68d980-e8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:b2:5c:a8:df:65:4f:e0:fa:47:ac:17:5b:
e8:e6:84:c0:c6:6a:19:0d:81:d5:95:a3:b8:f1:1f:
d1:c4:0e:cb:b7:2b:07:30:44:37:f5:fb:e7:f4:f6:
33:e5:2f:e9:a6:c6:2f:44:e2:73:01:96:6d:82:56:
ee:b5:a9:3c:32:92:f3:fc:7a:2c:ae:8c:f8:75:32:
ff:ad:4b:ac:74:09:13:c9:e9:62:e3:42:a6:ac:21:
10:61:93:50:bd:f9:c0:31:f8:da:cd:75:a9:98:85:
6e:79:12:23:ce:05:03:33:8d:95:fc:3a:44:43:4b:
89:a6:21:7c:3b:70:41:41:2f:15:68:63:7d:66:3e:
4b:5a:91:57:83:3f:87:5d:16:8b:14:3f:33:19:59:
75:bb:d3:8e:cc:ef:dd:d0:e9:3a:55:40:42:8c:93:
43:ea:72:cf:69:66:e9:4d:c6:36:ad:76:46:57:c6:
b2:3e:9c:6c:65:54:ff:f7:4f:6a:43:dc:66:d6:19:
36:c3:f6:b0:97:4f:02:77:a0:18:7e:b8:25:90:25:
87:d0:97:02:d8:29:df:6f:49:b2:4e:28:21:53:e8:
5d:c0:c8:a5:58:e7:f5:42:a3:35:55:25:f2:e0:07:
f8:46:43:a8:de:a6:f1:7a:5f:b4:0d:40:3a:3a:b6:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:46:E1:D0:89:02:CB:57:DB:37:A2:5C:A9:A2:63:90:0A:4C:E9
X509v3 Authority Key Identifier:
keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3c:b8:89:43:ad:d0:b2:3f:f4:60:23:6d:44:cb:1a:de:ed:
1a:db:ea:46:8f:3a:44:f7:24:cf:80:e3:dd:41:dc:6d:50:fe:
fa:e6:ce:58:ff:ad:d7:c7:ba:5c:cb:e9:44:df:5a:57:17:37:
95:17:89:14:86:42:ed:68:ec:cf:00:39:42:f8:eb:72:09:30:
2e:f2:e4:24:86:c9:c8:15:b4:e2:1b:b5:d7:0f:65:72:47:95:
3d:32:18:af:5d:b4:72:f6:d6:54:4b:87:30:28:fc:2a:bf:b4:
ec:11:fd:e1:2c:46:0b:ed:39:4c:7c:09:89:c2:8f:f4:4e:b8:
c4:1e:81:5a:32:40:a1:c3:ae:04:e0:58:5e:20:8b:be:5a:55:
d9:51:27:19:29:96:b0:66:51:1f:7a:c6:ac:69:30:8c:ea:6a:
4d:6f:b7:32:bb:81:9c:df:00:17:bf:a5:30:72:c0:78:36:29:
68:57:0d:29:36:79:7b:7e:7a:da:f3:8d:96:4d:80:6b:50:22:
6f:d9:24:29:ec:bc:16:96:f9:b0:4d:e8:26:73:ce:95:81:1a:
7c:38:46:cd:3f:16:04:97:67:ea:da:d7:4f:1d:71:30:f7:13:
cf:4e:b8:45:3b:8e:91:c3:dd:ae:d0:a1:4f:f1:7d:3b:0b:56:
38:51:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:35 2026 by rpki-client