
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier: 2DvcANYcAOBIb/c1l4e8Rdhxh2lWsJLF/GIAwZyFnyI=
Subject key identifier: 6C:00:9E:6F:5A:15:6A:95:90:E0:49:68:7A:18:D7:0F:31:A3:8F:DD
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number: 01AF
Signing time: Mon 27 Jul 2026 05:54:27 +0000
Manifest this update: Mon 27 Jul 2026 05:54:26 +0000
Manifest next update: Mon 03 Aug 2026 05:54:26 +0000
Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: oHJheFEJ+yBaw18WlBP2BWIundssX5s32f3ErNbggNc=)
2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4eeNf5jC2Mk+3sdc5Wmsh3IL+6DgzipfF5IlQKuRXx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: Jul 27 05:54:26 2026 GMT
Not After : Aug 3 05:54:26 2026 GMT
Subject: CN=6a66f293-9fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:de:2c:34:89:0a:31:29:92:78:78:d4:18:
f0:16:ba:d0:82:3d:b4:4b:dd:c1:de:a0:f2:17:9f:
1f:15:87:f0:30:8c:f4:61:fd:08:ac:8c:8b:34:2a:
6b:41:b9:16:07:3f:38:bf:d4:bf:a5:36:7d:75:64:
2e:af:92:99:79:9c:fd:99:37:8c:66:24:f9:99:b8:
33:fc:2d:bd:d3:04:9e:0f:89:83:05:29:00:a3:c1:
e9:43:54:63:bb:df:3d:3a:77:23:3c:d7:94:0c:f9:
b3:2b:75:2f:16:6a:1e:e9:b9:37:a0:bf:77:7f:b7:
31:cd:c5:b5:d4:95:95:c5:26:35:20:38:ca:2c:73:
4d:e9:c4:0f:f0:3b:22:2d:63:7f:76:98:54:b8:75:
34:75:75:57:c1:bf:35:36:43:7a:e7:34:b3:0c:52:
c1:71:e0:6d:2f:b6:ef:14:84:23:67:38:8d:05:fa:
a8:96:3d:d2:ad:e8:ef:06:a6:77:20:e2:03:ce:8a:
dc:24:0f:8e:7b:bc:b2:61:74:72:5f:d9:ef:e6:26:
6c:fa:73:c3:09:99:b3:54:07:f8:75:45:04:b9:90:
4a:4d:27:1a:c8:3f:f8:81:e1:cd:d5:6d:02:7d:05:
81:6b:b9:b3:4f:16:19:7f:5c:c2:a7:3e:e1:23:5e:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:9E:6F:5A:15:6A:95:90:E0:49:68:7A:18:D7:0F:31:A3:8F:DD
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b1:f3:4d:82:91:91:36:99:1d:24:95:a1:11:bd:71:0a:ea:
4d:01:84:91:a2:f3:73:06:72:46:e0:77:7e:5d:4f:5c:9f:11:
77:99:60:8d:6a:19:35:ce:84:d1:4f:a0:3b:30:b6:3a:4a:4e:
f5:7f:fc:5a:8a:9d:d8:d4:09:4e:c3:62:9c:6f:a5:8f:7d:1b:
29:6a:8c:97:3d:b0:f5:ea:98:8b:6f:eb:97:a9:53:81:c5:c6:
71:ba:27:37:5d:f5:0b:f6:8c:1a:e4:09:ac:47:72:ed:fd:67:
ae:eb:04:61:d5:6a:55:12:88:10:15:82:d4:b9:80:3d:9b:4e:
eb:10:7a:54:14:44:a6:c1:d9:40:0d:05:98:cd:81:3c:cc:d7:
89:51:fb:5a:4d:09:a7:b1:44:d5:54:a3:79:24:01:af:de:d6:
f0:da:c1:04:85:e3:00:a2:64:cc:00:d3:a3:d4:a7:7e:c2:94:
dc:20:40:1d:92:ff:b4:20:29:a4:61:43:81:c1:87:ea:b8:f9:
47:f0:d0:38:a2:fc:d5:f8:ec:27:85:9a:7c:63:22:0b:aa:c8:
ac:48:0d:12:5e:24:31:fd:cf:3b:f4:a6:fb:6f:0d:da:dd:a8:
f1:8e:e0:91:cb:c2:21:13:9f:df:5d:9e:1e:b5:19:16:42:a4:
bc:4b:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:02 2026 by rpki-client