
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json)
Hash identifier: 7Mz2m5u+irNxffBXgFCOgvU6RwkYRYYcEj0Ka8viU0Y=
Subject key identifier: 30:26:F8:49:9D:1E:73:19:21:07:04:3F:EF:F9:F5:28:83:C6:55:D9
Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Certificate serial: 2EBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
Manifest number: 2E9D
Signing time: Tue 28 Jul 2026 15:33:59 +0000
Manifest this update: Tue 28 Jul 2026 15:33:58 +0000
Manifest next update: Tue 04 Aug 2026 15:33:58 +0000
Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: suh/TNVwnaMKX2ldUoycpbg/l2tIQPCKzwaJE6gV6B4=)
2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11964 (0x2ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8
Validity
Not Before: Jul 28 15:33:58 2026 GMT
Not After : Aug 4 15:33:58 2026 GMT
Subject: CN=6a68cbe7-3e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:30:a1:57:86:96:47:1c:47:e8:02:15:cc:
2b:6f:90:5a:94:9f:90:93:a3:6f:4d:df:55:2a:f5:
4c:d7:22:ce:64:21:98:f7:c5:b9:95:39:cc:80:d8:
eb:55:3f:24:50:af:83:e1:dc:a7:29:14:d7:20:21:
d2:58:5d:3c:a2:2b:52:ad:a9:3c:50:43:d2:91:12:
f4:32:75:94:79:30:96:3e:87:57:a3:13:04:dc:5a:
03:ad:bd:dc:ee:13:46:f7:ef:0f:eb:7e:bd:5a:8a:
5b:44:58:f5:dd:98:53:81:a0:d5:3d:e6:55:e9:02:
60:cd:2e:f3:7e:7c:c1:84:fc:fd:aa:40:2c:4c:ec:
c3:76:40:5d:15:23:7c:b0:a5:65:b8:37:64:04:f5:
14:e7:bc:c7:ed:c4:23:1c:27:dd:46:34:e7:49:e1:
b9:47:80:cd:26:0c:47:0b:77:a2:6b:0b:7c:c0:27:
06:36:7a:99:2d:d3:24:c5:da:bb:d2:f4:f2:9f:9b:
89:1b:26:0d:ee:f1:26:e4:9e:12:f7:39:e7:d2:a1:
06:a6:37:fc:cd:fb:ea:fd:a4:32:ae:ec:dc:d5:9d:
a9:2f:30:83:3a:a2:2a:7a:79:b6:0d:0a:49:54:de:
ad:dc:45:02:54:e3:d9:ef:f6:c1:a3:c3:1c:10:f5:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:F8:49:9D:1E:73:19:21:07:04:3F:EF:F9:F5:28:83:C6:55:D9
X509v3 Authority Key Identifier:
keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:ae:d7:d2:6e:a5:3c:9f:8c:2d:58:0c:5e:e7:28:ea:de:
90:39:aa:07:bf:7b:39:15:2b:34:95:69:e7:ff:44:8b:96:24:
a9:76:4d:6d:1d:c5:9a:b6:c9:63:9b:a1:c1:93:b2:a8:e0:47:
4c:ef:6d:fa:18:66:c0:17:58:a4:42:8d:9c:8a:fb:d7:f2:27:
8b:82:ac:37:f2:db:8c:4d:4a:05:a2:8c:5c:43:30:b4:c1:26:
90:6c:32:83:4d:4f:70:10:5d:ee:cf:27:d5:4c:71:13:9f:06:
5f:be:53:a1:e0:b8:62:e9:1e:60:14:08:c1:d6:d9:1c:22:41:
dd:ba:76:b3:2f:c4:70:99:fc:9d:3c:69:57:7c:2c:bb:b6:57:
bf:88:7b:2e:e1:46:e5:31:5c:7e:3e:bc:08:e9:a0:81:2e:ae:
2a:69:9a:dd:37:3f:71:06:79:44:ff:1f:b9:68:52:05:30:74:
3f:6b:c4:a6:bb:d0:86:ee:1b:eb:8a:ad:89:b0:bd:86:e6:d5:
17:6e:73:4d:43:7d:38:cb:cf:b2:b7:52:47:98:88:2d:65:d9:
03:1e:eb:39:68:59:a4:0b:db:c2:d2:7d:62:64:cb:a8:84:54:
43:12:20:49:b2:c6:ca:40:6d:ae:82:11:c0:54:6a:ba:22:fd:
f2:a1:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:49 2026 by rpki-client