
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json)
Hash identifier: rVaUx8CRAa+NYB3NQj1AR9XQpBXKM9gY4oNam4QbWCY=
Subject key identifier: F3:11:74:AB:59:25:C2:F2:8D:9F:76:40:2D:F3:07:58:6C:96:FF:32
Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
Manifest number: F6
Signing time: Fri 17 Jul 2026 07:32:23 +0000
Manifest this update: Fri 17 Jul 2026 07:32:22 +0000
Manifest next update: Fri 24 Jul 2026 07:32:22 +0000
Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: xOKY5G44ZOpSVwdbrUAUBpKTqiTcqP3xkr8mvDb9ry0=)
2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD
Validity
Not Before: Jul 17 07:32:22 2026 GMT
Not After : Jul 24 07:32:22 2026 GMT
Subject: CN=6a59da86-cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8f:6c:66:89:e6:88:ae:46:5d:66:3d:c2:2a:
b3:6c:47:ef:80:2b:ba:4d:57:01:07:17:b2:a0:3a:
ff:8e:99:e3:ba:37:63:09:00:1f:58:f4:33:e6:6e:
d3:a6:17:4e:bc:58:69:0b:a0:8b:d3:cb:14:92:72:
ad:e2:21:fb:20:4c:19:2b:a3:c6:94:6e:e9:cd:f8:
54:f7:b7:33:f5:2e:f4:fe:4b:1b:58:b2:9b:82:45:
bf:b0:80:e7:54:62:2d:52:d8:80:51:d5:43:00:4e:
4a:31:dc:1b:54:aa:79:24:ee:12:cc:3c:8c:81:29:
38:97:75:52:32:40:56:78:d7:a0:90:fe:9e:93:17:
9a:79:01:b7:7a:4b:45:bd:db:0d:58:09:30:e7:49:
2f:22:80:67:d2:29:18:aa:c0:51:40:f3:15:d2:66:
52:ee:c4:aa:b8:d5:fa:d0:f7:a1:d3:86:94:a0:8e:
27:0d:30:fa:1b:29:ce:8d:12:60:9e:dc:90:72:3f:
9d:fb:49:10:47:04:40:01:53:d6:ca:9a:7a:b9:00:
3a:04:78:82:96:94:7b:de:a0:8f:ee:2e:b6:25:4f:
cc:a8:4b:73:37:8d:18:af:84:06:be:b4:2d:3a:26:
03:49:4b:0a:28:fc:7f:69:4c:94:ac:c6:27:d2:7c:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:74:AB:59:25:C2:F2:8D:9F:76:40:2D:F3:07:58:6C:96:FF:32
X509v3 Authority Key Identifier:
keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f0:37:43:4d:2a:58:4b:fb:f8:6a:65:c8:c6:13:12:de:05:
62:b0:28:f5:22:d5:10:10:41:10:a4:d7:03:c3:ea:68:e3:fd:
a9:e3:d5:6d:1e:86:cc:e3:f5:ff:77:b8:23:7d:89:0b:b7:c9:
ea:4c:06:e2:b3:f5:c1:c7:c2:d1:d6:34:cb:93:51:a1:53:b4:
a4:f4:f1:82:43:ee:b0:44:71:2a:1b:17:1b:fa:a4:0e:13:d1:
f2:ea:a2:4b:e4:d9:7c:f2:0d:9a:c4:f9:7e:e6:f3:3a:8a:4a:
f4:10:ab:35:fa:a0:3e:94:44:74:8b:46:67:e8:bc:d0:a7:96:
e4:2d:9a:39:1f:90:0c:f8:54:fa:af:e4:a8:27:05:be:59:09:
c1:d6:a8:94:2a:06:2e:cd:91:5a:ad:99:fb:76:67:14:c1:79:
9d:58:b0:e5:9f:40:33:cf:14:27:51:6e:49:de:c3:bd:65:a8:
df:85:85:42:35:68:a2:9b:d9:79:52:1c:99:5b:0f:e0:9a:b0:
21:32:d1:d1:61:b9:cd:43:65:1f:a5:70:7f:03:3e:ad:53:d2:
5e:9b:13:40:27:18:b0:b8:79:19:c8:0e:f3:0e:92:b2:5c:cb:
54:9d:90:83:af:32:cc:e5:2b:78:cf:c1:af:98:14:4c:36:8c:
a1:fa:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:31 2026 by rpki-client