
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json)
Hash identifier: eg1esu71HoOQXXtth+SdA6oqaq4eSA/OX1qFRhG1vBY=
Subject key identifier: 2F:BB:E3:3C:F6:21:7E:77:BD:C8:5B:AF:01:E2:05:2C:91:24:6F:44
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial: 3598
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
Manifest number: 357D
Signing time: Thu 16 Jul 2026 15:14:33 +0000
Manifest this update: Thu 16 Jul 2026 15:14:32 +0000
Manifest next update: Thu 23 Jul 2026 15:14:32 +0000
Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: lQWO/6j/qYjAHrlDICVqKhdnrjjUsIlR4SuEicbGgCw=)
2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: bTJP4oJep0TWxqdiJ1HCR8673aSbcj6c/Mn/+kjZzhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13720 (0x3598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Validity
Not Before: Jul 16 15:14:32 2026 GMT
Not After : Jul 23 15:14:32 2026 GMT
Subject: CN=6a58f559-2bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:3f:30:fb:01:67:17:4c:78:5f:c4:8f:55:
d9:4c:df:9b:bb:9a:e8:f1:ed:d4:a4:42:fd:ac:99:
d7:12:43:34:25:c7:f6:3b:00:ff:01:3a:78:c7:5a:
4b:5a:97:28:6e:f9:93:12:60:9f:c0:19:59:d6:fe:
f0:14:50:31:d5:70:59:14:b7:20:3a:37:e1:b9:89:
61:fc:e6:a9:6c:75:b6:df:78:a5:da:9c:91:c7:21:
c3:dc:4f:c2:2e:44:51:30:e6:9a:50:89:29:e0:26:
21:be:4c:c5:ea:fb:93:ea:cc:22:09:dc:f3:88:42:
96:c8:2f:68:09:27:78:57:58:0c:91:18:ae:03:4d:
66:f7:5d:5a:c7:8e:d1:fb:bf:7a:48:42:4e:1a:80:
62:9a:08:9c:62:e9:e2:d9:c6:b7:eb:3f:93:de:f7:
12:3b:ab:b7:b3:ce:34:04:a4:99:39:c9:69:4e:1c:
4d:44:f9:5a:a7:fb:2f:7f:ce:d5:7b:c7:4c:33:0a:
87:8e:86:ee:ef:12:19:29:b9:19:d2:4d:b6:d5:6e:
0d:b3:82:02:6b:1c:1f:8d:e6:5b:52:b1:c3:b8:72:
64:2a:dd:b8:56:f6:56:4d:96:c8:fc:d0:23:27:b0:
da:e0:0d:31:cf:e4:f1:95:82:9e:3a:77:c6:6b:80:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:E3:3C:F6:21:7E:77:BD:C8:5B:AF:01:E2:05:2C:91:24:6F:44
X509v3 Authority Key Identifier:
keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:75:8c:ef:ea:e5:a5:73:40:55:94:70:34:b4:6e:42:79:
e7:fd:86:30:00:32:ea:1b:15:ea:9c:2f:cf:38:1e:a6:f4:64:
4e:ac:5f:b0:eb:95:f1:53:b4:61:27:f6:7f:d8:bf:21:0d:bb:
e6:49:a5:49:88:7a:5a:38:7c:f4:8b:79:ef:15:c5:17:14:e8:
98:0a:2e:79:8e:65:ab:46:a1:06:89:c4:bf:85:de:0c:5d:58:
3d:aa:2a:64:28:90:b0:35:55:03:49:01:d0:22:55:94:06:96:
1e:f7:a1:79:13:a1:81:bc:b8:4e:3c:e1:3a:9f:5d:d2:22:4f:
06:56:d8:f7:3d:38:ef:09:32:8a:e0:f0:2f:f4:79:22:20:e2:
b7:c3:8f:81:b0:4d:2b:42:3a:02:fc:9e:e3:3c:f2:a6:2f:1f:
d6:49:07:1d:2e:d2:b5:77:a6:69:68:71:88:3f:a3:4c:81:22:
18:c0:de:ec:1a:54:6c:2b:40:9b:a1:60:51:fb:e7:30:0e:af:
0d:21:a1:ca:89:1e:71:57:52:dc:08:6a:65:a7:6d:c9:51:43:
90:91:8d:52:2a:cb:57:cf:40:0a:db:e5:c0:86:7a:08:9e:09:
3c:84:0f:96:60:1e:c2:ec:99:17:de:7e:ac:a6:76:0a:60:21:
e4:a2:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:56 2026 by rpki-client