
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json)
Hash identifier: s/Dz0XL3dMf738gfevLBiTGinoAWCAX7UkS3BZr2ldA=
Subject key identifier: E8:93:CF:B0:96:F0:CD:5D:0F:38:D1:E3:7E:D6:4D:9A:E4:F0:96:E5
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
Manifest number: 5D
Signing time: Sat 25 Jul 2026 10:04:52 +0000
Manifest this update: Sat 25 Jul 2026 10:04:52 +0000
Manifest next update: Sat 01 Aug 2026 10:04:52 +0000
Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: ocz+DknbaufLG+oaFfJ1mqDRgbyDb+J6j9OfuvU0Ajk=)
2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 10:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Validity
Not Before: Jul 25 10:04:52 2026 GMT
Not After : Aug 1 10:04:52 2026 GMT
Subject: CN=6a648a44-5405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:98:69:a1:2c:31:8a:42:91:c9:cc:7c:79:
27:8d:b9:59:b7:fd:4f:f7:b5:ea:de:8b:6c:c9:a3:
f8:ba:5a:fc:f3:16:18:94:d2:6e:7d:43:28:fe:39:
84:dc:9e:fa:fd:3e:c3:5a:8e:5f:fa:43:0f:6a:8f:
9f:b7:13:fe:f1:fb:78:ea:89:b5:a4:67:c1:88:0e:
30:96:fe:3a:70:fe:b2:2e:fb:1a:d8:ad:bc:85:96:
08:1c:84:7c:72:93:82:e2:15:56:0c:8e:e4:83:ae:
ff:e2:af:cd:6d:03:93:55:91:a8:1f:ba:92:9b:51:
3e:e0:e6:ba:be:0d:46:f5:41:dc:23:7e:70:1c:df:
4c:0b:4b:ad:08:a1:06:6e:12:a8:10:13:93:c9:bd:
88:d9:8a:a7:06:92:b6:fe:22:4b:0b:ed:b8:93:e1:
7b:f0:a6:df:89:71:5c:c7:77:06:91:78:57:48:93:
3e:f5:13:8d:5c:2a:94:50:bc:9a:ad:e3:19:7a:98:
8e:e6:23:72:e1:8a:58:3c:02:c0:29:a0:89:06:56:
29:42:d5:f1:e1:f9:44:fe:fa:8f:7a:ee:ac:9e:6f:
e6:19:44:0a:bd:bb:cc:92:c4:20:7f:c4:e5:0f:ff:
ba:35:c5:15:2e:e4:76:e4:d1:62:70:28:55:15:c7:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:CF:B0:96:F0:CD:5D:0F:38:D1:E3:7E:D6:4D:9A:E4:F0:96:E5
X509v3 Authority Key Identifier:
keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:05:6b:a7:9a:b8:3b:6b:84:4a:ad:c2:c4:e2:3f:8a:a8:
74:e4:80:b0:ca:ff:f7:74:02:50:77:f5:17:67:ed:93:1c:2d:
eb:58:02:d7:c2:ef:d1:84:bb:68:7d:11:fb:1b:83:31:87:ba:
ee:b8:d4:9e:fe:75:32:45:38:bf:8e:23:db:b4:86:fd:7c:7d:
31:19:81:63:9c:cd:6a:4c:51:aa:dd:d3:01:30:98:69:a7:b6:
de:a6:6c:30:f6:76:7e:b6:38:c3:ce:77:44:28:6c:70:33:c0:
d2:17:02:cc:a6:21:98:ff:e8:7d:d6:69:bf:ef:6c:3f:38:5b:
d1:30:c1:94:ce:3a:6d:75:5d:2e:0e:e4:41:cd:cf:bb:41:ee:
50:d6:6c:71:5a:72:bf:d4:49:8a:d2:cd:b8:09:04:88:99:70:
5e:02:dc:d2:eb:0c:5e:b8:50:95:50:53:83:b3:53:76:b1:8e:
52:66:e3:b0:99:fa:0f:c2:b0:fb:08:77:35:b0:bd:db:b1:c9:
d7:91:71:91:6c:0b:57:48:bb:a3:ec:64:3e:83:6f:cd:1e:4a:
59:52:d1:5d:d3:b8:e6:28:da:4f:7d:f7:a6:4c:57:2a:f9:73:
21:33:64:e2:96:2b:2e:76:96:cd:07:38:73:dc:bd:19:b5:65:
59:8d:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:38:04 2026 by rpki-client