
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier: UIR0qjQnYqsBTg7Qyu210uxvmHIyfMgnUVebNsqShrs=
Subject key identifier: 55:21:97:BC:AC:47:3A:84:D3:EE:66:12:2A:34:E4:FC:08:DC:4F:DA
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number: 98
Signing time: Mon 27 Jul 2026 09:31:22 +0000
Manifest this update: Mon 27 Jul 2026 09:31:22 +0000
Manifest next update: Mon 03 Aug 2026 09:31:22 +0000
Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: 0gk5HdW3qcSDnRgB9U/HoAGRIuYL/gQxFB++14UaWiI=)
2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: ABz2wyyPJmQiKwD0Cid0vK+VZEE/DgOmkSrsLq1Yrtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Validity
Not Before: Jul 27 09:31:22 2026 GMT
Not After : Aug 3 09:31:22 2026 GMT
Subject: CN=6a67256a-7c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:e9:53:28:9f:bd:95:d2:68:0c:4d:16:7b:
a1:32:85:bb:c9:ab:8e:bd:ba:7f:e0:4c:33:0c:24:
75:af:8e:9f:e3:9b:1c:2d:8e:0b:24:2f:92:a9:09:
9d:19:52:2e:44:24:95:3d:96:f8:00:72:86:ee:a8:
ed:e6:79:73:6b:ae:7f:84:5e:9a:26:2d:9f:02:9c:
0a:97:bb:36:5f:75:ed:1d:90:d0:33:58:ff:eb:ed:
25:81:31:c1:72:81:4b:d7:77:1a:4d:05:22:94:61:
6f:05:c5:80:7c:12:dc:db:c2:ff:9b:ef:28:ca:ea:
b0:e5:99:e7:b9:e4:44:76:41:98:43:50:28:96:ef:
4f:69:a6:cd:05:6c:c7:5b:52:06:0a:6c:4d:2c:2c:
17:1c:7e:27:22:64:d6:7f:ff:17:71:e4:dd:fb:b0:
78:42:d0:18:9d:e1:48:0d:2d:ad:b8:10:10:90:66:
aa:c3:1a:70:95:42:fd:a5:61:86:04:84:00:da:e3:
be:45:a0:52:75:53:21:31:c2:c3:14:d7:d5:0a:97:
09:bf:ad:da:9e:af:ed:d5:f4:09:a4:15:64:c5:56:
b7:ef:26:32:e5:25:4b:8f:8d:d4:c2:eb:89:c3:61:
7f:42:81:5d:38:62:47:21:c6:3c:ad:df:f9:15:d8:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:97:BC:AC:47:3A:84:D3:EE:66:12:2A:34:E4:FC:08:DC:4F:DA
X509v3 Authority Key Identifier:
keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:5b:5c:f1:ba:8d:99:34:9e:b9:59:3a:8f:2e:4d:69:32:
28:b6:fd:80:d2:2e:04:56:2f:ae:1e:d7:1b:e3:25:e4:66:c3:
6f:4d:ff:8c:23:ef:9c:b3:4a:e7:42:d2:e4:40:a5:b6:c3:94:
ce:78:8a:21:95:af:db:ad:3b:1b:c1:15:8c:e0:54:85:aa:bc:
52:95:20:6a:31:6a:14:7c:ab:6c:4f:ab:5a:7f:46:43:48:66:
72:cf:98:0a:55:fe:f7:ca:eb:c6:a2:68:5c:d0:2d:86:bf:0f:
a3:db:58:e6:42:27:91:3f:4c:9c:0d:92:fc:ca:93:c0:8f:39:
d7:45:35:b2:c2:75:58:90:0e:5d:02:11:1e:3f:3c:61:a4:37:
13:f7:1d:51:50:63:6b:96:c7:1f:24:19:f3:68:00:75:7a:85:
30:bd:6a:fd:08:73:6c:25:6b:59:a5:57:d3:c3:9b:e8:5d:b3:
98:d7:43:cc:6c:73:58:30:9b:9f:d3:50:1f:9c:99:e3:70:8a:
b8:48:91:24:81:f3:4d:9e:29:6d:10:a7:b6:60:98:77:31:08:
98:d8:7c:28:0b:b5:cb:4a:c0:99:c9:5b:a3:f4:c2:8f:6c:9b:
27:6b:44:6c:ab:3c:23:55:ec:4c:c1:83:b9:64:4d:9c:05:66:
20:17:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:36 2026 by rpki-client