
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json)
Hash identifier: 9RJqheMn5XEXDDDnkPfeHW27zM6srmH+5srBHdkYFcA=
Subject key identifier: 32:37:64:6D:3E:62:EC:1F:B1:40:CC:12:6B:E7:6B:B6:E2:0C:39:D0
Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
Manifest number: 01E6
Signing time: Mon 27 Jul 2026 05:09:55 +0000
Manifest this update: Mon 27 Jul 2026 05:09:54 +0000
Manifest next update: Mon 03 Aug 2026 05:09:54 +0000
Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: 7F5jB/mh9Vbr4cNE0ycnWegKn6g7CBrRvCpxv62BTjA=)
2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=)
3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=)
4: BF8E316480F311F1948786A865A30FBC.roa (hash: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl
rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800
Validity
Not Before: Jul 27 05:09:54 2026 GMT
Not After : Aug 3 05:09:54 2026 GMT
Subject: CN=6a66e823-f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:4a:25:92:89:90:bc:64:53:6e:2a:8f:53:
05:41:89:1a:e4:27:d5:16:33:4d:76:6f:25:12:b7:
3f:9a:a2:34:08:dc:54:07:79:1f:df:1c:0c:4a:22:
9f:ae:74:a5:b6:fd:40:1a:cc:0d:10:ae:35:8d:19:
fb:3f:78:3f:8c:1e:24:2e:6a:0d:cf:39:8b:ef:78:
5b:93:07:6f:1a:ef:c1:7c:5d:c4:9b:b9:9c:d7:5d:
a7:65:3a:9c:d6:01:05:b2:29:42:33:c4:6e:a4:eb:
9b:35:53:97:21:f4:57:81:ad:c5:65:a3:d9:ff:57:
d6:bb:0a:46:12:3d:00:ad:d2:66:b2:57:89:07:66:
e4:92:8b:3d:dd:8f:4b:9f:c8:63:dc:56:ee:9d:51:
00:0b:90:f2:33:5c:21:7d:7b:e3:d0:4a:70:50:a1:
0e:30:8a:6b:c6:f7:31:b7:0f:cb:04:d0:d4:20:51:
30:b9:e2:d6:c0:da:48:49:5e:ea:7c:af:83:41:ac:
2e:92:c8:2a:78:30:28:fe:5f:82:0b:83:a0:44:7a:
06:16:a1:9d:34:9b:d5:b2:9d:3c:c4:e6:32:c0:bd:
b6:2e:c5:15:43:c0:da:d4:49:24:63:e8:85:02:92:
bc:14:c0:a6:33:09:b3:94:ce:a4:42:68:24:0c:a4:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:64:6D:3E:62:EC:1F:B1:40:CC:12:6B:E7:6B:B6:E2:0C:39:D0
X509v3 Authority Key Identifier:
keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:15:b8:ed:f0:d3:0f:53:50:2e:eb:65:a7:5f:ad:61:8d:b2:
aa:81:2a:c7:30:5c:f1:0d:e1:16:5a:8d:97:29:f2:b9:70:bc:
15:1b:28:5b:92:1c:17:01:ae:5f:ea:90:42:a6:66:cd:36:08:
1a:7d:62:48:b5:02:42:41:bc:b0:e0:3a:fc:7e:4c:78:11:75:
59:5b:4a:64:61:27:a4:d3:5e:01:c9:02:b3:16:ca:82:d6:57:
a7:08:00:f9:d8:83:a2:e6:6e:32:41:b9:2d:af:92:d0:a7:af:
96:8d:19:4e:14:b5:39:f5:56:ce:1e:a1:ca:61:43:cb:73:0d:
b8:83:3c:df:a2:9a:31:69:d6:cf:69:81:7e:54:48:2e:94:36:
72:79:2f:85:20:27:d9:c2:ab:5d:40:47:6d:a1:af:35:4c:5d:
47:dc:c5:bc:05:01:91:31:5d:95:2b:f5:44:ad:ad:d8:fe:68:
31:1c:7c:c0:c7:53:83:ab:34:55:b3:19:4c:00:cd:61:51:a8:
cb:4e:9a:4c:61:bc:e6:f2:4b:2a:08:ea:7e:50:4d:00:d6:2d:
5e:dc:02:b2:36:ba:3e:a6:f6:ff:3b:db:13:3d:3f:56:be:5a:
fc:a6:ae:eb:d0:f6:e9:00:a3:30:aa:21:52:46:eb:9f:92:e3:
99:61:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:18 2026 by rpki-client