
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json)
Hash identifier: 8LdrdtMd7ADPvQi/2XjHlw3VPudk2Y+Y/5Oi+hVkBdo=
Subject key identifier: FC:A0:7E:9A:E8:4A:20:AE:55:24:39:D6:BE:BB:8B:01:0E:85:21:54
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
Manifest number: DC
Signing time: Mon 27 Jul 2026 08:41:45 +0000
Manifest this update: Mon 27 Jul 2026 08:41:44 +0000
Manifest next update: Mon 03 Aug 2026 08:41:44 +0000
Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: pQgWkDjCl4T6jJ1fjRmgBpYFsbcNaRkDrgb7kDFlUTA=)
2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: FSkjWAWTa54qCMggaTkYI4c6Mh5lfB4HTHFZ2BdMRV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Validity
Not Before: Jul 27 08:41:44 2026 GMT
Not After : Aug 3 08:41:44 2026 GMT
Subject: CN=6a6719c9-25cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:05:e6:02:18:1e:83:90:8b:f8:07:48:38:
d2:02:69:c8:6c:f3:62:60:76:9f:24:fa:2d:b7:dd:
3b:b0:01:fd:1f:34:14:7b:0b:56:5b:23:f6:40:4a:
d0:91:24:cd:93:92:43:ee:6a:27:15:66:ef:df:71:
e7:c1:64:52:1d:dc:8f:36:e8:8b:b5:a1:dd:6f:91:
22:f4:7d:a1:cf:56:0c:d0:89:f9:4e:e9:44:c1:b5:
66:c9:18:df:b5:33:59:8c:bd:99:3d:63:c1:9a:c4:
7a:1f:56:2e:e9:29:e2:f7:3a:ae:f6:01:a7:5e:3e:
07:a9:d5:ad:de:e2:67:5a:c2:d1:12:99:ee:a2:e3:
2d:a6:a9:f2:64:97:d3:3f:96:dd:42:f1:a6:02:a8:
9a:58:20:2e:76:23:e5:b5:16:fa:6d:f0:36:62:86:
4b:c9:31:ce:99:ca:fc:5b:d3:ac:2b:aa:c0:85:10:
ca:b9:51:fa:e1:14:2a:d5:7f:e0:0d:3b:93:ed:95:
52:7c:a3:ee:95:c3:c1:d1:7e:8f:77:9d:fd:6c:0b:
21:74:db:de:72:e8:ba:37:d4:84:f8:4e:19:f9:52:
58:56:02:08:71:08:51:e9:ba:b4:28:96:5d:bf:41:
ed:19:05:e0:b9:72:e3:4e:5e:0d:1f:02:c4:9a:59:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:7E:9A:E8:4A:20:AE:55:24:39:D6:BE:BB:8B:01:0E:85:21:54
X509v3 Authority Key Identifier:
keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:bc:b9:6e:af:68:93:4d:c6:ce:30:06:08:a3:3d:47:63:
54:27:c0:29:10:87:a1:85:e2:3b:21:81:51:ec:27:82:e5:20:
74:e5:51:eb:b8:da:60:86:f7:d2:16:41:be:59:3c:00:f9:18:
a2:30:a4:93:4b:cb:a5:ad:cc:95:38:35:7f:6b:d9:81:b6:82:
da:c9:4b:69:b0:ef:e1:d2:2e:4f:58:b6:76:7c:1b:0b:bd:42:
9d:5c:94:e0:88:5d:74:90:19:f1:be:c4:a8:52:54:cb:ec:4b:
57:04:79:d1:87:f3:e0:70:ca:a8:50:3c:1f:63:b9:92:68:ec:
4b:dd:07:33:c7:35:f7:77:4b:69:a0:7d:0a:5b:73:63:12:9a:
78:3d:9e:5e:fe:93:2a:83:db:67:3c:b9:df:b1:8c:23:1d:e7:
d4:42:e0:18:56:bb:25:eb:19:c8:2a:2c:d5:d8:b2:b5:2c:6a:
a1:c6:04:80:57:ba:88:78:91:d1:a1:e7:9b:98:eb:b5:d1:b8:
97:ef:a1:75:79:4c:a1:7f:82:81:6b:52:ec:0d:6d:6c:8e:60:
a8:e8:bf:6c:8b:1b:3a:58:28:af:6d:a9:d9:59:cb:99:2e:c0:
d6:3a:c0:8f:03:55:90:f5:8b:a9:78:de:1c:5d:98:c4:cd:d8:
8a:dd:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:11 2026 by rpki-client