
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
File: AWua7YGMT9MEeU6yQtiz5WdlpUU.mft (raw, json)
Hash identifier: dzwsMSwdLJ/7lg/FrmVfqRccJQuYBIj/rHBjv00CNrc=
Subject key identifier: 5B:F4:B1:6D:B2:43:A2:BD:1B:A9:38:DC:A6:5B:96:08:38:76:27:2A
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Certificate issuer: /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
Manifest number: 04
Signing time: Mon 27 Jul 2026 11:38:21 +0000
Manifest this update: Mon 27 Jul 2026 11:38:20 +0000
Manifest next update: Mon 03 Aug 2026 11:38:20 +0000
Files and hashes: 1: AWua7YGMT9MEeU6yQtiz5WdlpUU.crl (hash: xBK7w+eXPndwNZNbGvkNRLq5KSV4gaucRnE8IBYeuo4=)
2: ECDD26C485F411F18488A9A174A30FBC.roa (hash: VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Validity
Not Before: Jul 27 11:38:20 2026 GMT
Not After : Aug 3 11:38:20 2026 GMT
Subject: CN=6a67432d-8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:55:f5:e5:aa:0e:a0:78:ed:77:49:f0:d5:
aa:21:24:fe:ee:45:9e:7f:1c:60:f1:43:07:af:a1:
1f:1d:18:72:12:3f:ce:90:b3:c7:c1:c6:65:64:aa:
87:4a:73:f9:05:b4:5f:fa:f1:f6:e6:6e:cb:37:a5:
1c:7c:8e:19:2f:14:a2:6e:fd:7e:e0:fb:e8:8a:c4:
85:98:57:c1:3d:16:0c:62:10:e3:46:42:30:7a:4f:
fa:45:51:24:86:29:99:da:fc:21:7b:89:26:39:c2:
2f:3f:6a:79:d5:a9:25:18:d1:97:5b:08:6e:d1:34:
d9:8e:9b:09:20:b1:b8:67:80:7f:95:03:13:52:a0:
c0:ec:93:8a:c9:b5:a2:d0:d4:02:ad:9c:2b:b8:03:
1a:d5:ea:85:9a:8f:75:01:6f:35:0f:61:59:8e:ef:
7e:38:1c:c1:28:38:55:cc:7a:4c:18:3b:0b:60:db:
66:53:b1:e7:a5:5f:ca:04:40:d7:ef:42:c9:46:08:
c3:31:da:86:9f:95:80:15:a7:58:1d:bc:ce:74:0a:
21:52:bd:05:25:0e:c0:6d:71:20:4b:11:e6:c8:2c:
bd:cd:0f:a3:c2:4d:0b:d7:28:e2:ca:72:5a:87:d9:
f6:83:4f:8f:2b:2d:97:bb:28:33:64:9f:b5:ad:c2:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F4:B1:6D:B2:43:A2:BD:1B:A9:38:DC:A6:5B:96:08:38:76:27:2A
X509v3 Authority Key Identifier:
keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:be:b8:43:d8:89:5d:f9:fc:0a:5e:d8:9c:55:2a:12:aa:d7:
94:bf:b4:48:92:e7:26:5e:49:1e:d2:1e:b7:37:e9:23:1c:8d:
c8:42:8e:54:46:8a:7f:28:2e:00:ec:06:99:e7:a6:00:c3:eb:
e2:97:f2:dc:c3:47:48:b4:f1:1c:63:ef:4b:60:08:1b:97:ea:
bc:ae:08:e9:e2:a4:da:d5:4a:59:27:f2:5d:6a:55:f0:36:b2:
5b:d1:bc:69:4d:33:5c:3a:65:7b:4d:99:fb:27:80:b1:5a:11:
41:aa:13:b7:d5:1e:fa:9f:13:ee:5d:44:61:9a:75:17:e1:7c:
f1:36:b3:32:2b:66:45:47:15:dc:7a:2e:12:36:91:92:98:cc:
06:c0:9e:6a:5a:31:39:ae:fe:e7:a7:b9:1a:48:37:24:e7:d4:
34:4f:63:41:c3:76:be:32:68:cd:90:5e:c1:99:c6:14:f0:c0:
0a:10:3e:41:53:f6:37:a7:55:ad:65:dd:04:74:2a:fc:3b:a3:
e0:6a:c6:5a:1e:a1:07:bd:6d:81:4d:d4:61:75:92:c0:d2:93:
30:4b:fd:13:9a:7a:47:0e:da:5c:5b:98:e5:f1:09:e9:44:25:
aa:d0:98:f6:dd:f2:ed:8a:d3:47:82:05:66:dc:73:ba:97:ab:
f7:2e:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:57 2026 by rpki-client