
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier: Vd2uFUcmRbQtsjpc8+iJWP4sP1YaKuSjRnDlh85XPN4=
Subject key identifier: 16:A4:2A:5E:B5:C1:23:D5:B2:53:60:D5:03:AC:D1:68:87:45:1E:42
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number: 07BF
Signing time: Thu 20 Aug 2026 21:19:09 +0000
Manifest this update: Thu 20 Aug 2026 21:19:09 +0000
Manifest next update: Thu 27 Aug 2026 21:19:09 +0000
Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: jN2sb4pR84g/PmdHovJHhl6KYyYsaX92hXWU9QAffuA=)
2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: ZZOQZPDyiLZTqV8WbUexxdia9It2J3YHCvfk5XQ2eMo=)
3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: +unTxmS/iLt2Dr1BIXJYLku10bUj+HTQ+FfTOg9lpds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Aug 20 21:19:09 2026 GMT
Not After : Aug 27 21:19:09 2026 GMT
Subject: CN=6a876f4d-3c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:4a:94:93:23:01:95:f0:13:c8:26:96:92:
76:72:3e:f4:86:4e:67:f5:b3:cf:e4:eb:d3:8c:e4:
1f:d7:7d:3d:99:ed:f8:09:ea:01:05:66:53:4a:fd:
86:a8:48:42:30:76:7c:86:3d:e5:5c:ef:68:7f:6a:
a1:ef:7f:a8:a8:a1:88:2c:71:6d:bb:36:8c:a6:cb:
ff:04:eb:20:1a:5f:be:e0:44:d1:de:02:d1:09:c6:
60:5f:c1:f7:ce:85:a2:64:d1:ef:00:62:76:99:7b:
12:53:41:7e:26:2e:50:e3:d3:83:54:dd:4f:4f:5d:
df:2b:eb:6d:56:8f:b7:8e:16:93:58:0c:e5:4b:17:
2e:33:a5:45:5e:28:5f:ac:c8:ba:3f:ba:9a:8e:65:
d0:fe:8a:9d:4c:55:21:11:cc:75:a3:95:c7:cc:c4:
99:c4:7f:91:13:cd:7a:b1:54:b6:57:07:07:c3:d0:
a9:ee:0f:16:aa:0e:15:10:d1:4a:5e:fc:d1:b9:41:
40:4e:4f:84:1f:45:76:4c:fd:e8:d8:a1:36:28:be:
4b:34:ef:12:4d:48:a7:a3:53:68:de:14:13:1d:c4:
72:e2:dd:b4:1a:09:a3:ea:9d:46:5e:2e:40:ce:f9:
b9:82:ee:b0:37:89:1e:b8:ec:75:90:2d:1b:23:62:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A4:2A:5E:B5:C1:23:D5:B2:53:60:D5:03:AC:D1:68:87:45:1E:42
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:51:a1:d6:70:75:00:7d:49:50:04:99:bb:cc:32:a9:5e:b7:
3b:de:ea:81:6d:88:b0:f7:a4:c4:09:0b:3b:d4:e6:64:d2:3f:
4b:49:4b:a6:a0:41:92:70:1d:0e:0f:a3:e4:16:5e:75:a9:d7:
a3:61:2e:7e:ff:12:c3:fc:ae:cf:2e:01:12:1b:21:fb:27:fd:
1a:b4:8a:ab:ff:48:15:2a:cc:14:b7:a3:89:3e:ee:8e:b9:16:
fd:df:ef:78:e2:69:14:e7:bf:7b:12:01:e8:96:fe:dd:01:94:
23:d1:95:b4:9d:39:9e:58:36:f2:3a:c9:0b:fc:9e:0f:21:2c:
64:37:1a:bc:c7:35:96:dc:e8:da:f2:d0:d2:ab:b6:eb:4e:d3:
d6:64:dc:ad:24:d2:28:9a:9a:7e:38:11:d4:ab:72:ee:4b:6d:
bf:77:ac:f0:07:c0:21:a9:bb:93:d1:94:d5:f0:87:53:e1:29:
33:2a:37:2f:52:39:1e:f4:ea:1c:87:7b:42:47:e4:c7:c3:15:
ec:20:c2:51:ca:67:80:1b:e7:f1:b0:59:91:5d:0a:ac:4e:3a:
7d:e4:e6:a4:c4:d0:d4:b7:9b:72:a9:30:bb:3b:6d:2f:60:49:
60:08:e8:7a:14:be:57:4b:00:15:51:5f:01:13:40:af:b2:58:
5f:2b:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:53 2026 by rpki-client