
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier: dPgxB03UjXu2g9v4SQ97p7GD2kUn1GF2P8BY2TDiPYM=
Subject key identifier: 68:9A:AD:ED:6A:84:98:D6:B8:4F:64:AD:3D:37:40:9B:3F:90:4B:C1
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 15F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number: 15E2
Signing time: Tue 28 Jul 2026 16:49:21 +0000
Manifest this update: Tue 28 Jul 2026 16:49:20 +0000
Manifest next update: Tue 04 Aug 2026 16:49:20 +0000
Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: juuINPbVSuJ0Zsu2+4H1ASyh2TOWBZayF6Y19ngopl4=)
2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=)
3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5623 (0x15f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: Jul 28 16:49:20 2026 GMT
Not After : Aug 4 16:49:20 2026 GMT
Subject: CN=6a68dd91-b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:25:9e:0c:4d:6e:ec:f9:75:84:76:bd:b4:
68:08:a4:69:9d:cd:22:9b:c3:a0:9a:a4:d4:40:b4:
4b:f0:c5:37:a8:17:36:fa:e6:c3:5b:72:01:90:49:
c6:2d:dc:93:cb:19:d1:60:d5:81:2e:f2:07:3c:be:
1b:d4:66:ab:06:62:99:45:66:9e:52:ca:9a:09:1d:
bf:cb:95:31:e3:4c:41:43:de:67:b0:56:a8:ce:e7:
03:07:5e:c7:05:f7:00:77:47:fb:66:98:dc:bb:0e:
de:f2:c1:bf:5c:e5:48:01:df:a5:fd:15:a2:be:65:
fd:06:76:dc:ff:97:81:9d:45:6b:c5:37:15:1c:4d:
1a:e8:da:0b:84:2d:d2:f6:e6:20:38:53:88:c7:63:
da:b7:9f:3e:86:e1:bc:b9:80:2a:8c:69:83:15:20:
0b:a3:51:a0:fe:0a:db:00:c6:e1:bc:49:91:f1:d6:
10:0e:68:6d:a6:cb:5d:91:71:1a:24:ce:23:26:28:
e8:c7:73:2a:81:8c:43:2b:ab:07:2a:0c:90:fe:31:
a8:10:e4:b9:e3:24:a0:18:32:89:ea:df:dc:5a:8a:
81:d3:44:b8:6a:bb:eb:dc:0f:16:29:08:ee:87:a0:
a5:74:06:ca:b8:c1:46:31:71:c9:e3:15:25:16:f0:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:AD:ED:6A:84:98:D6:B8:4F:64:AD:3D:37:40:9B:3F:90:4B:C1
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:a6:29:79:87:84:d4:3e:18:ea:fd:93:31:b1:01:05:de:
7d:39:1a:d8:14:21:55:62:c9:51:2f:9a:23:24:97:73:d8:02:
cf:16:3d:ab:f6:c5:98:52:df:8b:11:1a:dc:96:d8:ed:2d:d5:
70:50:ad:7d:0f:0f:da:35:7f:81:61:5e:75:25:3a:c1:9e:eb:
3c:b0:a4:7e:d9:7e:96:a4:b8:34:95:15:28:de:e1:1e:ee:bd:
5c:48:1d:86:09:d3:9d:84:99:31:ea:a8:9f:1a:6c:33:d1:c0:
51:14:d3:b3:a4:d7:98:be:34:b7:73:f0:ec:c9:34:4f:30:12:
7b:e7:21:31:dd:40:81:f7:56:3b:4f:7f:d6:c8:51:7f:16:5d:
a2:52:3b:38:87:a6:8c:c0:1e:a2:54:14:20:12:79:c0:d2:d9:
a7:a2:27:c0:b1:bd:a8:89:ac:86:8b:54:f7:bd:d1:f7:e4:b6:
3a:ce:49:0d:e2:0c:38:a0:45:4f:5d:40:68:41:c3:e4:01:80:
32:22:65:9c:13:22:28:34:a2:37:63:79:c6:33:db:72:0c:28:
0a:b3:ce:71:79:15:d5:30:8c:a6:70:c3:28:9b:41:94:64:25:
0c:d8:8c:e9:4b:f4:16:6f:5b:84:b4:6e:62:cd:b5:7f:5f:54:
63:1b:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:26 2026 by rpki-client