
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: HCVwd1Xf11EtEVUKY46sdDOfosU7V7EHqtVSY6/cEAc=
Subject key identifier: 0D:B4:C8:B3:C9:90:E1:23:61:18:EA:E7:71:D1:D0:D2:AD:46:F8:21
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 09F8
Signing time: Tue 28 Jul 2026 20:17:22 +0000
Manifest this update: Tue 28 Jul 2026 20:17:22 +0000
Manifest next update: Tue 04 Aug 2026 20:17:22 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: jgjJI94NToUo4XvAR18+AHRkVGVGWmIIZDinnPB/Hg4=)
2: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
3: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=)
4: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
5: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Jul 28 20:17:22 2026 GMT
Not After : Aug 4 20:17:22 2026 GMT
Subject: CN=6a690e52-fcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:dc:16:a8:c2:bf:c4:d3:49:8d:5b:79:4a:
fd:64:96:4c:c4:b8:16:18:69:56:89:8c:75:30:4a:
c3:92:94:02:ca:ff:58:fd:ae:24:66:2f:78:af:7d:
48:60:d6:34:5d:01:07:0f:96:e3:34:ad:83:73:4b:
40:eb:b2:da:d7:d5:f4:2f:a3:26:b4:af:41:0b:19:
44:9c:00:2a:04:6e:2a:ee:3a:7f:cb:40:e4:07:44:
26:91:6d:d4:a8:d0:97:f5:9a:5d:bd:ac:6d:89:a8:
fe:77:13:70:8d:ee:5b:8f:0f:ab:54:2a:23:7c:ec:
51:7f:cf:8a:61:ba:26:3a:1c:91:bc:14:67:2f:13:
07:eb:7a:0a:ff:54:f7:93:34:fa:e4:bb:62:92:82:
4c:39:de:95:7e:c5:bb:b1:11:24:6d:61:96:1a:04:
da:7d:4b:e2:46:a3:48:1b:06:07:3e:e8:39:f7:19:
21:dc:92:01:70:bb:04:59:11:ef:1c:74:03:c3:aa:
8b:eb:28:aa:73:3e:f4:68:8c:b5:44:36:9c:ec:15:
51:9e:c1:b4:1e:39:cb:8c:3a:7e:03:bc:d1:50:0e:
50:eb:11:c6:f8:24:84:4d:37:e1:b3:8c:3b:80:e3:
19:68:a9:e0:c4:a6:20:7f:ba:a0:c2:a6:1b:a0:b2:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:C8:B3:C9:90:E1:23:61:18:EA:E7:71:D1:D0:D2:AD:46:F8:21
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:38:42:09:c2:67:5f:3f:3b:57:c3:d1:4f:4b:81:60:3e:
e8:87:9c:4d:39:8e:7b:e2:f2:06:bb:9e:80:56:cb:d4:4e:56:
c3:65:16:a3:ca:8d:18:fb:89:49:07:40:3f:0c:89:6d:f3:5b:
d9:2a:72:70:65:b7:6a:1c:fd:07:a4:83:0d:8f:ca:e1:c0:76:
58:a5:48:f8:6c:5a:74:86:df:eb:41:50:2d:59:35:ff:2b:29:
65:c5:df:e2:1b:8d:e7:f9:ae:7c:01:4d:f6:0a:68:de:8c:3b:
55:52:d0:f7:69:8b:6a:16:f9:fe:6e:f3:bd:1e:4b:85:e8:77:
cc:b8:99:ab:94:55:44:9e:02:37:55:d9:26:51:f4:f2:77:f7:
29:ac:79:52:a2:e7:70:f8:e8:7e:7d:b0:50:bf:6d:d5:be:8a:
5b:d4:2f:41:75:68:73:01:0c:e6:16:4a:5b:3a:87:06:26:37:
4b:d8:5b:97:ea:a8:a9:0c:09:15:26:f7:9e:b3:84:c7:03:de:
88:a9:3f:6d:4e:2b:65:7d:f4:c2:a7:f0:2e:41:88:f3:1c:60:
dd:81:78:fc:38:36:2f:2f:e3:9b:83:39:cd:dc:1e:62:4b:08:
de:aa:67:8a:d7:c3:1f:7d:71:3a:4e:c5:2c:d2:87:e9:76:ca:
ae:84:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:12 2026 by rpki-client