
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: tgeNjiLyOEfAwyBWfk7NC0tvGnpJms9JPlEqj9y3L/E=
Subject key identifier: 87:DF:F0:01:6B:D8:2E:4B:EA:C5:AC:60:59:99:9B:D3:37:A1:45:F3
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0DBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0DB1
Signing time: Mon 20 Jul 2026 18:08:36 +0000
Manifest this update: Mon 20 Jul 2026 18:08:36 +0000
Manifest next update: Mon 27 Jul 2026 18:08:36 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: GIlU4uEesDKsbTdidM0CdDZtC6U2nIEusmgjErHTN1g=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Validity
Not Before: Jul 20 18:08:36 2026 GMT
Not After : Jul 27 18:08:36 2026 GMT
Subject: CN=6a5e6424-f0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:82:b1:36:cc:85:cb:97:04:19:a8:c0:31:
94:a4:87:c3:fc:89:85:72:37:27:a2:83:8b:2f:28:
60:80:7c:c2:91:e5:7c:65:44:41:d0:cf:35:52:2f:
19:58:96:b5:d5:98:79:dd:bc:96:ef:99:ee:45:55:
10:6b:2c:b5:5b:db:40:8c:8f:76:e8:dc:55:b4:2a:
cc:89:24:ce:ad:1b:27:ec:0c:c2:19:fe:c1:d4:11:
d5:33:4c:f0:4d:e4:5a:42:54:ad:5d:9d:e7:7e:33:
87:33:29:4a:d4:ce:7b:49:9e:1e:65:d8:1d:d8:98:
d1:9a:55:51:b7:0f:44:85:10:22:47:3a:26:6e:8b:
16:b3:42:16:76:06:7a:e1:69:54:d4:53:83:ba:0b:
a5:b7:25:27:59:46:a3:3a:44:d3:c6:69:2c:e0:be:
98:18:cc:7e:5d:cd:43:5f:3f:4e:b9:c4:74:2f:22:
36:44:ee:e1:72:b6:cf:41:c7:c5:41:4a:9d:b7:0a:
b2:75:74:bd:c9:16:3c:1e:ac:c4:ed:50:69:05:b0:
49:44:1b:9c:51:f2:03:41:70:a5:17:69:69:1a:68:
37:fc:3c:c5:58:90:aa:0d:7e:1c:1d:fb:61:3c:7f:
20:29:58:6c:69:28:38:68:6a:8e:2e:00:64:1d:d9:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:F0:01:6B:D8:2E:4B:EA:C5:AC:60:59:99:9B:D3:37:A1:45:F3
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:1c:8a:c2:2f:4f:c6:45:61:32:1d:48:1f:da:97:dd:4b:
1d:a4:cf:8b:07:11:f7:98:f1:44:ce:e6:58:19:dd:11:77:94:
07:89:aa:1c:6f:a3:9e:55:32:ce:0e:7f:14:ee:bc:2b:59:88:
77:3f:98:2c:38:eb:2d:92:a1:ef:bb:c1:7d:5d:c5:9f:37:ae:
da:64:e0:9d:9e:13:5c:7a:e0:52:bb:37:96:58:b1:3b:1e:38:
67:8a:2f:7d:7b:a0:f3:e9:3b:73:60:2e:11:ae:77:40:22:74:
af:aa:c0:23:3e:92:c2:84:2b:d7:82:db:b2:8e:24:cb:4c:f3:
35:16:a7:71:da:72:e9:72:e7:90:81:aa:c3:15:bf:bb:c8:b6:
dd:c6:c7:88:06:04:ea:92:21:7a:63:3d:42:df:2d:03:49:78:
0a:a0:b6:56:b3:65:86:c0:94:ae:59:9c:4c:19:44:cf:89:29:
15:c0:7c:99:5b:d0:10:f5:8f:84:01:b7:9f:82:94:6a:95:99:
df:64:6b:7b:c6:ea:d0:dc:bb:58:52:46:d5:d4:af:8f:aa:e3:
46:33:e1:6f:90:ed:fc:0f:99:27:6c:01:74:cc:11:4d:ee:0d:
d6:c0:df:fc:f1:08:37:e5:55:03:f6:40:eb:56:5a:bd:70:93:
73:67:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:41:16 2026 by rpki-client