
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json)
Hash identifier: MeFQ4uN891btOh4Zu1N2yalt5l7KlAzBwN/Xvy7hlrU=
Subject key identifier: 43:16:3D:8C:11:90:66:B1:3C:2B:06:7E:85:31:D9:49:46:D0:08:11
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial: 0E5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
Manifest number: 0E52
Signing time: Tue 28 Jul 2026 17:53:26 +0000
Manifest this update: Tue 28 Jul 2026 17:53:25 +0000
Manifest next update: Tue 04 Aug 2026 17:53:25 +0000
Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: SvOzfHYFpqhqTIEzNABU7juzPQSWw6mUSW/pVIA7Vrg=)
2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: HF4nucogvlWev/6+Vaa0aM/i/xbw1FYeTT4JnV0mPb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3675 (0xe5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Validity
Not Before: Jul 28 17:53:25 2026 GMT
Not After : Aug 4 17:53:25 2026 GMT
Subject: CN=6a68ec96-acad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:a3:6e:e5:29:26:84:46:e0:60:ee:d8:f9:
82:90:00:2a:5b:9f:f0:c2:62:c3:e2:2e:b8:65:3d:
3d:b5:d2:5f:4c:9c:1d:5e:5d:0c:2c:29:39:1a:e1:
0d:cb:d9:dc:f9:f9:6d:04:59:51:2f:86:ab:bd:d7:
16:76:40:75:d7:e3:4c:1d:34:71:3d:9f:9a:d2:9d:
8e:16:5d:0e:a1:36:40:6e:07:a5:60:9d:d1:0c:fa:
f1:5d:6d:44:b4:3c:7e:ca:fb:fe:0f:50:8d:34:28:
3a:a0:3f:08:17:62:11:a8:d6:6b:7f:3a:2c:bc:d0:
0a:4b:ea:85:c5:ca:99:3e:a4:99:78:e0:7f:eb:70:
52:1d:9c:a6:a2:6f:5a:12:c8:88:56:17:09:5f:8f:
4c:e3:09:5d:a8:eb:1d:f5:5f:1b:cf:b2:e3:e1:55:
a4:dd:2f:f0:5f:01:cc:8a:e7:f5:30:1e:06:04:b3:
3f:3e:7d:6f:81:20:10:b7:53:82:30:9b:a7:6b:19:
cc:57:ea:9c:fc:57:00:09:7d:53:ee:29:c5:c6:be:
1d:f1:bd:e3:19:2e:e8:05:d1:40:df:85:70:f7:9a:
33:a5:db:bf:dc:7d:fd:10:65:a6:6f:3a:cc:2e:f8:
70:cf:8e:2e:31:0e:f0:2e:82:53:bf:ec:c8:92:fb:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:3D:8C:11:90:66:B1:3C:2B:06:7E:85:31:D9:49:46:D0:08:11
X509v3 Authority Key Identifier:
keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7a:3d:d7:c4:d3:69:57:ca:55:e5:17:1b:d9:ca:a9:82:46:
20:bf:70:e6:53:35:eb:34:74:c9:31:ab:95:b7:53:9d:e6:c1:
4c:5e:82:19:4e:2a:5b:c2:2f:4c:9a:75:89:66:0f:46:bb:ea:
55:83:ad:ff:b6:fa:7d:83:86:7f:e6:e1:36:67:86:95:8b:a1:
7f:7c:5f:13:b3:ca:4e:d4:c7:d3:12:75:17:70:be:a0:d7:fe:
65:ac:f6:c5:45:81:6e:47:77:40:2b:27:ee:3a:ed:04:53:a0:
e0:a0:31:84:f4:b7:41:cd:75:f4:c5:95:80:a1:f8:fe:04:73:
76:ea:d4:71:5f:a8:e1:5a:7c:16:b6:ac:0c:85:27:4a:57:81:
0e:d1:d1:e6:d5:55:e3:f2:04:c4:ee:03:e7:69:76:ea:71:f8:
79:c1:b9:ef:4f:bb:60:9b:28:63:3f:e9:75:a8:0c:55:63:b8:
8e:21:5d:03:40:cb:6b:f0:b2:4c:ec:cc:c3:7d:05:22:9a:35:
43:48:c9:a7:68:1e:55:f4:b1:ba:b3:d0:c9:46:96:1a:ed:98:
35:51:70:e0:cb:10:da:a5:c8:66:ec:c8:93:06:b0:4d:8c:03:
da:d9:cc:9b:12:95:16:10:3f:80:1d:4f:c6:54:5f:14:f4:7c:
53:c6:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:36 2026 by rpki-client