
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
File: Swkt8QQoD0W8PyeW9AHMK0xhROk.mft (raw, json)
Hash identifier: 7EfwTCGyej5SMs9P9SX3rcDC/bBF5fLqJkDz9unoW44=
Subject key identifier: 98:9D:2F:4B:75:1A:15:C4:30:81:CF:3A:DB:55:D6:35:53:F1:96:98
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
Manifest number: 0132
Signing time: Mon 27 Jul 2026 07:37:31 +0000
Manifest this update: Mon 27 Jul 2026 07:37:31 +0000
Manifest next update: Mon 03 Aug 2026 07:37:31 +0000
Files and hashes: 1: Swkt8QQoD0W8PyeW9AHMK0xhROk.crl (hash: Ufcyr4oCptIynOVpMsDUtA/38inSy8+Zr7nE3X/PCsU=)
2: E5FC085A843011F0971BDC44C4F9AE02.roa (hash: dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Jul 27 07:37:31 2026 GMT
Not After : Aug 3 07:37:31 2026 GMT
Subject: CN=6a670abb-6afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:ea:ef:73:32:1b:41:58:c4:0d:ca:b6:c1:
cf:91:b8:96:a0:0c:16:fd:8c:33:c2:63:af:90:98:
10:27:6a:47:1c:f8:3b:43:fe:06:c1:18:74:17:7a:
d8:b6:d0:e7:01:a2:f3:e9:19:82:4a:3b:03:fd:61:
07:e6:f1:8c:db:f6:b2:eb:63:3b:09:49:e5:c0:18:
07:b5:9e:0d:cd:c0:d6:75:c1:a0:35:83:18:2a:79:
55:32:9c:cc:1d:d7:d0:34:a3:db:83:54:e4:80:3a:
91:ac:18:e9:c5:89:a3:e8:46:63:e5:9b:43:ad:2c:
45:d8:54:e8:c0:84:ee:b2:d1:4f:65:7f:2f:6c:03:
7f:f5:f3:e8:98:2f:bc:35:35:7d:e8:bc:3d:1e:5c:
a0:16:06:8a:62:9d:3e:97:bc:60:dc:a7:33:23:82:
40:7b:24:56:73:df:2c:08:5f:d4:3b:aa:b6:b5:e2:
91:b9:3f:df:0f:71:6e:fa:79:e8:5d:21:fa:6c:3a:
2f:6a:c9:41:7f:9d:0e:7e:b1:20:5b:78:eb:b3:72:
e8:b1:0d:1d:dc:67:fc:6a:1f:c0:19:a7:46:01:a5:
08:00:68:f8:bd:4f:78:cf:84:03:16:78:73:1b:01:
12:7d:20:ff:53:e5:0c:00:0c:aa:1e:08:eb:96:0c:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:2F:4B:75:1A:15:C4:30:81:CF:3A:DB:55:D6:35:53:F1:96:98
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:dc:68:b0:04:a8:8c:6f:e4:6d:5a:bc:21:38:4a:61:86:
ac:e4:b2:3e:24:18:cb:64:7f:4e:44:17:d0:76:7b:6a:3c:2f:
2d:79:0a:4a:60:e2:f6:a9:37:3f:9a:eb:4e:c8:ab:a7:d0:67:
e4:f8:d5:ee:a9:91:7c:d6:b5:a2:5d:7c:cf:ef:a0:c7:cc:7f:
56:ad:7d:68:18:52:6f:fa:fc:c2:a6:66:93:8a:75:99:73:eb:
82:83:21:3a:f9:58:ae:27:f4:02:c4:9d:4d:04:05:8f:83:64:
8f:3c:89:aa:7e:a4:f2:d4:82:09:ea:09:d5:77:41:9f:cb:ab:
79:08:b1:60:1f:2b:d3:f3:cd:e3:f5:f3:c5:31:1b:66:ab:1e:
4c:21:22:a1:bd:36:ea:fc:ba:84:2c:e2:5e:7e:97:a8:60:54:
75:9d:fe:bb:5c:50:d3:3a:4b:6d:84:27:9b:a2:97:d4:63:9c:
a1:85:47:24:3b:d5:fb:ac:f5:28:b5:2c:37:65:65:22:8c:4d:
f1:11:37:e0:25:20:64:51:75:25:08:2e:e6:b8:f7:d0:a0:30:
a0:f1:91:1f:03:9e:c7:91:f6:6b:8b:c9:ac:ce:46:b3:7a:24:
e6:23:2b:79:2c:9d:a8:bc:4f:5c:12:26:ff:c6:1a:fd:cd:26:
83:8e:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:07 2026 by rpki-client