
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier: RQCKSq81azYuZSi3qj3RZ34OOWxej618daw1x0RKIzQ=
Subject key identifier: 95:45:2B:60:CF:8A:9A:0B:79:B7:9C:3B:56:72:D2:AA:9B:40:AC:E1
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number: 014B
Signing time: Mon 27 Jul 2026 07:12:13 +0000
Manifest this update: Mon 27 Jul 2026 07:12:12 +0000
Manifest next update: Mon 03 Aug 2026 07:12:12 +0000
Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: QdRP39wnjFxGG9Q3hKliksffRXiTahUa0fxZN1EfRCA=)
2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: tfiaKNp+pGPKNwRyzqNWpYJfVlj5qFTe6lmSja9GxH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Validity
Not Before: Jul 27 07:12:12 2026 GMT
Not After : Aug 3 07:12:12 2026 GMT
Subject: CN=6a6704cd-c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:8d:d3:48:8d:fc:ac:c1:eb:0f:6b:bc:e6:
62:4c:cd:c0:91:c3:ae:dd:85:92:2e:d0:0a:8e:03:
b2:a8:00:31:21:f3:b4:4a:07:38:24:5d:b8:22:20:
01:12:aa:9a:7a:1a:73:a1:5a:e4:8b:2d:99:d4:bd:
df:45:0c:37:2a:6f:4d:28:76:cf:d6:94:a3:68:74:
a2:5a:11:b5:41:af:31:df:3c:fb:67:a8:bd:04:1f:
10:0f:05:e7:62:4a:41:db:56:99:ce:70:b9:cc:12:
dd:14:30:d0:bd:00:43:b0:bf:14:22:7b:35:99:67:
a7:05:13:71:97:d0:53:a5:81:c0:4b:e3:04:5c:1d:
0c:13:35:00:9a:cc:f2:73:b9:7b:9f:ad:24:4e:43:
1d:f2:2b:3d:58:9e:3a:80:d5:8f:0d:5a:4c:df:85:
9d:8a:e0:48:b8:72:6b:dc:99:33:89:75:85:5f:d4:
d2:a5:a3:90:ea:bd:e3:e0:02:48:e8:26:e0:25:29:
c6:f5:a4:39:c1:62:c5:2a:82:08:2a:63:ef:f9:d5:
49:7c:ed:01:76:17:ed:6a:58:1c:67:f2:19:67:ea:
1f:8e:4e:67:ed:e1:bc:06:dd:49:fc:db:ba:a9:f3:
cb:d8:e9:84:b2:4d:5e:de:4d:87:c5:52:c4:e4:7e:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:2B:60:CF:8A:9A:0B:79:B7:9C:3B:56:72:D2:AA:9B:40:AC:E1
X509v3 Authority Key Identifier:
keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:3e:a6:87:32:15:91:3d:d4:72:7a:c7:d5:62:67:49:6b:
3a:2b:d4:03:73:ce:50:50:00:5c:15:80:bb:ec:de:16:80:67:
30:ec:a7:64:6c:d1:2f:ac:40:6f:d5:28:7d:22:2c:d0:1d:69:
85:7a:1d:c2:0c:b2:e1:ab:df:a2:d3:78:0c:5e:42:1f:b9:16:
b0:72:3d:d8:77:d9:7b:5f:59:22:06:61:03:e2:6b:3b:9f:13:
84:a5:c2:bf:b0:07:22:9d:fe:09:dd:0f:a1:9b:a3:f2:0d:d4:
6f:6f:7d:a1:00:c0:e8:ae:18:98:40:e8:18:6e:9a:67:15:d9:
59:87:ef:2e:63:bb:b9:08:6b:a3:6e:da:7e:58:38:2b:39:92:
93:7d:ff:73:8e:3c:2e:1b:a4:d3:cd:80:89:d7:29:dc:f8:5b:
d6:dc:73:08:01:e9:14:50:f7:14:da:20:00:84:52:9a:56:85:
8a:b6:37:62:94:b6:9f:d0:69:51:1f:c8:7b:d2:36:4e:9f:5e:
93:e9:44:a8:8f:94:ce:17:fe:3b:47:38:4f:10:4b:62:5c:1a:
df:ae:c0:16:ad:f3:c5:cc:72:c5:3a:b1:ec:dc:e8:11:28:7b:
b2:ea:c5:18:94:a1:05:80:43:5e:18:4e:6e:19:0f:75:62:a2:
9d:23:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:49 2026 by rpki-client