
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
File: M23U8UX716kQau8fBtkXB9JQt3o.mft (raw, json)
Hash identifier: VHIxv5lUZvsoh2D0hTr9TD0gSUaQZPl2zFZOvURLfTE=
Subject key identifier: 9E:A2:62:50:49:D1:F5:0D:0E:2B:E0:68:00:7C:5B:F7:04:BB:78:D8
Authority key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
Certificate issuer: /CN=A91A9E90/serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
Manifest number: 19
Signing time: Wed 19 Aug 2026 09:43:06 +0000
Manifest this update: Wed 19 Aug 2026 09:43:05 +0000
Manifest next update: Wed 26 Aug 2026 09:43:05 +0000
Files and hashes: 1: M23U8UX716kQau8fBtkXB9JQt3o.crl (hash: wTdmsK8YlC2THRac4xYRw7QcUmSz+DEsMj2LpHdS2RU=)
2: 16261DCC85D411F1B888CCFF69A30FBC.roa (hash: KhZuvpiH1QtAzasVJFC3Nq++oQgjiVWH6Qo6hINf7iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl
rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Validity
Not Before: Aug 19 09:43:05 2026 GMT
Not After : Aug 26 09:43:05 2026 GMT
Subject: CN=6a857aaa-e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:0f:70:b0:19:f5:06:4c:de:b1:21:ab:d5:
12:cd:f0:d9:fe:50:2f:4e:3b:e6:e3:17:fd:75:c6:
43:f2:2f:07:5a:a5:7a:9e:86:33:92:92:92:e4:98:
f5:af:a4:a1:d5:1d:06:d9:39:08:ef:33:e6:67:85:
dd:78:1c:75:ee:df:5a:cb:1c:b4:9e:6a:c1:b7:b1:
29:6a:3a:2a:0a:43:c5:30:68:34:e0:d7:75:b9:56:
ae:06:96:d4:85:4f:80:d2:a1:fe:a2:6e:0b:a0:3d:
cd:e5:f8:28:c5:91:2d:5c:82:59:22:ec:af:69:32:
f1:e5:de:f7:86:a7:7d:1c:e0:81:1a:45:e4:cc:30:
13:e9:88:e9:5f:b8:e1:45:a0:0f:ea:87:f2:5c:7c:
ba:06:ac:68:ab:a0:7e:6b:f0:9a:42:37:50:de:e9:
6c:72:46:71:0c:2b:c0:41:06:e6:0e:af:c3:66:23:
af:cc:df:24:e6:ed:3a:1d:bb:20:0a:ea:76:c9:55:
73:0f:b4:c6:87:d5:56:23:4d:bd:e3:cb:d0:b2:8d:
d7:f0:7c:48:e8:4c:b5:84:4a:3c:bd:10:bf:8b:6e:
84:0f:9b:70:ab:43:cc:b9:e5:99:be:a1:d4:7e:7d:
c6:b3:e5:50:23:e3:6e:12:46:1b:5c:4b:d3:38:65:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:62:50:49:D1:F5:0D:0E:2B:E0:68:00:7C:5B:F7:04:BB:78:D8
X509v3 Authority Key Identifier:
keyid:33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:7b:78:af:53:e9:c3:53:94:e9:bb:be:42:39:66:ba:da:
ef:ef:b6:eb:4c:0c:b2:c8:f1:bc:0f:da:44:d7:ee:4b:09:0f:
3f:a7:84:3a:d7:22:f9:71:9e:a9:cc:1c:af:01:f0:2c:c9:e5:
cd:2d:cb:50:72:6a:20:07:ae:cc:72:af:23:cb:2c:41:ad:44:
55:1d:e4:f8:b6:4f:3f:aa:b4:27:d6:74:16:86:92:1a:aa:26:
66:96:0e:e9:6a:3a:b1:f1:43:08:99:36:63:75:c9:30:31:95:
93:4a:55:81:61:c3:31:30:37:8c:4b:a1:c3:7a:db:a4:d6:53:
c5:d1:25:8d:a8:b4:f7:39:3a:9d:55:9b:71:f2:c9:13:09:4f:
5c:80:8b:bf:ac:39:0d:07:19:2d:2a:b4:d7:f9:38:1d:8d:8c:
1c:df:6b:02:4e:9b:87:f5:a0:81:b6:6d:53:ae:3e:01:4e:bd:
bc:54:11:2b:8d:0b:8d:32:0b:6f:c7:40:1d:75:bc:2d:9b:9d:
79:d8:da:fa:ce:a2:af:64:c7:be:d4:a0:59:9f:b4:03:b6:45:
bc:db:f4:7d:5a:72:9a:4e:1d:ba:eb:50:0a:e2:61:76:2c:38:
a4:90:7b:3c:b0:cd:36:2e:6c:d3:b3:9e:b0:c0:1f:39:33:ea:
e5:9e:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:36 2026 by rpki-client