
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json)
Hash identifier: nfjcCX/ZX273H+J7QpGpxnIY3f+Q3efOgGep9jfF6wQ=
Subject key identifier: 2C:B8:DF:90:1D:1B:55:E2:D0:84:C3:61:B0:06:08:5E:BF:41:D1:4F
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
Manifest number: 0206
Signing time: Mon 27 Jul 2026 04:49:01 +0000
Manifest this update: Mon 27 Jul 2026 04:49:01 +0000
Manifest next update: Mon 03 Aug 2026 04:49:01 +0000
Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: wRHGDphb37Fl2kXMiIgwn6ZXNtIXOEHpEiyL4NEx9wc=)
2: 27A66CC4335811F18709AA0FCA833773.roa (hash: pPUHKA5s9wq04L2qfb/B2EY59WS05X4PfzFkdep1N34=)
3: E5196DA6335811F1BC79FB1BCA833773.roa (hash: vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Validity
Not Before: Jul 27 04:49:01 2026 GMT
Not After : Aug 3 04:49:01 2026 GMT
Subject: CN=6a66e33d-a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:c5:fa:64:45:46:45:5d:79:6e:c5:31:a2:
fe:38:b1:6f:9b:d1:c2:a4:be:dd:38:3f:1e:19:77:
91:45:1e:fa:1d:ef:4f:f4:e3:3a:38:6e:58:87:3e:
ea:75:e6:5e:38:f6:31:87:b5:4e:ff:49:7d:51:8c:
06:11:89:bf:e2:e0:c9:5e:ae:53:5e:30:48:63:22:
e0:b1:75:24:d9:57:e3:8d:03:06:4c:0f:33:9c:ba:
78:a0:b2:72:64:ee:f6:00:a6:4c:6b:24:c2:be:76:
72:e4:91:6f:57:83:00:59:4b:e0:77:06:c1:03:f4:
6d:6e:be:5a:fd:b8:58:95:69:76:aa:d0:54:ed:58:
57:79:00:22:5b:ce:ae:c2:cd:22:a1:bf:28:34:85:
55:99:86:04:38:94:e9:0e:53:da:4a:ec:c9:22:5a:
8d:20:dc:06:f3:78:59:3c:84:e9:e2:29:3b:99:f4:
43:00:5f:22:d1:5d:60:0d:97:02:d3:15:a8:cd:7e:
90:e6:05:cf:3b:ea:26:b8:9f:94:8b:cc:3e:5f:76:
21:a7:88:8d:e4:a6:71:10:d6:92:7a:b4:56:fd:b6:
18:97:50:2b:74:f0:08:81:9d:78:d7:49:a5:4f:03:
54:ec:f3:22:85:5b:60:66:ed:d0:14:f4:e1:de:3c:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:DF:90:1D:1B:55:E2:D0:84:C3:61:B0:06:08:5E:BF:41:D1:4F
X509v3 Authority Key Identifier:
keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:96:d5:06:1b:98:22:68:2f:c6:16:4b:de:67:99:f8:d6:
08:9d:94:7e:86:7e:b6:8a:82:26:80:43:46:40:db:79:f2:53:
cc:24:2f:82:9e:d8:66:b3:d0:33:88:62:cd:98:13:7f:d0:40:
c6:5b:bf:65:44:ef:88:92:dd:80:54:ee:79:5e:d0:74:8b:e9:
a4:c8:af:68:a6:9d:9e:2e:08:6b:ce:ae:0c:a5:b3:d7:87:ab:
72:1e:4b:38:22:7d:d9:96:41:ce:44:44:60:22:bb:6a:3d:ed:
d1:da:c5:51:1c:d3:b1:07:a6:62:1a:8c:e2:1a:1c:f8:cb:58:
02:26:57:23:fb:0e:40:92:15:71:c9:c4:92:f1:c7:a8:89:69:
1f:43:c2:e0:8e:a4:24:67:f4:87:6f:e8:bf:2f:9d:35:b6:d2:
19:38:6a:16:a6:ce:9d:af:90:44:b9:50:32:d5:a7:eb:be:26:
5e:df:35:b5:b3:10:6a:4d:0a:d5:0e:66:42:c6:0f:f9:23:94:
34:34:f4:51:fe:b0:c0:52:0a:2d:88:56:05:7d:8a:50:c0:f9:
47:29:f0:f9:ec:42:ae:89:a7:8e:c3:50:95:cc:fd:81:bf:93:
69:2f:ab:63:39:1a:0d:8f:5e:cf:d9:ac:9b:56:18:d7:8e:d2:
94:c6:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:51 2026 by rpki-client