
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json)
Hash identifier: nCGjFSkX1ek3DKFf49ZIhg1fp0RsFQNq46HnC3WA1nw=
Subject key identifier: 4A:2F:FF:7B:03:29:C2:B7:FC:C4:91:20:7A:73:B1:CD:30:AC:71:BD
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
Manifest number: 076B
Signing time: Sun 12 Jul 2026 21:42:01 +0000
Manifest this update: Sun 12 Jul 2026 21:42:01 +0000
Manifest next update: Sun 19 Jul 2026 21:42:01 +0000
Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: jlWpHpexg+/Bb6gEld/b4nhQ/J4syEj3syCoNAZi/Pw=)
2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: JK6/e0PvYBa8kGFQgLjtSrCPCDpo6wNDkFljh8D9dzM=)
3: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: NXfieC6S74PlG+JtYRQQl5gMzeIDNhGSgnxY2WBkw18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 21:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Validity
Not Before: Jul 12 21:42:01 2026 GMT
Not After : Jul 19 21:42:01 2026 GMT
Subject: CN=6a540a29-581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:da:46:53:07:85:2a:73:dc:b0:cf:5e:09:
fb:7a:57:25:72:a4:c9:cf:b0:8e:26:f4:71:cb:4e:
91:07:56:07:5f:28:6e:d3:de:2b:ec:f4:f1:5a:9a:
e6:65:ea:22:88:08:75:40:71:1d:20:cf:6c:22:16:
f2:80:18:9e:0e:77:65:dc:e2:29:89:93:e2:c6:e2:
09:0e:63:42:a9:06:cd:f2:86:97:46:8c:ec:5a:ed:
30:6a:60:4d:9b:7f:35:e5:9f:23:96:d4:fc:c3:61:
c5:89:c1:9e:a8:03:2f:96:22:b9:23:57:7c:9d:b3:
b7:28:f2:40:e3:57:f7:5c:8a:b1:84:52:f3:1d:14:
27:cb:8e:05:73:f5:9a:bd:a4:70:54:87:bb:be:ae:
d4:52:de:bc:2c:e6:32:c1:d0:55:a2:70:e1:d7:2e:
10:97:1d:27:c5:a2:eb:9b:4d:d7:55:79:36:43:b2:
65:5c:43:26:ea:42:ee:a5:4b:30:3d:cc:08:7c:86:
ab:ae:0a:e8:59:57:19:2e:83:30:7f:2e:db:7b:76:
20:b1:7a:d3:d2:5a:a3:89:b7:a1:12:b7:75:82:33:
bf:ef:96:fc:aa:82:96:7b:47:7f:46:c8:e9:da:d8:
e5:23:d3:c6:9f:d7:ee:60:58:fd:53:b7:10:ea:de:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:FF:7B:03:29:C2:B7:FC:C4:91:20:7A:73:B1:CD:30:AC:71:BD
X509v3 Authority Key Identifier:
keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:09:0b:ba:b5:0d:1c:1c:e8:43:91:85:0d:fb:bb:2a:00:
fb:b5:c7:2a:a7:cd:3d:1b:7e:0e:58:02:1d:a3:1e:19:52:32:
31:3c:29:99:09:a3:e9:7c:14:98:82:ef:85:16:99:8b:39:5a:
91:0b:0d:2e:ea:63:73:ae:b5:16:bd:97:3b:ac:8c:1e:32:4d:
7b:aa:10:02:4c:2e:c0:2e:f1:09:56:85:2e:b0:b3:d9:50:42:
e1:f0:e7:e9:25:19:bc:1a:4a:4b:09:67:7c:5d:c3:da:c8:06:
2f:ce:54:a7:03:e5:bd:20:c7:f2:5e:51:cf:d2:5f:a2:80:8f:
db:23:16:34:d9:fb:1c:77:56:fd:b3:5d:b9:ba:c8:37:d5:73:
75:f1:38:ec:9d:11:37:79:90:9c:61:9c:3a:7a:d8:29:09:41:
63:23:2f:3a:d4:db:d7:a1:34:89:4d:1e:e1:06:3e:21:eb:a6:
a9:98:47:34:8a:f7:9c:0f:51:dc:a2:86:0a:a4:e3:f5:a5:b5:
1b:b3:72:21:2d:3b:c8:22:7a:e3:1a:e6:2d:ad:42:c0:43:7a:
93:a4:55:a4:18:4f:30:e1:8f:48:94:aa:a6:bf:de:c4:00:b3:
70:0f:e6:e5:1b:55:b1:a6:68:e4:bb:99:65:aa:cd:04:2b:ee:
2c:3f:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:53:51 2026 by rpki-client