
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: mzDMEM81M8bDXizIPHutg/5GSBiQj6pMS6v5X9POLTw=
Subject key identifier: 73:90:9E:AB:86:F8:59:ED:DF:EA:2B:D8:E1:AE:09:27:66:7B:A0:EB
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3633
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 35C0
Signing time: Tue 28 Jul 2026 14:54:59 +0000
Manifest this update: Tue 28 Jul 2026 14:54:58 +0000
Manifest next update: Tue 04 Aug 2026 14:54:58 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: UDK4PgdEH1oTZyPOp0G7MCyo34PtgjUMFOQOGQQ4GOI=)
2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=)
3: D2392E7886EC11F19E006003A7EE528E.roa (hash: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA=)
4: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=)
5: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=)
6: D343067C86EC11F19E006003A7EE528E.roa (hash: MwabdDtsR88t/I1zQatof0zHAy5NQHDXaMUX2ZWtv1k=)
7: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13875 (0x3633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Jul 28 14:54:58 2026 GMT
Not After : Aug 4 14:54:58 2026 GMT
Subject: CN=6a68c2c3-3183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:64:ec:04:7f:36:a0:a0:eb:68:84:17:b5:
68:d5:f7:a2:fa:a9:ba:bc:5b:4b:75:fc:75:a6:4c:
71:e7:41:2a:f1:99:92:d5:8e:8f:a5:37:85:1c:2d:
4a:84:74:89:94:ce:b1:9e:0c:3a:5c:c2:2f:a9:d0:
1e:40:1b:6e:61:f8:12:ae:48:ff:2b:12:ca:a6:59:
bb:b1:c2:1c:65:18:7e:7d:03:7c:4e:58:4f:96:f9:
a0:34:47:4d:27:3d:e1:97:8a:78:8b:b7:cc:bb:85:
ac:d4:64:a2:73:b4:6e:29:e9:fd:20:2d:86:d2:00:
da:3f:76:c4:ec:cf:b9:dc:a0:9a:be:f5:0d:46:fa:
f0:eb:bf:20:79:fa:4d:c8:22:2d:d5:53:13:2a:10:
d7:d3:18:50:6d:21:db:a1:89:80:58:cc:bb:6e:b5:
12:76:90:27:f9:91:f0:0f:47:66:57:77:d0:f1:b4:
7c:fc:82:72:88:61:51:de:a2:da:94:d9:ca:f8:ff:
b3:74:e4:22:21:32:f1:1e:4f:48:e8:19:58:28:34:
fa:26:ea:54:23:3b:c6:1b:f0:54:af:2e:95:22:0e:
cf:86:17:7e:59:e4:1d:8a:3a:e8:a5:97:9c:9f:60:
63:b1:be:47:5a:f0:ef:c5:ca:4d:6a:e4:7e:16:77:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:9E:AB:86:F8:59:ED:DF:EA:2B:D8:E1:AE:09:27:66:7B:A0:EB
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:27:d0:3c:a4:2f:bc:49:cf:fe:09:ff:b4:cc:80:7b:5b:6d:
34:d7:0b:11:5a:ec:6c:e3:65:5b:ee:fc:73:62:78:c7:70:a5:
5d:af:d4:a4:d7:38:3a:10:91:36:65:ec:68:c7:e8:59:d2:da:
f2:a0:19:22:37:c5:29:2c:15:f3:97:59:67:69:0f:63:16:aa:
b2:c0:b5:ce:ee:06:fe:63:6d:3b:c0:33:f0:c6:20:c3:b7:d4:
7b:32:7d:86:ba:05:a6:c0:50:40:8f:cb:f6:26:0e:42:9a:34:
65:a0:a0:51:4a:d5:de:67:59:b1:05:0d:6c:ef:70:c3:f3:ea:
1b:31:df:18:84:9a:25:17:aa:56:48:88:6c:ea:d7:04:e4:50:
c6:a4:e6:0f:9d:ac:ee:2f:e8:f9:b5:a2:f0:a6:cb:6f:1e:73:
1f:11:4e:1a:e3:39:0b:5c:0c:6e:a2:7b:9c:26:00:b3:f9:37:
b5:a9:e2:24:2a:24:8e:63:5d:99:34:47:cd:95:7f:49:0d:d8:
e4:a6:08:5c:e3:aa:47:96:23:08:28:ec:f8:c7:44:4f:91:f2:
99:bc:db:1d:03:6d:95:d0:78:67:df:94:4e:bd:e4:79:34:1e:
a1:a6:5e:dd:6d:b3:d7:e9:13:7d:c9:c4:90:1b:c8:98:0f:b1:
be:30:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:17 2026 by rpki-client