
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
File: tOIgv84ikKotb4jteq4w3okVyUw.mft (raw, json)
Hash identifier: JnReK9WbowMFmbz85uEI5Gv+GM2salRWWcVDDr97WW0=
Subject key identifier: B3:87:01:DA:ED:9F:F5:D2:69:C6:01:0E:46:DC:3A:17:F7:E9:F1:F6
Authority key identifier: B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
Certificate issuer: /CN=A91AC415/serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
Manifest number: 0B
Signing time: Fri 17 Jul 2026 04:53:21 +0000
Manifest this update: Fri 17 Jul 2026 04:53:20 +0000
Manifest next update: Fri 24 Jul 2026 04:53:20 +0000
Files and hashes: 1: tOIgv84ikKotb4jteq4w3okVyUw.crl (hash: yHeMqnqruvXE5z1FdV4iNdG2E8HeEqh1vgiJQQAWwKI=)
2: 39D27246750511F1B847DD7F6CA30FBC.roa (hash: cia8IPAkix/MNyKAepXMq+8vc+QuoRzXeBNvwlaYww4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC415, serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Validity
Not Before: Jul 17 04:53:20 2026 GMT
Not After : Jul 24 04:53:20 2026 GMT
Subject: CN=6a59b541-89d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:c5:87:61:10:cc:0c:ad:3f:3e:26:2a:8a:
64:d1:51:5c:0e:fc:8a:a0:1b:ff:28:92:fc:96:1a:
98:a6:18:74:90:93:85:1e:1d:78:4a:f1:3b:0d:54:
9b:d3:6c:41:32:45:77:06:d6:03:b7:a7:41:d6:2b:
78:47:14:ac:ce:9d:19:0a:9c:cc:9c:e3:d0:7a:22:
5f:18:ea:04:a6:b9:5d:54:d0:6a:c1:5e:e6:35:06:
58:e8:1a:44:74:c0:86:cb:35:e1:e8:f2:df:61:03:
8d:8a:2f:e6:bf:8a:cc:e0:89:3a:63:4c:26:01:03:
38:f0:16:19:43:b5:4b:a2:cb:04:dc:e0:b7:ae:af:
2f:33:da:cb:c7:8c:81:64:c4:aa:2a:19:8d:86:58:
f3:57:b4:63:16:80:cb:68:f1:15:c1:74:fb:e3:33:
e6:25:9f:3a:8c:00:de:e4:f4:48:30:74:4d:d3:ea:
f8:d2:8c:1d:9d:bd:07:28:35:5f:57:c5:f9:95:e1:
29:8d:23:96:96:1c:5d:ee:ae:d9:7c:94:b9:62:a9:
3e:8b:70:45:69:9c:a7:ef:f0:6e:22:fd:e4:53:e3:
db:e7:04:40:8a:8b:7d:8c:49:cd:b4:cf:13:fe:0d:
e6:08:c1:b4:6b:00:93:5e:45:98:5a:ea:73:4a:b6:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:01:DA:ED:9F:F5:D2:69:C6:01:0E:46:DC:3A:17:F7:E9:F1:F6
X509v3 Authority Key Identifier:
keyid:B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:7f:15:20:76:bb:55:7b:86:44:22:6d:df:e9:df:de:aa:19:
63:9c:b2:96:c6:45:5b:1e:50:3c:71:30:f7:a6:eb:fe:84:17:
b2:d4:96:0c:f4:56:cd:7a:72:56:2c:3b:b2:f0:af:73:43:48:
46:2d:05:ef:b9:a5:69:93:56:fc:8b:ab:a3:2a:4e:26:20:36:
0f:42:e7:1a:df:bd:bd:1d:3c:c8:8a:21:9d:7d:0b:47:71:09:
b6:d4:3e:a9:23:cf:cc:a2:ec:ce:15:7e:50:07:bf:fc:bb:8b:
45:cf:ac:66:b3:ce:1d:80:c8:95:5c:af:bb:99:6d:1f:70:12:
b1:31:f8:4c:c3:7d:e0:a1:56:5a:da:e9:ef:1d:72:e4:35:db:
4e:49:0f:95:82:0e:f3:34:70:44:87:1b:2a:7f:cb:92:e5:60:
b4:6d:96:d4:ee:71:82:a7:40:37:f6:96:36:88:18:04:7d:60:
2c:f6:00:15:7e:43:d4:c7:93:dc:e4:ff:2e:a2:93:a0:db:35:
18:38:22:0e:f9:a5:2a:42:a7:b7:4f:07:86:c2:ae:4a:03:1a:
8f:44:45:5c:e8:25:8e:e7:28:5a:33:8b:e5:fa:36:7f:c3:d4:
fa:61:0c:1f:43:5a:07:90:ad:70:fc:0e:91:dd:00:06:2d:04:
0d:4f:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:11 2026 by rpki-client