
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json)
Hash identifier: UgPkC0I7B77fgp3m97BRooAkT9vQ3neGqxOv7Iz9Cc4=
Subject key identifier: 83:70:F4:F2:2D:E8:D7:D7:36:A7:A7:0B:3A:50:86:02:20:65:5D:4A
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial: 0C0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
Manifest number: 0BFD
Signing time: Tue 28 Jul 2026 19:06:16 +0000
Manifest this update: Tue 28 Jul 2026 19:06:16 +0000
Manifest next update: Tue 04 Aug 2026 19:06:16 +0000
Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: tMQfzo1KQ5nw/EW1t0TrOliXEY3EDyuazc3HGcDZ+4Y=)
2: 2B47BA20752211F19949AC3074A30FBC.roa (hash: 8LBmQzW90mWnOYxo6pn9f5t8jglPxy4JlaD5C1JFAyQ=)
3: 8149B27675E911F19295859071A30FBC.roa (hash: tdvIAv84+ObvJ7mIypgIHxRBp8brbZOBkzTBZnvClfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3083 (0xc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Validity
Not Before: Jul 28 19:06:16 2026 GMT
Not After : Aug 4 19:06:16 2026 GMT
Subject: CN=6a68fda8-9407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:14:63:78:66:0d:79:a9:c7:6d:22:3c:3c:aa:
3f:9c:ae:06:22:17:4a:2f:e4:a8:ff:9c:bf:03:00:
82:1c:e7:0c:e1:21:6a:77:22:47:92:0f:0d:3f:9a:
d3:7d:0e:a6:79:f5:af:40:7e:d4:9c:82:71:31:5c:
f5:cd:b9:d0:f4:25:e9:17:d7:70:a0:1d:90:e5:35:
1f:89:83:87:e2:b7:e8:e1:04:59:c9:33:54:1d:a9:
43:5e:23:09:55:2b:c9:22:c6:09:52:e3:c2:30:50:
6b:b4:d2:2e:9e:c6:34:96:55:7e:86:23:fa:db:90:
20:86:4b:17:e2:cb:9d:80:87:80:c8:97:6f:a2:6b:
88:1e:d8:d4:a4:c6:63:e7:1c:08:3b:f7:4c:27:ad:
b2:3d:39:59:30:9d:08:c6:f7:f8:37:23:95:59:07:
62:b2:0e:95:8d:90:c6:65:a3:cc:fb:21:d7:c7:b6:
e6:83:45:51:68:8b:5b:bd:85:eb:fc:c8:46:92:79:
dc:ba:7e:60:34:82:1f:b2:4c:73:ff:ca:26:49:b4:
6f:d9:f6:e4:34:0c:70:24:de:37:f7:85:2e:4b:bf:
d8:ea:09:03:3b:6b:0d:ea:e0:97:37:62:73:ef:88:
31:ff:60:4f:7f:65:26:11:cb:49:06:36:9f:20:db:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:70:F4:F2:2D:E8:D7:D7:36:A7:A7:0B:3A:50:86:02:20:65:5D:4A
X509v3 Authority Key Identifier:
keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3c:d9:cb:c1:c9:0c:9c:90:fa:f7:85:41:84:4e:b5:4d:5f:
c4:3b:e2:ae:23:1a:87:a3:7f:bc:fc:1c:b6:6c:81:80:ed:48:
6b:50:33:26:d6:a5:ba:f3:13:68:5b:cd:c7:cd:08:e5:bd:33:
fd:ff:bc:15:29:4b:c9:c6:01:aa:c6:db:ee:a2:54:06:51:fb:
fb:26:f5:e8:81:8e:03:9b:4a:55:24:5b:65:7e:37:00:40:bc:
48:c3:5e:40:c9:3a:d1:7b:f6:4f:38:00:44:aa:6f:c3:2c:72:
23:a4:8b:a9:1f:71:62:f6:87:b3:8b:0b:fb:69:bc:b3:01:d1:
3c:c2:0c:0f:98:fb:f4:4a:cc:55:c6:71:54:b2:b8:8f:59:48:
ce:c8:d2:cf:5c:b2:44:b8:7a:af:2a:19:09:ba:ea:e0:ae:a1:
c2:73:6b:73:08:22:73:f5:10:46:1f:b7:c6:a9:a5:42:8b:5b:
8b:d9:0f:94:19:91:34:99:e1:a5:d2:ed:e6:e5:80:60:82:a5:
ea:95:24:69:0b:0f:63:17:2a:0c:fb:1f:8e:36:b0:bd:f6:c5:
d8:aa:70:f3:9b:54:96:14:e0:f5:92:1c:17:50:69:13:85:e4:
b5:e0:5e:4e:b1:68:ba:dc:0e:fa:ba:85:2d:c6:49:14:95:c2:
46:24:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:57 2026 by rpki-client