
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json)
Hash identifier: 29bH/jeeknSvW2ofqFj/VS3zrSxSBTVWuqOs5Jg+btk=
Subject key identifier: 49:26:05:6B:03:20:60:0C:CC:A4:FE:05:DF:7E:22:31:60:CE:2D:12
Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
Manifest number: D6
Signing time: Wed 29 Jul 2026 08:22:22 +0000
Manifest this update: Wed 29 Jul 2026 08:22:22 +0000
Manifest next update: Wed 05 Aug 2026 08:22:22 +0000
Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: 64B0e8vTj3IJxzo+bVyJA1P4t46Cm9HlIDE4fbsdoio=)
2: C4BE139C1AE211F1803B92B5413D8C67.roa (hash: VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=)
3: 14201780319711F18CC67F1EAC833773.roa (hash: rmQmGHW+PcZ7eabQimG8Wo2e37zYIDwJm/8G4jj1kT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Validity
Not Before: Jul 29 08:22:22 2026 GMT
Not After : Aug 5 08:22:22 2026 GMT
Subject: CN=6a69b83e-df87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:9e:f8:30:b3:08:7d:7d:20:82:d8:8a:58:
0e:ea:33:0d:e6:aa:a4:ae:be:7f:9e:80:ad:85:db:
b2:16:08:4b:ba:73:b7:2c:98:3b:f0:8a:f0:7f:ff:
55:57:64:79:0b:cc:3d:1a:38:5f:1e:04:19:65:e0:
28:13:2c:e1:ce:bf:e7:39:64:d0:75:0d:d6:36:10:
a9:18:17:6c:25:ef:75:49:a3:3c:4c:0d:03:99:4a:
55:76:b4:80:0b:2f:6d:4b:fc:bb:b9:ce:9f:91:85:
fc:94:2e:f8:4b:41:11:24:a8:de:04:1a:ee:32:1a:
d6:64:37:28:f9:11:e0:9b:8d:b0:2c:bb:08:01:76:
29:02:70:99:fd:44:28:c3:f7:49:25:fc:66:5c:ac:
d5:9e:75:c7:03:a8:c6:78:af:4b:73:3e:f3:57:c5:
a5:6c:e6:35:7b:3a:cf:fe:28:50:b4:0a:56:14:70:
82:d7:5e:98:c6:49:1f:8e:96:89:68:5f:75:24:b6:
5d:c5:09:dd:0c:fb:e4:cd:70:7a:0e:d3:83:b3:4b:
f5:24:dc:61:29:1c:e1:63:34:04:b7:57:3d:1a:42:
28:90:c3:38:ab:3b:99:fa:aa:61:c8:0e:b5:0c:52:
0f:7b:3c:55:97:b9:39:e2:87:7b:e5:67:96:bf:b1:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:05:6B:03:20:60:0C:CC:A4:FE:05:DF:7E:22:31:60:CE:2D:12
X509v3 Authority Key Identifier:
keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:c7:1f:a7:80:da:e8:47:04:10:07:42:3b:ea:05:6f:1a:
d2:31:72:a6:62:27:f8:76:e4:17:fc:9b:a9:e7:47:44:93:12:
48:60:4c:68:16:96:fb:2d:f4:64:fa:b0:90:b4:32:af:eb:d1:
36:33:e4:ac:d5:1d:42:58:cf:e7:1a:b2:ef:93:ae:18:34:c3:
ab:5a:56:6d:dd:44:c3:7c:73:b1:80:52:7e:b8:d4:b6:17:75:
8a:71:2f:9c:40:10:a9:4a:14:93:4b:2d:4a:c6:72:22:60:c2:
13:4f:55:8c:23:b5:10:08:fa:aa:b5:25:5e:7c:a4:e9:cd:c9:
c2:15:31:10:bd:dd:1a:58:75:78:1f:48:15:7d:3d:e5:c0:bf:
e8:ad:01:e8:9c:84:6b:e0:1f:fc:2e:1d:05:bd:f8:fa:b5:86:
b7:5b:0f:82:e9:3d:6b:74:66:a6:bf:9c:95:38:a7:d8:41:72:
78:0c:6b:be:87:b4:93:dc:a1:11:48:74:43:a5:f3:8f:b8:44:
74:7b:6f:9f:f1:bc:15:15:cd:84:a3:79:e3:6a:4f:ec:ce:5e:
41:c1:83:21:8f:6e:c7:85:1e:b9:58:f4:5f:49:8f:7a:75:44:
fb:19:99:51:81:33:19:5d:60:ac:43:73:41:de:45:c6:c9:9f:
57:4d:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:11 2026 by rpki-client