
$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
File: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft (raw, json)
Hash identifier: Sl0iSOtF+t4FYuBgcRKgNr4a5WF6Q2zIYs9tqdaCmgw=
Subject key identifier: 09:D1:7E:AC:DB:7A:36:65:A3:43:C0:E5:FA:A1:1F:20:0C:5F:EF:F1
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
Manifest number: 0359
Signing time: Tue 21 Jul 2026 01:58:22 +0000
Manifest this update: Tue 21 Jul 2026 01:58:22 +0000
Manifest next update: Tue 28 Jul 2026 01:58:22 +0000
Files and hashes: 1: 53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl (hash: RpHAigFhSl5LpfyhMXxP9E0lneF9/KfvWvgm+3UOPqI=)
2: 195EA596AC8711EEAC4B2427C4F9AE02.roa (hash: qzDfbZSfFhOLoupNrNu4vdZzMPtBKuYLgBCe+Y1In4Q=)
3: A27297A85E7C11F1BE1DCCAC1A7AAC22.roa (hash: kY8evhLvNqOxvi6zzC4UphXoibT3vvujN0fbVAHwYYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Validity
Not Before: Jul 21 01:58:22 2026 GMT
Not After : Jul 28 01:58:22 2026 GMT
Subject: CN=6a5ed23e-26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:22:60:26:b8:f8:4a:fd:f4:56:bf:a1:5c:
7b:e3:aa:d2:38:6e:34:38:db:fb:06:e9:8d:ec:4d:
33:01:01:08:7d:23:91:85:a7:eb:c0:fa:83:e6:76:
46:59:fe:99:c1:96:0b:c5:da:ec:b1:93:91:11:5d:
de:cb:50:73:94:48:be:71:3e:ec:a5:35:46:45:13:
66:c2:06:b5:ce:1a:b0:49:8e:4a:13:88:bd:67:75:
f7:2f:2e:3e:16:7b:fe:30:92:ee:19:0e:1c:aa:b3:
61:a5:4c:5a:f2:10:2b:df:08:57:3c:12:e4:85:54:
82:e3:95:55:78:15:bc:8c:40:a2:2f:48:91:3c:66:
ca:8f:7c:af:e9:45:96:39:1f:15:36:0b:33:3d:08:
b4:3a:13:02:fd:d9:80:dd:9b:5b:30:23:d9:8c:a2:
7f:27:da:ed:01:d4:61:2d:17:21:90:06:fd:24:11:
bd:18:22:42:b2:23:bf:6d:2d:e2:6e:fd:0f:66:5f:
9c:e4:11:3f:d3:6d:44:6e:df:6b:ba:15:d8:48:09:
47:05:62:38:f3:26:b8:25:21:0c:eb:29:15:42:12:
da:a7:07:12:46:51:4b:2d:9d:74:35:7f:9d:6c:c1:
a3:6f:92:39:02:30:2d:3f:ce:98:a8:e3:14:47:75:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:7E:AC:DB:7A:36:65:A3:43:C0:E5:FA:A1:1F:20:0C:5F:EF:F1
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b9:da:56:57:54:f8:7a:5a:a7:e3:5d:09:bf:7e:16:62:11:
18:dc:9c:d6:61:4a:a4:69:43:db:f8:d4:0f:d0:62:7e:83:e1:
45:a6:7c:47:40:a6:93:02:e4:68:3b:78:18:10:d4:7d:e2:5d:
f8:4d:c6:64:bf:1c:f9:40:60:04:cf:b0:b0:97:eb:2e:0b:8b:
4f:6a:8f:89:14:a5:ab:a8:58:8f:f1:ed:1a:bf:af:ca:37:78:
85:ef:96:3d:04:7f:ec:11:30:7e:0a:e8:f3:a3:7c:c0:1d:69:
d7:d7:87:cb:b9:0a:7b:58:b0:d9:87:40:71:9a:bb:cc:d9:0d:
5f:90:11:d4:d9:f3:00:7d:9f:65:df:32:ca:a2:80:44:86:53:
0d:7b:e7:19:fe:76:8a:fc:4f:a1:34:36:3c:c2:64:91:17:d3:
65:0a:68:14:53:38:3b:6a:e4:e9:ca:1b:97:e5:da:9f:8c:a4:
7b:6a:64:1e:de:d3:92:0b:02:26:53:c0:70:fb:15:b2:ed:93:
6a:1c:d0:85:73:31:f6:f1:a9:89:f3:50:22:39:9a:c9:ee:f8:
ff:8e:34:aa:49:e7:de:b7:ed:11:79:0a:69:09:4e:5a:0c:8d:
13:db:53:8f:db:29:6c:f4:0a:17:6b:99:fe:a0:d7:97:12:f8:
07:d7:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:05 2026 by rpki-client