
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier: 91x3VjqUe97hZWJShaPJHvDn9b47pachbptMhCWxzS4=
Subject key identifier: F1:E5:2D:70:AF:6A:49:66:00:8A:26:B5:1A:1E:F0:65:B3:79:46:35
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number: 0338
Signing time: Mon 27 Jul 2026 02:12:30 +0000
Manifest this update: Mon 27 Jul 2026 02:12:30 +0000
Manifest next update: Mon 03 Aug 2026 02:12:30 +0000
Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 81RP1qctbloAIlX46eTo89JZTA2gFVj5NWZ08DVsJK0=)
2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Validity
Not Before: Jul 27 02:12:30 2026 GMT
Not After : Aug 3 02:12:30 2026 GMT
Subject: CN=6a66be8e-7f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:45:53:25:d8:7e:f6:b2:87:56:f5:aa:1b:
25:ea:f6:8d:1c:4e:6a:bb:c5:94:52:6e:48:6c:08:
fc:c6:09:7a:da:7c:72:5a:07:97:86:ea:27:ae:0c:
71:fd:d5:4d:40:34:c9:f2:72:1d:13:ef:7f:8d:a3:
b7:ca:5c:a5:77:80:47:45:16:c2:18:48:ad:1d:d5:
51:16:0e:49:6b:3e:fb:85:79:51:57:6a:9c:56:cf:
99:a4:b7:96:2d:a8:48:13:7d:d4:93:52:6a:65:1b:
25:68:56:14:80:2c:ea:40:f7:03:87:7c:7a:21:e2:
8d:b3:a3:65:6b:5d:07:7d:92:19:50:20:77:78:16:
5f:e2:5c:e3:a4:14:48:9e:28:18:50:95:8f:2e:a6:
b6:f6:d3:21:b4:52:92:26:79:0f:46:db:02:05:9a:
0a:cc:b3:97:b0:c5:80:19:44:17:1a:42:a7:7c:40:
61:13:06:44:8c:12:89:13:be:d6:c5:87:35:6f:e0:
34:5c:fe:c8:b1:d0:08:e3:c1:14:97:b4:e0:b3:7a:
aa:96:8b:e6:7f:60:e2:95:fa:25:e6:b3:ed:33:49:
d6:a7:6d:eb:3e:3c:68:fb:ef:15:b0:0c:24:dd:a3:
db:3e:1a:66:b7:f0:7d:97:78:15:e5:2a:c3:34:1c:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:2D:70:AF:6A:49:66:00:8A:26:B5:1A:1E:F0:65:B3:79:46:35
X509v3 Authority Key Identifier:
keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:f7:a1:3a:b5:67:94:7f:f1:ba:6c:18:0c:ec:38:45:44:
b9:5b:03:a5:8e:9b:2e:35:76:c5:f5:19:b9:df:4b:a7:5e:5f:
15:97:12:63:ea:60:74:cf:3c:13:71:ed:c4:93:81:63:d7:55:
3f:48:4e:09:ba:cf:20:ef:e2:ff:3f:9d:86:08:33:67:a8:5e:
5b:96:50:9d:b7:72:fd:fc:fd:9b:44:ea:03:d6:4c:3d:98:db:
8e:7b:36:b6:d3:b1:71:db:62:da:86:a7:e8:5d:35:b9:b8:79:
03:53:96:ba:76:a9:01:3d:e1:c4:1e:75:90:c2:74:72:18:88:
60:b6:2a:6e:6d:e9:8b:92:21:57:7c:66:58:93:bf:f3:02:13:
9a:59:a9:a5:d4:d9:7a:fa:b1:f0:d7:dc:4f:9f:5a:7b:58:7f:
94:80:63:d0:94:9c:9e:09:87:fd:50:57:2c:86:6d:7b:e3:86:
38:34:50:2e:f7:c3:19:32:5d:5a:54:46:83:5b:6e:16:44:ba:
17:e8:f9:68:b8:ef:bb:24:0a:ad:d7:1f:c0:e0:70:65:55:a1:
21:22:86:0c:01:19:7d:67:35:d6:1b:c0:9d:67:10:28:b8:aa:
92:ad:ab:75:b3:c8:a1:2e:72:7a:2c:72:8b:c1:45:f9:3e:7b:
4a:26:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:58 2026 by rpki-client