
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier: 801TmFgYs50r57ZlVMOkDPPNURO6jurGVLJ8JdstZPI=
Subject key identifier: 70:E1:25:78:97:EC:4B:1B:96:75:C9:FF:81:B0:DB:7F:41:DF:7F:EF
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number: 0580
Signing time: Fri 04 Sep 2026 20:11:02 +0000
Manifest this update: Fri 04 Sep 2026 20:11:02 +0000
Manifest next update: Fri 11 Sep 2026 20:11:02 +0000
Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: 1pWSE2nPMaVhLbBcvGFjNJFDa3VldsJraHomY52k41I=)
2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: J561xmVSlPQuiaRbnBKYde82eZlXfxPuqU5+nzE9q2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Sep 4 20:11:02 2026 GMT
Not After : Sep 11 20:11:02 2026 GMT
Subject: CN=6a9b25d6-cc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:fd:fe:28:de:7f:dd:1a:44:65:dd:f6:df:
d0:b9:cf:a1:0a:5f:d3:8e:d2:7b:9f:49:e5:28:b4:
22:36:6a:78:29:77:ed:c4:38:bf:89:6b:f2:ad:72:
39:30:eb:af:97:0f:24:b3:0e:f9:dd:8e:94:d1:42:
60:d0:f4:d2:7d:c7:37:a1:1a:f5:2c:b3:40:7b:a4:
ad:c9:5f:c8:b5:d0:41:01:71:74:39:1c:89:44:fd:
ba:e2:34:e2:74:3d:86:bd:1f:9b:8d:bf:ba:36:4c:
57:81:37:27:75:4d:51:9f:dd:f9:d5:0f:a7:98:12:
97:8a:75:76:09:5c:64:cc:c8:34:39:dc:26:e1:82:
06:38:46:fb:6d:8b:cb:38:90:f7:c9:ba:f3:a0:7f:
4d:15:a6:20:43:cf:76:48:81:57:f8:54:85:62:da:
24:65:95:67:90:1d:90:1b:57:c0:13:a4:d7:ba:a3:
31:12:38:d6:f9:9c:d2:14:5a:1a:dc:60:94:b0:8b:
f0:2b:39:64:df:ef:4b:6c:8f:43:d4:6f:41:d9:ab:
99:7d:c3:47:e4:5f:95:bf:15:33:4a:29:43:37:fa:
4d:50:81:f4:25:99:1a:c8:d3:71:5b:ac:8d:8a:a8:
21:5d:83:d2:49:51:fe:e8:84:07:19:f6:a3:84:88:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:25:78:97:EC:4B:1B:96:75:C9:FF:81:B0:DB:7F:41:DF:7F:EF
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:99:a9:37:a8:b0:c1:d5:e5:fe:d6:09:32:38:cd:ec:ee:75:
c1:30:77:f5:36:62:d9:dc:a2:73:f6:27:da:53:68:66:8d:d4:
71:34:ae:78:b7:bf:a1:8d:87:1b:9d:84:9f:b9:3d:ad:d3:16:
f4:db:1c:4b:59:d6:3e:f5:6c:73:8d:c3:71:2f:45:12:18:71:
2f:a1:84:6f:0d:4d:94:53:ef:8c:5b:04:94:80:62:50:ca:d7:
8b:61:5e:02:ad:0f:90:98:f2:b6:67:d9:5d:73:9a:f2:d7:69:
1a:67:35:10:d9:dd:a4:b4:e8:04:d9:94:cf:62:40:1c:c0:33:
67:e0:10:5d:6d:36:18:ed:f1:9a:0c:ad:fb:d4:1b:4f:64:e7:
85:2e:d5:9e:e0:dc:98:fc:1a:18:05:15:89:3d:39:82:08:ab:
b0:9f:15:b1:61:3c:2f:bc:d3:d9:e7:19:d7:91:3d:f5:d1:39:
ef:a5:20:bf:42:7a:59:1a:3b:3f:89:b9:e9:db:12:77:d0:bc:
cb:e5:f9:c5:57:33:74:bd:00:b6:d1:9f:32:02:05:a0:c3:c3:
7c:8d:81:d1:a9:db:43:9f:57:82:f5:86:8b:f8:93:17:7e:bc:
bb:c1:ce:c2:5f:5e:d5:56:59:b2:b9:64:09:27:2f:ac:85:e7:
f9:91:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:19:03 2026 by rpki-client