
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier: Ej0hZfjexDxMfCHrsw1QWd7xUkLjFAaPckFSb1M5r4w=
Subject key identifier: 56:CD:B9:49:F4:66:CE:84:22:D4:06:5F:78:BD:68:EC:19:61:6A:7C
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number: 75
Signing time: Fri 17 Jul 2026 09:08:12 +0000
Manifest this update: Fri 17 Jul 2026 09:08:11 +0000
Manifest next update: Fri 24 Jul 2026 09:08:11 +0000
Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: BDWT9njF23HdBDdR4pK1j0puU7INfSDzNfwjfgVX0YE=)
2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Validity
Not Before: Jul 17 09:08:11 2026 GMT
Not After : Jul 24 09:08:11 2026 GMT
Subject: CN=6a59f0fc-b20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:4c:ea:ca:d0:62:ba:d5:f1:03:88:f2:9c:
bd:09:46:fc:82:86:f0:ee:80:69:9f:6e:9c:08:6e:
3a:1c:64:65:22:20:7d:f0:0c:1d:07:48:55:fe:e3:
7b:87:f7:13:a0:56:a6:df:27:3d:9c:34:48:58:2d:
25:4d:e5:b4:9e:5e:0f:1a:45:50:2a:11:4f:3b:84:
2e:e1:07:25:dd:21:eb:a1:2d:26:73:d9:fb:ae:c8:
a8:89:e3:a8:c2:65:56:8b:ec:24:a4:d5:a0:ea:7d:
64:0f:f5:dd:23:00:50:a8:d3:f0:ae:66:2a:8e:8b:
d0:29:aa:4f:58:bd:6b:c7:de:82:2d:32:15:ec:c3:
ce:cf:8e:0c:95:0c:e6:b2:ac:69:16:7e:aa:16:f6:
46:48:c7:b5:f4:b8:22:41:eb:bf:e2:f5:54:69:51:
08:0a:0a:0d:e1:c2:40:8b:c9:bc:db:73:80:44:b6:
02:25:8a:8f:44:70:69:0c:be:59:7e:6f:8d:9d:33:
11:39:07:4e:af:c8:68:66:4c:4d:9b:03:cd:f8:c0:
fd:7b:ea:a9:68:d2:21:87:52:18:fa:58:92:aa:32:
6e:c3:84:c3:88:69:95:79:cf:aa:3b:be:93:5b:55:
a4:91:74:a2:cd:88:bf:c4:6a:2d:d8:9d:2c:67:d9:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:B9:49:F4:66:CE:84:22:D4:06:5F:78:BD:68:EC:19:61:6A:7C
X509v3 Authority Key Identifier:
keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:df:9e:dc:7d:67:76:2b:c6:2d:fb:c2:f5:6e:e3:5f:3f:da:
6b:99:68:76:5e:a5:48:ac:eb:35:53:27:02:3b:0e:01:3d:89:
65:e6:ad:54:f7:ef:2f:fc:f7:97:4b:dc:3f:8c:e3:54:82:fa:
6c:2e:36:38:c7:91:3b:aa:82:c8:da:9a:44:a8:15:da:45:c7:
e4:02:03:ca:2c:63:b9:48:02:d0:29:f1:88:4b:8d:c3:27:ec:
5c:c3:2e:48:8c:ff:5f:18:7d:6d:64:1f:60:6b:21:e7:fa:5d:
dd:c6:9d:02:18:c9:1f:35:bf:1f:62:93:48:4d:3c:20:45:bf:
d4:c0:b7:5d:d9:5c:ad:20:12:64:ad:8a:eb:be:d1:f0:06:0a:
16:18:c5:78:6b:84:01:e9:03:bf:8e:4a:51:b4:36:4d:48:35:
e5:32:12:b5:26:29:0a:be:01:3c:7b:c8:71:2f:06:be:3b:6f:
05:47:2f:63:7c:ff:d3:5c:82:66:61:70:31:81:9e:55:5c:2b:
2d:8e:9f:40:bd:a3:e1:d2:db:82:37:a1:f7:c7:99:d2:3d:07:
c9:e4:56:3d:c5:b5:4d:30:4f:a7:62:f3:87:d5:6b:11:53:50:
f8:ad:13:d7:27:e5:f0:0f:cc:28:e9:4f:23:57:b4:42:bd:78:
9d:51:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:34 2026 by rpki-client