
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier: eNhvyr72SyN8h9nlldTCmrSNIzfKyn1vbBjLQnrQTqc=
Subject key identifier: 45:F5:5F:A9:9E:93:0B:80:0F:5A:1F:32:1C:7B:3E:3A:91:F3:BC:03
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial: 1325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number: 1308
Signing time: Mon 20 Jul 2026 17:09:57 +0000
Manifest this update: Mon 20 Jul 2026 17:09:56 +0000
Manifest next update: Mon 27 Jul 2026 17:09:56 +0000
Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: Or/nMZEY48ToTmK/Mqpji89ymBmUdXFarX0VZnI2aiM=)
2: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: h19/MR9hkMVPGpl7f/+5Vxrt7msI3muNoOIhYt+wOkY=)
3: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4901 (0x1325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Validity
Not Before: Jul 20 17:09:56 2026 GMT
Not After : Jul 27 17:09:56 2026 GMT
Subject: CN=6a5e5665-864e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:32:29:68:04:40:98:7f:a1:a1:73:e3:ab:
e2:0e:d9:09:7b:6d:df:59:8f:64:9f:01:d5:cb:ea:
92:21:67:e8:4c:9f:e3:48:c2:9a:55:96:0d:cc:ce:
36:fb:ca:dd:00:58:9e:8b:90:bc:8a:4c:37:a2:0b:
d4:b0:a8:0d:b6:52:7b:df:2b:0c:e8:73:5a:8e:e1:
85:0b:82:ad:98:b6:d5:07:53:99:a6:5d:63:61:21:
de:84:af:3c:7a:20:cb:19:8d:64:11:aa:43:b1:ab:
c5:2a:e8:97:8d:c8:27:af:b2:92:30:6f:04:dc:3e:
2b:e3:e4:ad:06:5e:f7:d4:4d:e6:59:59:9a:7a:de:
2f:32:5f:58:42:2c:f6:f3:10:56:36:f4:4c:0e:50:
94:96:fd:34:1f:9e:46:b8:f8:50:09:86:4d:de:ee:
a0:b0:27:9a:3f:06:4e:d0:3c:42:13:10:1f:1a:ed:
4c:dd:46:7d:1f:47:0d:75:76:f1:87:62:31:a4:55:
b0:8c:7e:c2:bc:5c:6d:c7:db:3d:02:5c:76:a3:42:
c4:ad:35:77:7b:2f:77:ce:63:da:d9:4b:80:f0:ba:
7d:1c:f0:76:f1:ba:58:e2:2a:ac:44:1d:64:e6:3f:
76:f5:c3:35:d6:58:3a:42:3c:96:9b:23:08:3f:41:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:5F:A9:9E:93:0B:80:0F:5A:1F:32:1C:7B:3E:3A:91:F3:BC:03
X509v3 Authority Key Identifier:
keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:80:3c:1a:68:f1:23:f0:9b:d5:ce:dc:4b:3e:d0:e2:92:
07:2e:8d:39:1d:84:66:05:2f:d8:91:f1:d9:02:aa:05:34:52:
5d:4b:51:17:61:b1:ef:21:2c:d8:42:4c:8a:31:7d:1f:7b:11:
60:23:72:32:0f:e1:70:75:80:fe:c3:b0:94:f1:40:ab:14:93:
c2:d1:b2:06:6c:2e:c3:d2:62:4a:cb:80:cd:7d:ab:0b:63:a4:
c0:00:02:d5:17:2c:2b:04:79:b8:02:30:89:4f:ef:ce:54:00:
ec:2a:57:c9:d8:46:75:07:ab:29:0d:1b:ec:9b:14:17:09:f9:
ab:43:2b:b6:a5:93:50:c9:44:0b:fc:16:1b:ce:b5:9d:e7:f5:
37:14:33:1e:5b:eb:fa:1a:81:a9:aa:ca:be:a6:79:97:29:0f:
56:bc:5f:7f:df:49:5f:62:4e:45:ea:f0:cc:62:9c:11:3b:a3:
c5:95:d4:12:4e:08:09:c0:d9:40:f3:99:46:51:50:69:7c:78:
fa:16:3e:80:6e:84:e5:95:7e:48:bc:11:0c:c1:d8:8c:cb:3d:
d4:31:80:b7:30:6b:56:7a:2e:63:70:ba:22:fa:e6:50:f3:24:
2d:37:fe:ad:f4:c9:3e:40:87:2b:a3:0f:d3:20:2b:03:fe:4e:
80:8a:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:46:37 2026 by rpki-client