
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: nyiAU5dMbAZqdHN40HubdJzE3qTAEvg4KLuD8eIcll8=
Subject key identifier: E4:B9:BE:CC:F0:CA:6E:8F:2C:8A:2D:FB:B3:46:FF:86:9A:31:C1:4A
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 0283
Signing time: Mon 27 Jul 2026 03:14:14 +0000
Manifest this update: Mon 27 Jul 2026 03:14:13 +0000
Manifest next update: Mon 03 Aug 2026 03:14:13 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: JR1kykGzhclYXIjbyt4FwZMyca3w3DamEjh4lzTUEQc=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: ylQZgSxpoYGOK3QMYk3CFuQ9Ou8gBsooYQ9v1rokCT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Validity
Not Before: Jul 27 03:14:13 2026 GMT
Not After : Aug 3 03:14:13 2026 GMT
Subject: CN=6a66cd06-4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:01:0f:96:7e:f2:85:04:2a:ef:1a:c7:82:
47:4c:18:9a:1f:da:25:f1:f5:63:5e:5a:2d:24:e2:
b2:29:a4:bf:18:95:7a:07:3f:56:df:a5:7e:d8:9f:
ce:d2:a3:49:df:9f:82:7d:16:91:dc:90:38:74:cc:
8f:02:f8:d5:f7:3f:c9:c4:f5:7d:8d:8f:6b:8c:f2:
e0:f8:7c:dc:2f:53:a0:86:46:f2:91:e5:c3:06:ee:
a2:ab:69:91:de:dc:60:3a:02:d0:2b:73:4e:62:8d:
21:c8:92:79:2f:02:60:eb:50:e6:42:44:32:6f:1e:
32:23:c5:55:77:6b:0c:34:32:5c:4e:ad:e5:0b:a4:
c7:c6:17:08:70:09:35:67:0f:56:70:04:72:02:e0:
a6:ca:72:b8:bc:fc:fd:c9:12:c9:98:1d:8d:6a:c0:
46:e5:39:7f:e9:46:8a:c6:8e:28:6e:75:ff:28:8a:
48:c1:6d:79:a1:d7:b9:2f:de:a4:24:d3:51:c9:ba:
51:65:d2:83:a0:88:f5:b5:91:69:b8:10:dc:98:1d:
5c:96:06:90:39:5b:c8:94:eb:b9:32:90:b9:e6:51:
2c:3e:ab:78:eb:1b:f8:83:63:f3:b2:5c:ee:d5:79:
fc:15:61:bd:51:40:c4:a5:bc:c2:6e:5b:ed:11:36:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:BE:CC:F0:CA:6E:8F:2C:8A:2D:FB:B3:46:FF:86:9A:31:C1:4A
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:e7:12:84:da:e6:aa:82:eb:17:30:2a:e3:bc:4a:bb:70:
f5:78:1d:b7:27:41:24:67:80:57:8b:0d:d3:54:40:f0:38:a8:
79:00:3f:b4:4f:4d:84:9d:60:33:d6:88:49:e7:db:66:55:1c:
87:01:18:e9:7e:cf:f6:70:11:e0:bb:46:0a:d6:39:9d:03:4b:
22:c0:77:ed:8b:76:7e:50:ac:b3:f5:0d:be:8a:2d:ff:31:a7:
ce:b9:b7:62:a1:f7:07:21:ce:59:54:fa:e0:ca:4f:31:29:17:
41:5c:2c:dd:c7:a2:a1:34:75:08:ef:43:c7:30:9e:0f:25:e4:
e6:a0:da:a8:06:9b:d2:07:96:03:7e:6d:8f:ee:cd:08:66:67:
df:48:51:f7:4e:3f:fb:db:34:45:4c:65:1a:18:55:3b:e5:08:
f0:e3:d5:27:56:a4:d2:5d:2c:cb:ac:e0:c6:f9:03:d2:31:13:
6f:82:06:0f:e4:62:4a:78:30:ed:97:82:51:c6:69:94:52:09:
58:13:ed:51:2e:8f:98:5a:7f:a3:13:47:89:e7:1e:a3:90:fb:
57:9b:19:9c:01:e8:3b:5a:b0:07:16:90:03:57:ac:32:8d:8a:
ac:2c:d0:b9:a0:75:e4:e3:51:0f:e7:40:69:6e:67:9a:c3:90:
b0:cb:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:10:28 2026 by rpki-client