
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier: 7GH3rH+T4tlNYyCKA50CHmPDvWaIyV9FX8T9UX4y97A=
Subject key identifier: AB:05:88:8F:99:A7:AA:99:45:45:EE:C4:64:BD:BB:C4:D6:78:9B:A2
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number: 0102
Signing time: Mon 27 Jul 2026 08:14:29 +0000
Manifest this update: Mon 27 Jul 2026 08:14:28 +0000
Manifest next update: Mon 03 Aug 2026 08:14:28 +0000
Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: 5+JVFG7npAL11BLLaR+1BN63I7Yz9HHtC5fKISdgwR0=)
2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Validity
Not Before: Jul 27 08:14:28 2026 GMT
Not After : Aug 3 08:14:28 2026 GMT
Subject: CN=6a671365-4cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:85:7b:77:1c:68:dd:6b:7f:5c:ce:e4:0c:
48:99:57:5f:82:7b:d3:5b:77:84:8f:85:ba:f9:54:
6c:72:a7:c0:61:47:77:a6:c8:f6:00:d9:0b:9a:00:
a7:91:9e:16:03:40:7e:ea:7c:bd:56:48:28:24:b6:
0f:f4:ab:5c:b0:40:01:ad:59:01:40:02:30:97:21:
a4:68:75:3d:64:89:14:2d:ab:1a:49:89:02:cf:48:
fa:18:e8:8e:7a:b4:ba:ce:78:4c:3a:04:d9:af:25:
d8:3d:28:12:fa:14:63:7c:d8:f5:1d:82:65:f8:2b:
25:21:cc:c5:4c:c2:70:4d:b4:a9:4f:e2:33:7a:37:
f5:c5:9f:ba:46:01:df:67:78:98:7d:6e:1a:e0:65:
cf:a5:cf:3b:48:7b:c8:a3:26:59:49:fa:1b:de:fd:
76:96:36:5a:b5:56:a8:f1:49:05:87:9c:d2:5a:8b:
f2:bf:25:b0:2e:23:af:82:ce:5d:3c:37:64:27:e6:
b2:4a:d7:3c:a6:00:c2:b4:8b:18:a6:f8:f1:4f:36:
3c:4a:d6:ba:b4:90:6f:cc:11:3b:d9:3e:38:0c:28:
10:a8:78:e6:6f:40:28:ec:08:76:13:45:4e:62:e7:
a0:e3:98:b1:34:37:16:16:9a:a3:1a:3e:2d:50:c0:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:88:8F:99:A7:AA:99:45:45:EE:C4:64:BD:BB:C4:D6:78:9B:A2
X509v3 Authority Key Identifier:
keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:31:de:a5:b7:52:01:10:64:0d:88:8e:66:18:dc:71:66:a9:
0a:88:d9:4a:11:71:77:cb:64:6a:ee:1c:6b:74:f1:45:85:66:
1e:a6:ff:23:5e:8e:e1:8b:93:0d:0c:a7:1c:8b:dd:a2:36:2e:
5c:46:78:36:e5:38:aa:6b:97:96:95:91:37:b7:20:de:20:65:
97:aa:9e:d6:e0:fd:fb:3a:da:64:d8:f8:ff:26:82:af:da:b4:
d8:37:72:aa:bf:ee:bf:ec:cc:e2:92:a7:a3:58:1c:ed:73:3d:
cc:84:7f:8a:bb:db:da:ab:66:ff:a5:39:e2:ed:1f:f7:0c:70:
a0:2c:ce:aa:ab:98:07:8e:90:bb:09:a9:94:cf:cb:22:2e:bc:
71:fc:58:f9:2b:89:8b:bf:6b:bd:24:9f:69:26:28:df:f4:b3:
ec:42:2e:e9:59:c7:12:6f:11:12:d3:e1:38:a6:67:1f:9c:2a:
ab:30:64:6f:f1:b8:2e:32:e8:9f:17:4f:10:0f:78:41:c3:8a:
27:bc:b4:2b:e9:c7:f1:16:17:63:17:a1:c8:1e:39:df:8c:b4:
71:9a:a0:32:96:b5:9f:f2:15:72:26:8f:c0:50:ab:af:45:08:
cd:23:15:5e:76:1d:64:7a:61:e0:3d:8a:1c:9a:35:14:7d:15:
64:f4:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:40 2026 by rpki-client