
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json)
Hash identifier: lWDHl8FMx+ixQcomjNFnBapmXS+BTacyBVNzg+GyNsI=
Subject key identifier: 1F:8B:A4:E2:C3:B3:C9:CD:5C:1E:92:16:E8:CA:3F:5C:F1:C8:BA:FD
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
Manifest number: 021F
Signing time: Mon 27 Jul 2026 04:24:48 +0000
Manifest this update: Mon 27 Jul 2026 04:24:47 +0000
Manifest next update: Mon 03 Aug 2026 04:24:47 +0000
Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: tShfVL+AiHcZCguU4oQbvOYRvv+7P7wuzMePGHJ0Jvs=)
2: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: J1ocAT03CSbRpODB0RRAKFgJGRB6ade57V3/kum0InU=)
3: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: mhjbk4CN2+rPJc7zvgeaO7bX0mHh9qBVgN/f8ar/U0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Validity
Not Before: Jul 27 04:24:47 2026 GMT
Not After : Aug 3 04:24:47 2026 GMT
Subject: CN=6a66dd90-d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:55:93:fd:5e:93:44:26:71:9c:58:5e:0e:
87:a5:91:f8:57:10:08:a3:aa:08:9e:83:25:a3:d7:
08:3a:69:87:f9:31:94:7e:bb:81:4f:e9:6b:8a:dd:
55:00:c9:e4:b8:a0:2a:18:e8:15:2e:87:91:05:84:
06:66:9b:f5:7f:6d:07:cb:3c:5d:0a:9c:fd:36:05:
ea:81:aa:1e:53:3c:da:28:c5:13:a4:61:1d:a5:f7:
35:77:c8:04:e5:a8:6d:0c:c6:2d:6c:2c:a9:27:88:
a7:6b:c4:46:ed:5d:fa:a8:a4:ac:18:28:5a:24:26:
02:70:65:0a:ed:30:5d:ef:81:ba:4f:17:0c:42:a6:
86:8c:dd:37:25:e5:7a:af:ea:6f:e0:9b:64:c2:43:
8a:62:86:d2:e5:5f:9b:45:1b:ad:f6:7c:e1:e4:3a:
50:a7:e5:9e:16:63:00:8e:27:45:27:a2:2e:ad:34:
c1:40:d9:0b:4d:de:12:07:00:f0:61:a3:8d:a9:49:
8b:dd:a6:6c:92:e1:3b:73:ba:1f:9e:4f:27:4a:81:
21:30:f5:9b:84:d7:93:48:b3:4d:c0:b4:30:aa:50:
0c:a7:24:8a:2d:d8:85:d0:46:e7:b3:34:35:29:c7:
ef:14:ef:b8:db:cf:a3:2a:e7:85:7f:c0:3f:23:af:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:A4:E2:C3:B3:C9:CD:5C:1E:92:16:E8:CA:3F:5C:F1:C8:BA:FD
X509v3 Authority Key Identifier:
keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:50:b4:60:b5:d8:77:a5:01:b8:49:9c:fe:b7:1a:90:2d:
84:9a:44:63:54:d6:a6:f8:85:18:d0:f0:8b:0b:49:28:7f:f1:
a8:7e:33:ff:ca:18:a2:87:03:23:9d:5c:cd:4e:ff:2e:57:4b:
42:cf:9c:5f:05:22:ec:cb:5c:b6:d4:92:f8:5d:6a:0a:87:b2:
c0:e8:06:1f:b6:c5:fa:74:ff:e7:c9:1f:6d:dd:44:cc:13:f3:
93:dd:af:4c:96:c0:f8:81:f4:e5:cb:ba:56:a5:22:c0:bf:b6:
68:0e:94:e0:4e:d8:00:f5:2f:50:35:18:cb:16:14:6c:6b:fc:
ca:eb:66:8b:1c:e2:b4:90:81:d2:8f:88:48:3a:4d:ed:63:50:
72:68:30:b4:61:9a:3e:4e:90:7c:2c:e9:90:02:b8:a1:b5:d3:
9c:ad:4f:a9:f0:c8:d8:90:9c:db:9f:19:9b:2e:56:53:48:3b:
ee:d7:61:ba:c7:f8:e1:6a:9d:ef:a0:92:43:3f:82:6b:c5:d6:
61:68:87:39:69:84:3a:ae:c0:45:ff:03:bc:82:5a:f1:91:1b:
29:51:49:ad:07:f2:57:9d:22:5d:de:33:3b:89:7b:6f:cf:a5:
2e:ba:d2:34:90:42:95:db:d0:0a:ef:2f:90:50:59:46:ae:1a:
b3:19:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:23 2026 by rpki-client