
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: zALeq3dHZFr4reGB7NJx9KnrZhHdhQl6xnWaDwELuns=
Subject key identifier: E7:AF:DE:88:A0:E1:FE:41:02:85:2D:4A:2F:92:65:B1:C0:E7:23:FC
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 3191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 318A
Signing time: Tue 28 Jul 2026 15:30:23 +0000
Manifest this update: Tue 28 Jul 2026 15:30:23 +0000
Manifest next update: Tue 04 Aug 2026 15:30:23 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: PVjJQLVIqDw0LMps1eyntqMhfqi8TpoSckKf6D+5F+Q=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12689 (0x3191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Jul 28 15:30:23 2026 GMT
Not After : Aug 4 15:30:23 2026 GMT
Subject: CN=6a68cb0f-1d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:75:1f:84:c9:86:47:fd:c9:ed:b2:23:48:
fd:60:73:0c:91:5b:18:1b:05:2d:41:db:f1:c5:f6:
4d:40:be:8d:c8:02:66:b6:9d:17:91:89:27:47:9f:
05:64:4d:10:75:d8:99:c6:bd:ac:2c:0a:76:cf:bd:
7b:c5:6a:9d:3d:6a:22:10:ef:62:ef:26:05:88:86:
25:f2:d3:6b:0c:e3:b4:8c:45:4f:de:f6:18:bc:61:
06:75:57:26:43:8f:1d:f6:42:f2:b0:fb:16:8d:73:
f5:05:53:cd:e6:3e:5b:33:56:86:ee:ed:ce:d2:bb:
56:4e:28:46:7f:16:6f:a7:10:d9:40:86:63:a3:f8:
bf:f4:68:e7:a0:53:a8:d4:a8:dd:7e:b1:18:dc:04:
5e:d4:37:a4:67:26:1f:06:08:28:99:f2:cc:54:9e:
8b:23:f6:e7:d9:c8:fa:ee:65:09:48:56:39:e8:4c:
3b:bf:6f:1c:2b:8b:b1:e1:b5:c7:71:92:b1:b2:46:
f1:c9:6c:35:5e:dc:c1:28:06:8f:79:36:22:ed:df:
8b:9e:e5:f5:8e:5f:e4:fe:15:cb:e0:ac:c1:fb:27:
c1:ea:ce:91:64:ce:37:f5:e6:28:51:4f:8b:6a:7b:
a4:5d:2a:30:c2:ed:54:28:11:93:da:89:e8:30:62:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:DE:88:A0:E1:FE:41:02:85:2D:4A:2F:92:65:B1:C0:E7:23:FC
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:24:13:bf:0c:2a:13:45:8c:82:f4:a2:69:17:e9:49:76:
ab:96:2f:e7:a4:90:8b:e8:0b:ff:e4:81:7f:c4:1d:df:47:63:
0d:1c:51:d7:d7:28:eb:14:c7:49:fc:14:a8:6f:50:5d:2b:20:
26:72:0a:cb:b4:1b:1f:8d:e0:4e:98:ed:77:d1:52:7a:47:3f:
15:6b:4b:95:9d:05:e2:b4:29:db:44:55:67:ce:13:eb:b7:05:
ac:99:69:e3:f4:79:48:d4:28:21:1a:99:56:c5:95:56:5d:10:
dc:ac:eb:cd:cb:5a:d2:da:c8:8e:88:bd:2a:32:1f:fc:36:e0:
7a:2e:b8:34:a7:ef:f6:2f:1a:62:ba:32:33:31:4f:18:80:7a:
c9:2c:ff:ca:3c:4e:c9:98:ff:47:23:b7:08:b3:a5:1f:f1:cd:
33:a4:41:24:ad:97:6a:fd:79:0e:da:3e:54:74:7c:e2:74:44:
86:36:9e:aa:b6:58:75:46:43:cd:2b:93:2c:40:0b:86:72:69:
7c:46:fa:f5:94:8f:63:af:c5:c4:60:8b:e1:b2:3f:40:1a:1b:
b6:60:29:53:d4:31:91:ff:c9:57:8e:8d:44:80:2a:f9:c5:bf:
05:2b:f9:2b:63:28:a4:3a:cb:9d:4e:5e:7a:ae:be:ec:31:e0:
64:bd:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:22 2026 by rpki-client