
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File: S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier: VFLk+aISy0MbXc+djXTctEf8TzwShzlJQQE4c5wyRfw=
Subject key identifier: 00:32:61:EE:38:EF:E4:DE:4E:16:04:2F:7A:F2:93:47:A8:C7:E3:C7
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number: 0752
Signing time: Mon 06 Jul 2026 22:19:49 +0000
Manifest this update: Mon 06 Jul 2026 22:19:49 +0000
Manifest next update: Mon 13 Jul 2026 22:19:49 +0000
Files and hashes: 1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: FmHPCZGuP1nD890DH+LwsDArs3iCAhf8xZLiHWS6VYc=)
2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Validity
Not Before: Jul 6 22:19:49 2026 GMT
Not After : Jul 13 22:19:49 2026 GMT
Subject: CN=6a4c2a05-935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:c6:8b:13:ae:88:f7:7b:44:ca:24:36:1b:
8d:57:04:38:0a:01:e5:98:25:b6:e8:fe:44:7a:96:
5a:2c:f3:59:e4:d2:61:3f:e2:72:e6:80:f3:7c:23:
75:48:49:25:d0:3d:37:b9:6a:9d:6e:4e:9a:49:6c:
0e:b9:be:ac:3a:c0:1d:e5:04:f4:00:41:94:06:49:
54:8e:e3:0a:ab:b9:4b:4d:3a:48:4d:e3:3b:2e:5c:
a1:7c:49:d4:1f:ba:74:03:d5:c1:c8:39:36:ac:cd:
e5:bc:bb:d2:bd:c9:c6:5f:28:da:24:4e:a3:a3:3a:
70:bd:4a:36:6b:92:5a:aa:bc:9f:99:61:00:be:d6:
d8:53:be:19:97:a6:7c:48:98:f0:27:ae:aa:c9:20:
3c:d0:f8:5d:c7:fe:66:50:b1:38:98:42:3a:d3:96:
a6:a7:00:c8:ff:4b:e9:dd:e4:e7:86:cb:91:e2:7b:
11:2b:18:f2:e4:c5:12:0b:36:16:17:2f:88:9b:e9:
65:70:d2:7d:80:4a:4d:d0:b8:01:6d:fa:fc:f4:93:
5e:b2:06:b7:48:a2:4f:67:a0:21:80:56:0b:c2:f5:
9f:9b:a4:a4:ba:91:22:7a:bc:be:60:bb:0d:e1:e2:
92:5f:0b:a7:74:68:e3:42:c1:cc:c8:61:61:1e:0c:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:61:EE:38:EF:E4:DE:4E:16:04:2F:7A:F2:93:47:A8:C7:E3:C7
X509v3 Authority Key Identifier:
keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0b:49:31:5f:65:1a:d8:c2:56:11:27:c5:01:a2:c6:e0:da:
76:4a:7a:0b:63:ea:f5:16:ac:1b:3d:92:c7:3c:b2:d3:bc:38:
13:9d:fb:6b:35:d4:6c:d2:6f:d3:38:75:2b:e4:45:89:8e:6d:
9a:f1:eb:1b:f1:0a:4e:21:16:66:68:3a:95:4c:74:af:4d:98:
52:39:9c:25:ea:ab:69:7a:62:e1:2d:7d:27:8e:2c:e8:91:af:
b9:49:25:ab:d1:57:3d:7f:cd:02:68:3c:ba:33:b5:f4:1c:bd:
5e:dd:c4:c3:16:1f:29:57:c3:93:77:b0:93:fc:48:e1:da:3a:
c9:2c:6a:11:67:5b:f0:a6:e3:eb:20:79:b7:fa:65:a0:30:bb:
66:22:6b:ee:9f:db:3c:df:97:3b:5a:71:49:67:bd:77:c2:71:
8d:e7:ef:1c:c7:bc:10:30:f3:d7:39:1e:55:cb:96:65:64:b0:
26:8e:b0:d0:f7:8f:10:44:e4:ac:4b:de:ee:f0:7e:07:08:85:
fb:18:cb:6a:bd:f7:24:ba:db:49:02:5e:4c:ac:c1:e6:6f:c7:
02:47:87:16:61:04:15:aa:62:29:c9:23:f5:9b:04:a9:95:32:
a6:e2:50:49:4b:2c:66:64:42:1d:b8:e9:d9:74:4d:19:ab:c6:
d1:37:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:30 2026 by rpki-client