
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File: _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier: g1IIKwhXgxnQRNDVhoErHh8KogrEZACiLSsO0ThYF18=
Subject key identifier: 38:92:15:EC:B9:72:A4:B7:13:C1:4A:88:00:2A:EE:76:8A:A0:0C:F7
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer: /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number: 42
Signing time: Fri 17 Jul 2026 09:46:08 +0000
Manifest this update: Fri 17 Jul 2026 09:46:07 +0000
Manifest next update: Fri 24 Jul 2026 09:46:07 +0000
Files and hashes: 1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: UU1Ij8oKQDDnZmYIqa4bXWCBi/iq4N5VORnvos6x/v4=)
2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Validity
Not Before: Jul 17 09:46:07 2026 GMT
Not After : Jul 24 09:46:07 2026 GMT
Subject: CN=6a59f9e0-0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:a3:de:6e:2b:5c:8b:ba:c7:88:e2:9d:b0:
f6:62:d3:83:cc:78:19:91:4f:5a:6c:dc:bf:93:ed:
f0:80:69:ab:eb:02:5a:ae:82:c0:bf:4a:ac:e0:ca:
c3:38:01:ab:61:de:71:2d:43:29:56:71:85:62:2b:
99:57:4f:ea:f0:74:87:fb:60:1b:c4:e9:28:a7:99:
b7:55:1d:75:38:4c:5e:47:96:46:e2:30:0d:bd:75:
3d:2d:a4:bf:87:39:1f:cb:12:82:16:47:fa:b2:28:
b8:c8:4c:66:b4:f8:e2:c6:74:69:59:ff:dd:82:cd:
10:e5:da:ce:53:93:4d:83:61:35:6a:55:77:61:2b:
81:af:13:21:a6:16:87:47:52:69:53:83:a0:42:ed:
ac:ab:27:90:5d:e5:6b:4e:dd:ca:f3:b3:ab:ea:8a:
f7:c0:18:5c:3e:9a:02:46:ca:08:e4:9b:b8:d9:ac:
86:71:ab:08:5c:4b:1a:5a:15:8d:35:6f:30:b9:4c:
73:a6:2c:1b:57:ed:e6:4a:bb:48:1d:8a:8a:11:ef:
56:f5:e6:b6:14:de:43:45:a0:21:8a:20:bd:de:20:
c1:0b:dc:0d:80:e3:92:9c:c2:ef:1f:15:f8:d5:29:
43:22:e9:dd:3a:d1:2f:16:2d:d4:8c:88:6f:ef:43:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:15:EC:B9:72:A4:B7:13:C1:4A:88:00:2A:EE:76:8A:A0:0C:F7
X509v3 Authority Key Identifier:
keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:d2:b7:46:37:54:73:d8:7f:a9:c0:43:07:54:64:02:39:
9a:52:10:75:5a:cf:2a:83:7a:8e:dd:7a:d7:15:8b:94:3b:da:
06:de:fb:38:31:96:be:2a:5b:29:e3:12:6e:71:7e:74:b6:91:
74:90:59:e8:34:f9:f2:cf:4e:72:b6:bb:81:3f:8e:93:d0:91:
d0:e6:ff:77:ab:ea:5c:0f:0d:3b:35:19:27:7e:e7:8d:14:1e:
4a:f7:c3:1c:89:6f:1f:8f:f3:59:e8:3d:9b:3c:15:23:ba:d5:
4c:27:35:a7:f9:f4:24:38:cd:bf:05:ff:16:b9:67:dc:18:d5:
76:f3:b9:2f:d1:b2:51:59:7b:40:9f:8c:58:2c:0b:3d:ea:af:
34:b4:f7:de:d4:d5:36:c5:16:f9:ff:72:e4:30:ca:83:ff:92:
d5:26:ec:12:0e:c2:86:a8:00:3d:56:a5:48:74:1f:38:13:88:
d0:b0:37:8f:95:7f:b1:4f:ee:f2:8b:0b:17:13:ae:a8:f0:8f:
5c:08:79:c7:7b:22:5e:3a:c0:4d:14:90:1a:c3:60:52:2f:20:
fd:72:21:9f:de:f3:35:2e:06:4b:70:e4:9f:1f:ad:35:a0:1b:
38:b6:5e:2d:ec:d8:28:69:70:9c:d8:cf:91:1f:35:3c:18:b7:
cf:48:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:27:13 2026 by rpki-client