
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier: LC8A0z2NtDSx6JtbCg7r29SmAA1ANV8RZ7Ly1lPQ/zk=
Subject key identifier: 44:17:26:F2:6A:D9:46:31:D9:8E:8A:4E:00:B3:F8:33:DA:94:5B:0E
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0E42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number: 0E31
Signing time: Tue 18 Aug 2026 18:01:10 +0000
Manifest this update: Tue 18 Aug 2026 18:01:09 +0000
Manifest next update: Tue 25 Aug 2026 18:01:09 +0000
Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: x6FfMol3Sc/Tx+z4fDR1cVAO8P8aUpswvmOPOtLLR1I=)
2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 3dUCIeGW9ZSEXPUxbipGG/ek5tGQ+5C3cytMAnP5RWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3650 (0xe42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Aug 18 18:01:09 2026 GMT
Not After : Aug 25 18:01:09 2026 GMT
Subject: CN=6a849de6-cfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:75:03:65:47:a1:dc:62:5b:bc:5b:8c:b7:
2a:8a:e9:f4:2e:79:90:65:1d:e9:7d:13:fb:fb:63:
6a:22:5f:e5:52:8c:ca:98:17:2b:da:4c:6b:c2:85:
3e:3f:5c:28:f7:ee:8b:c7:ad:13:6f:a5:29:09:58:
38:28:a1:c4:21:b6:6e:e0:e4:d3:96:b2:d3:e7:7d:
d6:ca:93:4d:88:aa:07:a4:af:9a:71:18:d9:4b:cf:
c4:48:a1:61:2c:c5:24:b5:f6:9f:9f:61:6b:8b:d5:
4f:d6:72:c7:d1:83:35:9d:b0:87:3f:db:41:4b:53:
77:b5:3f:06:40:d9:4d:5a:bd:48:0b:04:2f:70:99:
0f:21:98:b2:62:cc:f8:39:78:73:02:40:1a:47:3d:
d6:6b:ad:f8:00:3d:cd:e6:82:e6:a3:a6:03:32:98:
0d:61:7d:6d:c9:70:d2:7f:01:99:fd:14:89:d6:ff:
fb:f4:d9:28:5d:ff:d4:eb:3f:7e:1d:f4:30:60:cf:
01:b4:08:0c:9d:6e:4f:7c:17:46:f4:bc:a1:1b:80:
bb:0e:cd:76:a1:2d:11:56:b1:43:d0:cc:d7:8c:92:
fe:76:39:91:03:1a:59:e7:fe:7d:ec:e3:81:3e:fa:
15:4f:bd:61:14:bf:89:ed:3a:1e:b1:42:b8:22:b4:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:26:F2:6A:D9:46:31:D9:8E:8A:4E:00:B3:F8:33:DA:94:5B:0E
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b2:2d:0a:b3:21:27:72:99:58:01:3e:82:0d:0f:28:97:15:
e0:4e:c7:bc:10:b0:f8:bd:b8:75:bc:5c:14:e0:78:bc:f2:31:
52:39:3c:73:ba:2f:4a:00:10:0d:1b:7d:02:df:40:9b:e4:04:
b1:ec:76:97:dd:74:1c:8f:c1:0b:6e:34:d7:82:30:cf:ca:55:
78:ca:b2:e0:3d:e8:36:10:e1:6e:9b:fe:1d:b2:88:d2:48:7d:
fd:ea:32:41:41:1b:5e:7a:ed:84:31:31:4a:82:3d:8b:36:f5:
b3:9b:8d:85:a8:3e:39:ae:a2:38:ea:dc:7a:b9:96:ef:3c:7f:
7b:79:96:2f:45:ef:f0:b1:ba:1f:81:27:36:fc:2f:48:0f:26:
61:d2:e2:3c:1f:cd:99:01:ae:ba:d8:85:77:8d:32:56:f8:0e:
9c:d0:11:35:78:d8:67:43:2a:77:03:bc:57:8a:8e:e8:a2:8e:
9f:b2:b3:6e:87:fc:ca:97:8f:91:bb:d9:c6:e3:9b:04:74:4a:
df:61:6f:c7:a7:c8:5b:c1:7b:87:2f:c0:3c:91:05:30:c7:8f:
b7:77:1b:4d:80:d8:6d:71:62:e6:6f:ca:56:4f:b0:b5:59:f2:
58:d6:9e:9d:e3:23:dc:eb:2d:39:93:86:6b:96:af:c8:dd:aa:
23:1a:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:19 2026 by rpki-client