
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier: geCFsFbOUEn5xFwnjskqwZTxENJEgIpSs7SmwlrBO2E=
Subject key identifier: 8D:74:68:A7:A8:C5:B0:03:AB:8D:AD:C7:EB:5B:8B:14:A2:96:C8:7E
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number: 0247
Signing time: Mon 27 Jul 2026 03:56:19 +0000
Manifest this update: Mon 27 Jul 2026 03:56:19 +0000
Manifest next update: Mon 03 Aug 2026 03:56:19 +0000
Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: nPYTIBSMZH01LVvZl9tyO8TY+VOAmUSFrZZxr6J/1tg=)
2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: E1zUkI9TO0W/ED1pfVMhvoec/8ENjTvyLHbMDkKK8Fw=)
3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: Ti9PlBRZuakBk1+DVxnhOg3U/C4AJTP/aQFIX6lbwWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Validity
Not Before: Jul 27 03:56:19 2026 GMT
Not After : Aug 3 03:56:19 2026 GMT
Subject: CN=6a66d6e3-7249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:70:55:65:a1:d0:05:94:c4:8e:68:38:69:
9c:b1:c9:0f:d8:9e:ba:79:e7:3d:b7:22:ba:f9:e4:
1d:5d:a3:65:e9:fa:4b:17:2d:7d:c8:50:25:80:7e:
26:bf:69:70:71:2d:74:ef:db:90:73:b6:a2:35:47:
e3:0f:c2:0b:8a:a1:46:70:49:1b:50:59:4a:92:f1:
40:4a:8c:81:14:91:6e:d1:66:21:07:16:0d:76:b2:
b2:07:78:67:60:44:9c:d6:3b:10:b3:3e:bf:a0:e8:
96:4f:7b:79:c6:b5:8c:77:41:ba:f3:47:80:9e:f5:
f1:df:b7:d2:79:3f:b8:15:3c:59:a4:60:97:0b:04:
1a:70:fe:ae:2b:99:89:cc:6d:08:6c:98:a7:0f:86:
3a:45:d3:5b:66:ef:c8:16:86:ff:56:8f:06:db:68:
e5:0b:13:a2:5f:85:bd:61:89:41:f2:6a:af:48:ab:
81:e6:39:9d:23:e4:97:21:e6:c5:17:e3:36:aa:f7:
2d:76:85:0d:9b:e6:6a:c4:2f:1b:8e:c8:2a:8e:48:
de:64:1e:e9:d7:7a:0a:7e:df:a3:dd:5b:83:c8:df:
f4:a7:49:33:15:b2:49:27:94:ef:70:29:f0:90:03:
af:80:b3:ba:81:f1:8d:cf:0d:96:40:87:39:89:13:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:68:A7:A8:C5:B0:03:AB:8D:AD:C7:EB:5B:8B:14:A2:96:C8:7E
X509v3 Authority Key Identifier:
keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6f:9c:bf:07:ce:6e:81:a9:cf:36:d3:4d:65:25:9b:24:f1:
0c:15:ee:43:1f:f2:b2:f1:88:9a:6d:a3:f6:e9:e6:bb:4f:b0:
2e:4b:08:54:fe:35:24:d0:c4:c1:d4:ba:12:ae:68:93:a3:60:
df:6c:3c:e3:82:e1:c6:62:48:1c:28:db:59:8b:24:b0:e4:f9:
4f:2e:29:66:77:44:14:de:b4:62:2b:f9:0e:1a:82:e5:3e:b0:
76:b9:03:76:30:f3:77:b6:d2:dd:2d:85:a6:c3:06:f7:d4:a1:
c6:22:f9:a7:8e:ac:06:c9:be:31:f1:82:4d:b7:af:c3:f3:bc:
27:9f:e5:01:7d:a9:7f:f0:21:ca:ff:d0:e0:03:d3:16:c4:d9:
f8:f1:de:87:e4:e7:9c:d7:96:aa:cc:08:8e:85:40:1c:42:c4:
33:a1:17:07:4a:29:5d:d2:97:8f:03:1c:78:02:80:8d:0f:d3:
e2:f2:3a:77:a0:ff:cf:c9:42:5d:a7:30:ec:87:27:c3:a1:63:
d5:90:1b:d1:e7:f1:9e:ac:49:cd:49:5a:56:4d:b4:d7:9f:11:
c7:12:40:99:60:1e:21:45:71:e2:a2:5e:e0:91:e5:f6:96:a5:
52:04:7f:90:c5:e8:32:da:52:99:55:d4:40:27:f0:f2:52:5a:
d0:69:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:16 2026 by rpki-client