
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: +1o1hrAS8W/3QiNDwUJRNBWzCU+tJw7HQ/BEjzE7dQc=
Subject key identifier: B7:A6:E8:21:D5:11:FB:C5:A5:37:10:91:E8:F4:9F:79:83:4E:17:1B
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 09F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 09E7
Signing time: Sun 26 Jul 2026 20:20:55 +0000
Manifest this update: Sun 26 Jul 2026 20:20:54 +0000
Manifest next update: Sun 02 Aug 2026 20:20:54 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: EAcemFpywDVAffyJDz9lG9m5Q5azhVk7Fp7ZpoquXrc=)
2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Validity
Not Before: Jul 26 20:20:54 2026 GMT
Not After : Aug 2 20:20:54 2026 GMT
Subject: CN=6a666c26-f504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:fc:f1:5b:69:97:ef:e6:12:e6:25:9d:e7:
54:fd:01:12:56:99:a8:18:73:75:b6:02:e8:d5:4a:
40:cd:34:e3:ca:1d:f4:bb:2a:83:37:db:e9:96:17:
7f:85:45:b8:55:77:e0:e6:cf:39:34:ba:23:a7:77:
e9:f2:9c:1a:d2:94:f9:e6:7f:10:cb:e8:88:6a:1b:
3a:f0:d7:03:53:b6:f7:26:67:84:5c:29:b0:4b:1b:
f5:66:f8:76:89:48:8d:f3:8b:95:b0:ca:0a:65:d9:
55:17:fb:96:d3:84:bc:9e:7b:9d:af:eb:21:08:33:
b0:8c:b7:43:67:63:7a:1b:3a:65:18:49:61:03:1e:
4b:62:6f:d8:36:07:dc:72:e6:c6:b1:d4:11:95:a2:
47:93:ef:14:03:be:dc:d6:9b:14:eb:7e:f2:d8:4b:
fe:d9:52:f9:84:90:a2:6d:9b:e1:7a:f0:8d:90:59:
cb:63:9a:88:17:be:14:4f:a2:df:9c:ec:ea:1a:30:
36:94:c5:4a:d4:15:d5:7b:a2:ea:8b:87:a5:ae:c3:
76:b8:32:a1:b9:99:ce:bc:04:18:f3:45:39:b1:ac:
e0:7d:87:6f:1d:d6:e6:5c:00:48:3b:e2:ae:a7:52:
d3:f1:35:df:84:65:5c:23:ff:16:88:90:84:78:fc:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:E8:21:D5:11:FB:C5:A5:37:10:91:E8:F4:9F:79:83:4E:17:1B
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:2a:cd:da:1a:39:b1:2c:5a:7e:62:1e:ce:d9:2d:35:f0:fb:
55:2a:cf:4a:6d:a3:59:b7:c1:34:c6:3a:33:e5:45:de:91:27:
41:63:1a:57:be:71:09:5c:8f:1b:db:f9:bb:57:d0:10:70:3e:
2b:05:cc:34:e7:4b:94:70:2d:c1:1a:9c:59:cc:19:9a:99:f3:
8b:af:5e:22:4a:eb:9d:ab:8d:2a:a0:43:bc:1e:20:2a:8e:bb:
e3:d8:27:8c:9c:a8:fb:5c:b4:25:8b:1d:9c:9f:4c:70:36:4d:
5e:cf:31:5c:4e:73:75:68:d4:68:d7:dd:6d:58:76:15:a0:3d:
70:8d:42:86:8b:8f:b4:05:f7:75:94:bb:b9:b0:3d:04:38:91:
c5:65:98:2f:fe:48:9a:98:38:cf:c4:75:e7:69:76:93:e0:30:
32:ec:a8:b7:6d:27:6e:01:2c:8a:f7:d3:45:06:fe:2a:d0:8f:
9d:fa:bf:22:22:26:e7:63:6e:c6:55:c9:a6:09:b6:d4:0d:6b:
40:7a:7e:5e:58:6a:34:e9:69:2a:ae:31:c3:cd:f7:b6:80:54:
44:7d:f1:d4:e9:9d:e5:40:8f:19:02:e4:3e:7f:80:aa:90:78:
81:14:80:dc:4e:06:14:38:ed:5d:82:c4:90:58:ac:26:80:a3:
72:58:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:03 2026 by rpki-client