
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: RudDSZAwfXehHm8UkUUx3p5RIbEOnZ2vUd5o7oSHlx4=
Subject key identifier: A3:B5:32:E3:DF:53:58:97:EF:BC:92:76:FD:54:BA:FA:08:6D:74:2C
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 14EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1479
Signing time: Sun 26 Jul 2026 17:01:11 +0000
Manifest this update: Sun 26 Jul 2026 17:01:10 +0000
Manifest next update: Sun 02 Aug 2026 17:01:10 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: MklOz6X6B0P4jPnE9qm00ZSpufVlS+U8IXIMGH5iCgU=)
2: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
3: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
4: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
6: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
7: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
8: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
9: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5354 (0x14ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Jul 26 17:01:10 2026 GMT
Not After : Aug 2 17:01:10 2026 GMT
Subject: CN=6a663d57-023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:4c:aa:6f:79:6f:d4:40:91:50:97:e6:4f:
88:15:99:a6:1a:db:84:f9:09:dd:be:5a:3b:d2:33:
c2:ee:9d:5a:10:0e:22:13:e1:4e:29:dc:95:f9:2e:
11:f5:df:b2:29:17:b6:8e:ac:bf:99:8e:47:51:1b:
1f:07:e2:e8:77:37:60:f8:18:b4:3b:ed:27:f5:6e:
27:11:fe:77:77:5e:ba:34:00:62:91:cc:a1:a2:61:
57:41:21:02:95:cf:7b:af:da:9f:d6:f0:43:59:f8:
ec:6e:9e:79:1c:14:d6:fa:ec:7a:0c:91:e2:dc:86:
95:b3:f7:87:f0:a5:48:0d:79:5b:ef:0f:0f:08:51:
a6:27:19:3e:57:79:c4:27:7d:47:7a:ff:5a:63:ca:
24:ae:be:2c:64:25:82:c7:3c:ca:b1:da:83:02:05:
25:b0:ab:dc:11:17:41:1f:86:66:54:67:65:0e:12:
8a:60:29:1f:f5:1d:6f:32:1e:6a:01:c7:92:42:dd:
a6:db:e8:00:32:d4:ba:f2:4e:34:54:5a:ac:73:9f:
fe:c4:d8:38:65:db:2a:55:2d:08:0e:0f:37:33:3a:
c6:75:01:e9:2e:6b:cc:1b:47:90:e5:a7:c6:ee:31:
8b:d3:61:77:e0:33:de:d3:81:d6:c7:cd:e0:7f:d3:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:32:E3:DF:53:58:97:EF:BC:92:76:FD:54:BA:FA:08:6D:74:2C
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:db:80:e9:69:d5:86:d8:ee:b2:a1:12:53:7a:1b:79:b3:
0c:cf:14:aa:e5:e5:21:24:50:f2:51:c8:3e:88:40:37:4d:e7:
72:b2:74:61:ba:bf:19:29:3d:9c:e3:57:2c:a6:1b:11:33:d2:
9d:f4:96:62:73:31:b2:ec:a2:e2:d7:1c:7a:8b:33:ee:2a:0a:
6e:c1:1b:63:4e:24:cb:91:95:6d:48:ff:d4:80:46:6f:56:99:
00:91:2b:fd:bf:de:98:9c:1a:eb:2e:fb:b3:8e:71:dc:86:44:
03:1d:b0:36:8c:04:d8:7c:74:3e:58:e1:31:27:ff:5a:d6:d8:
4c:f1:8f:1b:36:c9:fd:c2:ab:99:da:43:30:88:24:60:34:24:
60:69:9a:c7:3b:14:b3:06:0d:71:43:72:5a:af:b4:cb:9a:4f:
fd:fa:d1:06:de:8b:f0:00:8d:66:5c:b4:ba:0e:59:84:d3:9d:
3d:87:32:92:d8:8d:63:1f:2d:9f:70:41:31:e0:01:16:c0:79:
1e:9e:91:51:f3:3b:63:ce:12:aa:fd:1b:70:97:6c:b3:d1:98:
dd:12:8c:4d:e6:b5:a0:81:8c:b0:b6:3f:a6:47:19:92:56:b5:
56:17:a5:8d:4b:70:e9:09:41:0c:60:9f:43:d0:e5:a2:46:c4:
86:6d:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:47:32 2026 by rpki-client