
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: +/t1x+IPTDMyUHMopplqSBZR3FqSm7npayVFxjp5IMI=
Subject key identifier: 70:DA:45:E9:61:9B:05:54:A5:2D:3B:94:36:CF:E5:C2:E5:5F:50:3C
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 62
Signing time: Fri 17 Jul 2026 09:23:51 +0000
Manifest this update: Fri 17 Jul 2026 09:23:50 +0000
Manifest next update: Fri 24 Jul 2026 09:23:50 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: e6jjaY/ekov9dFwB3BLsTUgck0HU5/7O+YFLfgOS8rQ=)
2: 75BC4B2A5D7611F1B2098786C1833773.roa (hash: ta8dEmU7Z8Oi4RN7K77WKBa90qpszc7XzNZIpq6JXPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: Jul 17 09:23:50 2026 GMT
Not After : Jul 24 09:23:50 2026 GMT
Subject: CN=6a59f4a7-5cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:a7:37:82:17:a0:89:3b:ff:89:cf:9a:a3:
4b:b5:5d:e0:54:8d:af:d4:85:56:6f:3d:8f:86:cf:
60:4e:c6:c8:34:21:31:a8:63:35:89:3a:39:6c:8d:
92:29:d1:a1:30:2f:da:e1:ec:dd:20:6f:cc:6e:b0:
9f:30:a0:97:54:41:65:0f:7d:6d:ad:7c:01:02:aa:
cb:da:e5:74:bd:6c:1b:96:aa:f5:07:99:0f:80:92:
bc:99:35:8b:9f:21:a0:fa:f1:d1:0d:71:27:05:5a:
fd:7d:0c:91:29:be:05:6d:37:4a:33:d9:44:46:37:
9e:39:fb:0f:85:d7:bc:87:a6:41:3c:1c:ac:37:6f:
cb:21:9f:a4:b6:42:61:01:e4:de:3d:03:38:4a:d8:
91:2f:7c:25:cf:0a:6a:79:3c:21:6a:26:69:f0:0f:
09:03:11:75:16:3c:26:b7:03:35:6e:3d:26:9c:34:
e9:ff:e5:96:fb:3e:f5:cf:24:04:76:31:30:b8:c9:
0c:78:f5:81:e9:c3:25:95:1f:45:41:ec:ce:d5:71:
c9:a5:0e:d8:7d:1c:77:52:0e:d9:9d:ac:0d:aa:06:
6f:e1:68:9b:b7:2e:c9:d8:50:09:b5:28:68:36:ce:
c0:17:90:4b:13:0e:b1:99:77:79:e5:0b:24:72:97:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:45:E9:61:9B:05:54:A5:2D:3B:94:36:CF:E5:C2:E5:5F:50:3C
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c5:27:03:fb:f8:2b:2c:57:b3:d7:b2:e1:80:47:5e:b6:08:
91:13:79:64:9c:35:f5:3f:f6:d9:e0:6a:16:ac:8c:13:41:96:
8b:a2:35:97:ad:8d:2b:a4:73:2e:27:21:0e:c2:35:65:c4:bc:
84:8b:15:c2:d2:7d:d6:8b:c5:f5:42:59:ff:ee:f5:7b:78:ed:
97:48:4b:59:c7:4f:94:53:88:d5:d5:1c:80:61:78:fd:f4:03:
b6:4b:ae:bd:b5:82:96:46:fb:fc:10:2a:05:63:58:68:e7:c9:
fc:ff:06:41:ed:ef:3b:28:e0:30:06:38:4f:38:41:39:e5:56:
fb:d0:d6:d9:dc:49:9a:b8:58:75:1e:b1:dd:9f:66:20:c9:28:
9d:56:31:65:9a:4e:ab:f6:43:38:b2:55:48:7f:8c:2d:01:95:
2a:8a:3b:6e:0e:13:b5:ec:45:0a:ab:e5:6c:00:28:76:5b:74:
e1:50:fb:9e:fe:5a:0a:cc:e6:c3:2e:05:00:6a:2f:77:1b:b1:
85:85:70:f1:90:b4:7c:f3:d6:0a:ac:32:5e:ea:ec:ea:7c:df:
98:bf:c1:1a:e5:66:25:3a:22:bd:e6:f8:50:38:ef:fc:3e:9f:
c6:ca:4a:de:82:11:ba:68:84:82:8c:6f:81:fa:b7:85:d9:be:
f9:dd:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:17:34 2026 by rpki-client