
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: AnBXQArLlkkRmFo5suvubjlaSbLOljmA/ilGuD7HJjQ=
Subject key identifier: B2:C7:75:EA:DC:0C:19:AC:FB:A5:51:2A:52:CC:BC:07:66:1A:1C:66
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: EC
Signing time: Fri 17 Jul 2026 07:45:39 +0000
Manifest this update: Fri 17 Jul 2026 07:45:38 +0000
Manifest next update: Fri 24 Jul 2026 07:45:38 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: N+W3CNxuI/Lv7tCORrPOz8iJtCRgRCODtSSGgSo9KLk=)
2: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Jul 17 07:45:38 2026 GMT
Not After : Jul 24 07:45:38 2026 GMT
Subject: CN=6a59dda3-8b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:2f:7a:80:e1:64:4d:67:3a:12:57:aa:99:
d4:0a:4e:6f:e0:77:2a:ed:8d:7d:eb:c1:b1:11:db:
7f:f8:af:0a:c5:7d:a1:02:53:1e:b3:7b:d1:b3:87:
c2:98:38:15:04:ac:92:17:be:53:d9:0a:5d:03:1f:
85:13:fe:52:0f:55:1e:bb:01:8b:43:18:01:8d:8e:
62:47:e4:11:18:23:9d:25:94:ec:6d:35:76:34:51:
86:18:13:f1:ec:fc:da:0e:77:35:9b:94:47:e7:d2:
c5:c6:8a:74:66:a2:2d:28:c1:5d:86:97:a7:5c:34:
60:4c:a3:ca:70:e9:45:38:4e:25:b8:5e:c3:3c:09:
5e:38:bb:18:dc:b1:fa:6a:8a:3e:e8:d9:cc:a6:10:
8c:bd:06:dc:e5:54:9b:22:d8:d6:0f:ab:96:cd:6c:
ab:c5:1f:fd:32:ba:8a:6e:b4:07:a3:66:bc:2d:ee:
34:4d:2e:28:ad:93:ce:ef:40:25:80:90:83:eb:bb:
9a:92:2e:14:2d:66:70:eb:91:ec:1e:41:20:73:d0:
15:72:7a:79:cf:e1:d3:69:9b:e0:a5:7f:32:64:12:
47:d1:0c:e6:e5:c0:c4:76:f3:7b:67:c4:2a:ad:4f:
4e:99:de:7a:0f:00:97:e2:fd:34:a3:1c:ed:45:48:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C7:75:EA:DC:0C:19:AC:FB:A5:51:2A:52:CC:BC:07:66:1A:1C:66
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bb:21:ee:b8:2b:48:7e:08:71:61:2a:4d:e0:c2:24:14:1e:
e4:b2:9c:6a:5b:ad:c8:99:c9:df:d6:2b:40:3a:cd:1e:0c:17:
9d:aa:4e:b4:5c:dd:9c:5f:1f:67:2b:ac:94:a9:3d:6f:d0:69:
ec:28:55:df:fb:30:7d:a9:1d:09:70:a9:0e:2d:94:43:62:ee:
c0:8e:62:dc:e8:cc:84:83:10:ed:b2:9b:91:89:ca:25:7f:81:
6a:08:43:e4:65:7c:e0:c4:5e:b7:fc:15:cc:46:1e:10:d8:ae:
f5:92:30:cc:89:c5:8d:ca:6b:82:52:a8:1c:33:93:89:cb:58:
c3:e7:d9:70:37:d9:d0:d6:f8:e8:bd:a1:75:87:8e:b9:cd:17:
3c:3d:ab:9f:6a:08:69:17:b8:6d:45:09:0c:53:04:43:ba:86:
59:b9:5a:6f:6d:60:a4:b0:ef:83:71:65:e2:36:4f:6e:0d:70:
6d:83:17:90:1b:f3:70:c3:68:41:79:5a:f3:b3:49:37:d1:8d:
f1:d9:23:03:06:b9:19:87:83:bf:66:ee:70:64:41:59:04:af:
4f:5d:05:b4:a0:97:88:ff:54:b6:1b:0a:4f:b9:aa:b5:fe:c7:
f6:b0:e2:6d:19:8e:04:e6:b5:a5:c2:e9:2c:0d:82:e6:35:67:
10:f5:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:10:47 2026 by rpki-client