
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: sNOEFUepfnY/54zzI5qYsamxDLU9Kwg9mWHAqrz7wwM=
Subject key identifier: 9D:D6:9E:BC:93:81:8D:45:AA:E9:36:7B:96:C0:C6:A6:68:4B:E6:18
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 08B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 089C
Signing time: Sun 26 Jul 2026 21:15:19 +0000
Manifest this update: Sun 26 Jul 2026 21:15:19 +0000
Manifest next update: Sun 02 Aug 2026 21:15:19 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: U/YINoQhi1jk3R0vZMZumxVulqoaw6V6Q+qtjXDR48s=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Jul 26 21:15:19 2026 GMT
Not After : Aug 2 21:15:19 2026 GMT
Subject: CN=6a6678e7-0703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:d9:73:0e:bf:0a:f5:0b:dd:de:3e:81:ee:
ca:17:55:0b:b3:1d:bc:24:48:e0:72:85:09:b3:27:
39:e9:d6:33:1b:5a:7f:7f:93:b6:d4:91:24:f4:23:
e4:87:d2:80:4b:64:c2:58:00:be:f2:70:c7:ed:05:
03:e5:8c:44:4a:89:ab:d5:cc:b8:12:3e:ac:0f:0c:
ca:38:c0:ba:a1:ba:8e:00:27:4c:fc:6f:33:4c:71:
a6:06:43:91:fb:1e:03:b2:3e:b5:af:f1:f7:f4:7a:
35:98:d8:c1:53:ae:a5:f1:12:c4:20:be:56:59:89:
15:d3:4b:14:56:82:43:6d:bf:13:ba:30:2c:00:0e:
c8:34:e9:f0:cd:34:f9:84:86:e8:0d:82:53:cd:30:
45:d7:6d:77:08:a0:83:60:02:ca:ee:02:fe:fb:2e:
3a:60:79:f8:32:95:eb:0c:36:a8:e0:2c:73:17:f0:
cf:59:02:3f:d4:e9:50:b8:f5:d4:ee:db:07:b1:08:
3a:8e:fe:8e:90:3d:fe:4e:32:b4:d7:1a:8b:c8:0d:
19:03:6a:84:1f:ce:68:a6:79:f1:36:62:d8:03:f0:
cf:cc:43:81:03:f9:ff:d0:62:fe:00:b1:02:17:48:
b1:83:73:b4:a1:2e:07:ea:2b:c7:e4:37:cb:8c:f1:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:9E:BC:93:81:8D:45:AA:E9:36:7B:96:C0:C6:A6:68:4B:E6:18
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:cc:10:f2:e8:da:eb:79:54:a5:b1:29:89:c3:e8:a2:66:
d4:3f:ea:cd:b2:8c:42:89:24:fa:03:06:52:ba:b3:47:57:42:
51:4e:9a:55:60:b6:a6:5c:58:a4:3e:3b:bb:e5:25:5f:47:4c:
07:1e:64:ca:ba:e1:6d:98:8e:49:0e:68:2a:93:5b:08:ab:fc:
84:30:f9:68:a4:95:da:ef:b7:00:6e:98:e5:26:1d:18:64:45:
c1:77:9a:50:f3:04:21:0f:92:19:0d:ba:80:36:ec:1d:ad:9a:
0c:79:5a:00:17:26:9d:07:09:d8:c7:95:88:2e:a0:4a:50:10:
29:31:b8:8c:68:2a:cc:39:5b:88:a2:92:6a:7b:9b:40:65:6e:
c5:09:3a:a0:7b:fa:3e:3d:03:f6:99:05:93:31:65:37:f8:07:
c4:44:21:b7:cb:f8:8d:ec:2c:f8:6d:13:cc:7b:e3:e4:58:55:
9e:83:5e:e3:93:5c:f0:a9:cc:84:a9:eb:b6:3a:65:7c:ba:73:
20:46:bd:18:e8:e0:e2:ee:3d:9d:a4:55:1c:a6:ea:3e:44:0b:
5f:b6:65:a0:10:da:ad:8f:b3:86:b9:02:19:3a:cc:f3:4e:c6:
e1:2f:24:dc:8f:45:d0:11:0c:a7:86:91:e6:08:9f:19:67:e0:
61:3d:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:26 2026 by rpki-client