
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File: 1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier: qWwQomxtmE9jhr25qaX9azl1sh9aQKIN2vsi74C1DLA=
Subject key identifier: 09:52:8F:20:61:8F:5F:B5:6B:FB:4A:51:5E:9A:93:EC:AA:69:D0:A6
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer: /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number: 29
Signing time: Mon 27 Jul 2026 11:08:42 +0000
Manifest this update: Mon 27 Jul 2026 11:08:41 +0000
Manifest next update: Mon 03 Aug 2026 11:08:41 +0000
Files and hashes: 1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: GZq0+7Ng6xc0Kk50J3Kxsw7GRmU/AL2PZRgSL6PlqJE=)
2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: iVkTRkOcMKD5H0a8Zq7n5fJ183jZidSEFDRuqOcWQeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Validity
Not Before: Jul 27 11:08:41 2026 GMT
Not After : Aug 3 11:08:41 2026 GMT
Subject: CN=6a673c3a-fb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:92:d3:a7:8e:73:f0:d7:94:7b:bf:c7:5e:
c0:ae:2e:0c:a4:89:13:ce:61:99:e4:22:3b:e1:78:
82:32:55:59:d8:3e:ef:a3:11:0d:77:b4:84:f7:3c:
b4:30:5f:0f:e6:9e:53:68:b8:de:60:a9:ac:75:cc:
3f:3c:2f:ad:e8:db:09:e6:d0:7c:24:2c:19:1a:cd:
3e:b5:5d:29:3d:00:e9:57:77:17:2a:b0:4e:94:9b:
27:67:9a:bb:b5:6b:02:e8:d2:fd:bc:02:8b:8e:8a:
ce:d0:83:2a:f9:fa:4a:ac:97:4b:30:a8:0a:b6:0e:
bd:1d:f7:10:b4:4f:6c:93:93:f5:9b:3b:b0:5d:93:
0b:84:42:e1:d3:2e:c1:0f:dc:91:55:76:a2:ef:b4:
45:31:be:bb:93:31:a4:82:5a:8a:ba:9f:56:e0:cd:
1b:44:91:09:bc:e1:d7:bd:a7:7e:49:3f:81:bc:f9:
ed:1f:76:81:6b:67:a4:94:61:d6:be:a1:7d:3c:c9:
e1:be:ca:84:5d:93:74:f2:fe:ae:68:89:80:f6:79:
fb:59:8a:d3:aa:6d:93:c5:76:bb:59:d2:59:b0:26:
e2:1c:fc:d0:1c:3b:0d:3e:a6:9b:81:64:78:a7:70:
d2:31:03:11:4b:84:91:fe:76:b2:93:ac:cd:a7:82:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:8F:20:61:8F:5F:B5:6B:FB:4A:51:5E:9A:93:EC:AA:69:D0:A6
X509v3 Authority Key Identifier:
keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:88:f1:de:7d:f5:f2:81:cc:12:ae:99:72:17:63:68:32:
eb:5a:07:01:cc:ac:c3:b3:3b:2a:84:89:63:80:09:c0:11:b9:
a7:a5:c7:9c:38:68:a1:72:58:81:e4:cd:9c:22:aa:dd:00:89:
7a:9e:02:6d:a3:08:06:48:88:8a:ae:ee:47:20:c5:24:3b:d9:
c1:46:31:3b:25:47:34:d5:83:0b:02:ef:db:db:cb:57:ed:0c:
6b:b5:e1:be:66:fc:bf:64:9a:e2:d1:00:76:be:4f:ce:69:e4:
c0:67:fa:03:73:22:bc:6d:6c:3e:de:a6:7a:91:92:e3:61:db:
6f:ba:ab:a8:06:76:3c:64:5d:0e:b9:0c:02:53:84:3e:31:3f:
21:18:4f:74:7e:9a:04:37:84:38:1a:f2:48:06:bb:ea:fc:4d:
95:fb:82:10:17:bf:e1:70:34:2b:c3:36:da:90:f1:86:3f:73:
c7:2c:16:22:cf:77:e2:48:ed:ad:ca:b5:59:ec:27:b6:a6:a7:
80:59:1d:2f:29:b1:f9:e9:9b:ba:1f:78:cd:31:58:cb:ee:23:
d7:d8:bc:6d:e2:fc:a7:9a:19:a9:11:96:37:d5:1e:15:18:26:
19:89:49:ae:82:f9:41:f1:84:1b:4e:28:b9:b9:6b:58:1e:f4:
24:e0:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:44 2026 by rpki-client