
$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File: ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier: magbJ17IsJyTMjYeQvjZ1ynOeWXb2O0npyHMz0ICIJs=
Subject key identifier: F2:20:66:B0:03:33:A5:87:B6:E0:BE:46:84:E5:32:41:B1:25:87:93
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer: /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number: 58
Signing time: Tue 21 Jul 2026 01:22:06 +0000
Manifest this update: Tue 21 Jul 2026 01:22:05 +0000
Manifest next update: Tue 28 Jul 2026 01:22:05 +0000
Files and hashes: 1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: gQV9xLjvI+Jzh0Wuwlk+G1Ok4B3kXlmpJrlyozZopbM=)
2: 56C55F20266411F1AE95FD6DA8833773.roa (hash: Bh/+aoYsXA1eMtFp1ijM0hnLldVk4y3NMxI4DJ5jwNI=)
3: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: 8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Validity
Not Before: Jul 21 01:22:05 2026 GMT
Not After : Jul 28 01:22:05 2026 GMT
Subject: CN=6a5ec9be-5d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:6c:09:e0:c4:cb:8c:d4:dd:5f:0c:b9:b8:
ca:5b:49:cb:cf:69:41:69:41:59:ae:74:a8:33:e2:
7f:c1:c3:7b:5e:9b:19:22:a9:c7:66:36:c0:8f:8b:
2f:c8:d7:61:13:72:4b:8f:cf:61:59:13:43:66:cf:
74:6c:c4:69:cb:c0:bc:e3:54:4c:4a:dc:b0:e8:bc:
41:18:72:10:b9:a5:3a:bf:23:69:82:64:42:94:23:
a8:f2:4e:ad:09:9f:c9:15:0c:17:8d:1a:d7:78:ce:
9e:d1:c3:e2:b7:b4:3b:4b:a3:1e:a7:7a:70:1d:08:
e7:6e:2c:5f:3c:dc:bd:12:a0:44:93:15:2a:bb:e9:
37:35:94:af:71:91:a9:32:7d:1a:30:2f:94:31:ee:
8a:c6:86:0c:e1:64:cd:3b:3c:16:ed:fa:e1:cc:aa:
b9:a7:5f:8c:e4:d0:84:c0:d8:48:e0:ff:c5:1f:b1:
59:0e:f6:00:fb:c1:34:d3:86:ef:08:7a:14:b5:95:
c6:a2:ea:e9:08:ea:50:e0:f7:cb:c8:12:4c:ed:b0:
6c:ff:42:6a:20:99:f3:97:da:50:79:a8:84:1b:42:
9a:77:7f:ac:32:6b:96:09:3f:dc:ae:5e:73:70:9d:
de:c4:f1:79:72:05:9a:ff:1f:f6:79:38:9b:74:86:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:66:B0:03:33:A5:87:B6:E0:BE:46:84:E5:32:41:B1:25:87:93
X509v3 Authority Key Identifier:
keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:14:dd:cd:a8:dd:f0:1f:b9:7c:cb:e2:46:ad:28:cd:55:
eb:c1:50:ee:ac:3d:b2:11:d7:ff:be:ca:cc:42:5f:07:3a:96:
bf:8c:27:4d:31:a9:a9:24:0c:c1:75:52:90:1e:46:79:cc:ae:
fe:d3:fa:df:22:59:72:2f:9f:ab:3c:ee:84:b3:bc:72:62:a4:
15:a2:4f:4c:47:68:f0:90:0e:52:b9:30:a0:55:b2:aa:57:e2:
88:1a:f3:43:76:27:64:cc:65:9f:1e:f2:ab:36:22:da:91:81:
b7:78:07:86:6a:7b:61:9d:cd:d6:09:83:72:06:f6:b9:d6:ef:
fe:d5:24:72:a0:ea:d3:d0:1d:38:13:a0:3e:f9:0f:10:b8:ac:
4c:c3:d9:af:c5:58:db:c0:40:ba:67:3f:7f:19:5d:d1:d9:24:
24:21:cf:59:90:91:cb:ff:31:2c:6a:72:01:f3:c5:12:1a:3b:
a6:64:c4:73:96:3e:f8:d8:23:0f:4b:0d:b1:25:8d:0f:73:1a:
51:27:ab:56:57:db:6a:7c:62:a5:00:7c:47:f0:b6:0a:ba:ce:
c9:5a:65:9d:c4:95:bb:d9:2c:52:fa:87:e3:33:b2:22:81:34:
4e:69:f1:77:37:78:09:b7:d0:34:ae:fe:40:3f:d6:70:12:11:
38:1d:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:33 2026 by rpki-client