
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: cGMDAI5jOkVppki3PjsOHZ3OFGViwXw0hDj6KNVq4Vk=
Subject key identifier: 31:8C:5B:D4:B4:49:04:C5:9E:9F:23:9D:E8:4B:27:93:31:78:02:4D
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 016E
Signing time: Wed 29 Jul 2026 06:07:36 +0000
Manifest this update: Wed 29 Jul 2026 06:07:35 +0000
Manifest next update: Wed 05 Aug 2026 06:07:35 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: YKvp0kwpDb1P0lz/cCHD22s6Q1+O54ilvUonTDWKKSQ=)
2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=)
3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Jul 29 06:07:35 2026 GMT
Not After : Aug 5 06:07:35 2026 GMT
Subject: CN=6a6998a7-4b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:b9:4f:8d:eb:ca:f5:46:1c:d0:35:c5:53:
f1:60:c2:60:ff:50:38:7f:4e:a8:57:d8:6d:01:77:
e2:23:51:0d:3b:fe:a6:27:b1:36:6f:e0:82:54:0f:
4a:a6:e2:ee:06:ef:7b:12:04:4d:75:5c:e8:2f:27:
02:c5:5e:ab:28:4e:73:a5:b4:f1:82:02:b9:7b:07:
8e:eb:3e:92:1d:f5:2f:3f:9e:32:09:0a:9f:43:b3:
e7:ec:47:5d:47:b7:e5:b3:90:64:3e:20:08:ec:de:
0c:6e:fb:5d:73:91:4c:0c:26:06:48:92:81:8f:15:
6b:4f:2c:0d:f8:7a:b9:67:0f:ac:fc:f9:c4:e6:2d:
04:c5:99:37:8c:a8:c9:f3:2d:e8:62:2b:fb:23:99:
e8:f1:e0:7a:84:32:20:cb:1b:7a:42:fe:b2:d5:f8:
ac:3c:57:80:ba:e4:8f:a5:4c:df:51:3e:b6:91:c8:
4b:a6:39:53:a5:49:eb:99:99:43:c5:a8:b7:18:e1:
f5:bf:1c:e2:4c:3e:cc:d3:90:e4:89:6c:d3:48:89:
4d:c6:68:33:f8:51:e7:51:f9:53:64:6e:da:94:a1:
ea:92:40:bc:de:a3:e9:d9:61:f2:d2:2a:59:02:3c:
3c:cc:94:b3:99:a0:88:c9:a8:9b:e0:15:82:87:b2:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:5B:D4:B4:49:04:C5:9E:9F:23:9D:E8:4B:27:93:31:78:02:4D
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:30:5a:ea:31:bb:b3:18:77:7c:17:94:c0:3c:c6:c7:65:c0:
00:20:31:e6:f5:4e:71:8f:b1:ce:1a:40:c2:62:bb:31:7f:93:
e2:1a:6c:ae:6e:0b:70:0e:76:bc:24:97:c7:ad:82:c2:fe:1d:
32:af:47:9b:51:bb:d3:34:83:3d:2a:25:92:f9:0a:25:d8:6a:
ab:f8:8f:f5:5c:36:c8:51:dc:70:63:36:8e:71:ca:fb:29:92:
8d:e0:8e:02:78:b5:cc:33:fc:40:6b:a8:6b:5c:85:82:d1:44:
b2:c8:4a:13:1c:63:fd:dc:bc:97:57:be:7c:c1:43:8d:5a:7e:
22:0a:aa:23:e3:1a:1e:0d:c8:b2:96:63:17:70:49:31:0a:b9:
74:fd:03:90:48:3c:1c:3b:ae:c9:42:65:05:d0:c3:29:46:80:
9f:58:3e:4a:b3:ad:ba:47:a9:12:00:36:fe:77:78:80:c7:87:
80:a4:d0:f7:6c:de:fa:fe:f4:ef:d0:87:87:95:33:cb:6e:ee:
a6:63:fb:b7:64:b6:20:d9:e1:08:25:ba:b5:9e:cc:9e:8d:0e:
01:a8:07:be:eb:7c:59:d9:a6:92:e6:6f:30:dd:95:a1:3c:c1:
59:dc:ab:e4:9a:1c:32:11:3c:f7:38:5e:bf:c3:8b:41:df:c5:
98:0e:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:15 2026 by rpki-client