
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier: zIrrJTuf0ngKRnCsEl6tSRshpPHhXqeeduWOwuXJsas=
Subject key identifier: 2A:4C:29:4A:78:0C:85:23:C0:C5:CA:4C:C3:F7:D8:69:C2:B6:21:42
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0E66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number: 0E55
Signing time: Tue 28 Jul 2026 17:53:54 +0000
Manifest this update: Tue 28 Jul 2026 17:53:53 +0000
Manifest next update: Tue 04 Aug 2026 17:53:53 +0000
Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: 6KOGmg6Tz9rngugVWcRW/MJ1JiIWv0bRfs3EUZm1n0M=)
2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: Oe6fD+duyYHx1i3JnxJrf+wYRUhty7bgyE0KAoS88lo=)
3: 50F4F6B0568811F19D24CC9CA4833773.roa (hash: x7z0A4IAOy3lQhdaI+36pKi+NGAYatEd3lQQF69dAk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: Jul 28 17:53:53 2026 GMT
Not After : Aug 4 17:53:53 2026 GMT
Subject: CN=6a68ecb2-bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:15:ac:2d:0d:40:5e:ff:83:c1:f4:b5:2c:
37:c0:d3:37:97:ba:20:79:d0:4b:3f:a0:53:4b:a3:
e9:b6:97:b9:67:2a:64:17:fb:a4:2f:1e:01:e8:b2:
62:68:2f:cf:1e:91:90:46:75:d5:fa:66:96:93:de:
2e:9f:fd:a1:ba:80:7b:06:8e:0c:6b:fb:0f:21:bd:
e5:43:6a:c0:11:5d:2a:59:67:d4:29:cd:d0:e3:06:
41:f0:e6:b6:08:f5:97:86:a1:fb:c9:85:09:10:5d:
9f:cf:bc:f7:e5:57:97:a0:df:cd:38:ec:13:f8:44:
81:96:d2:79:5e:d5:44:ab:b8:5c:12:3b:09:53:cf:
83:27:1a:7d:71:1f:e6:b2:db:96:6f:0d:af:50:37:
16:11:15:25:d7:ea:8b:34:b9:c1:4c:e0:12:dd:0c:
78:65:51:56:b2:f4:17:e8:c4:9c:57:53:30:49:fd:
6f:24:4c:a2:7c:2d:30:e6:ad:a5:f6:62:07:e8:1f:
3f:3b:6b:82:94:a9:a5:e3:8d:1f:60:ec:65:fd:1f:
45:0b:ab:12:71:92:28:b7:49:95:67:4c:08:63:a2:
b8:33:88:a4:63:d7:9e:48:7c:67:5e:a7:1b:f0:e4:
72:ff:ec:ea:99:f0:d6:7f:2d:18:30:b9:98:fc:9c:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:29:4A:78:0C:85:23:C0:C5:CA:4C:C3:F7:D8:69:C2:B6:21:42
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:af:44:33:a1:0d:08:fb:b1:8e:c7:81:dc:9d:16:49:43:b7:
bf:bf:fc:d4:f0:85:de:f7:2c:84:12:9c:78:30:69:b9:58:4e:
3a:09:8f:a4:cb:95:9b:33:00:58:ba:5a:5f:24:c6:c1:ea:77:
ca:9a:63:50:e1:a7:65:b4:3b:d9:0d:81:a9:ce:05:a5:af:5b:
64:70:b0:6f:4e:b4:69:10:66:1c:e4:44:64:88:85:e4:e1:f4:
b7:1c:2e:79:a5:9c:66:0e:14:ad:cd:8f:0d:41:4b:24:92:47:
8c:96:3c:8d:82:ee:9d:e7:a5:d8:52:b7:c0:28:24:71:0a:b4:
a7:ef:ac:b6:14:6e:89:66:cb:5f:e9:ca:99:dc:84:e4:05:d5:
f8:39:e4:c1:25:cd:6e:c9:97:c8:35:ce:e4:b4:cd:c7:e2:07:
11:c7:ad:9b:07:f9:8e:3f:fa:24:31:01:a8:a8:69:c8:9b:88:
3a:53:1a:4e:e6:f8:79:be:ce:c3:18:dd:f8:73:b5:e6:b7:81:
6a:b0:65:59:b1:cc:ec:51:8b:86:55:1d:fa:84:d0:42:98:b2:
52:42:ee:ed:c3:1f:b5:12:87:9c:87:e1:42:5f:3c:0c:a7:28:
b4:cc:c7:ce:66:7f:10:5a:66:d0:cf:f7:99:a8:d3:6d:b0:67:
b3:13:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:48 2026 by rpki-client