
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: waE5LOU21cSAopL5ChM48WssXofa3ZIV77x2CLzddk8=
Subject key identifier: 26:68:11:58:EC:C0:4B:47:2C:18:AF:47:FB:C2:25:DC:C5:71:51:5A
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 01E5
Signing time: Fri 17 Jul 2026 04:32:04 +0000
Manifest this update: Fri 17 Jul 2026 04:32:04 +0000
Manifest next update: Fri 24 Jul 2026 04:32:04 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: GWXniBfxgqQ0lSAc860S5y9nguRgjuofTQXL+00OEK0=)
2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Jul 17 04:32:04 2026 GMT
Not After : Jul 24 04:32:04 2026 GMT
Subject: CN=6a59b044-d675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:d5:7a:2f:49:c9:01:28:1d:34:3e:d8:8e:
e2:53:81:26:f0:cc:7d:24:4e:35:cb:e0:c1:6f:8e:
9c:01:87:83:b0:4a:eb:ca:3f:5d:53:3f:fe:f8:37:
6f:75:49:a1:88:01:a3:24:76:60:d1:1c:32:f8:ff:
de:c3:ef:ac:28:18:f8:45:f1:5c:7d:96:73:5d:3e:
00:e3:e4:7d:a8:26:93:c3:17:0c:c4:0a:9f:2a:27:
ee:04:6d:43:ec:3c:1c:fe:fd:0a:73:1a:b3:24:c2:
c9:a1:13:b1:72:85:91:01:c7:32:aa:54:e2:b3:8a:
61:9a:ab:9c:76:95:81:09:cd:9e:b1:a2:a2:37:b9:
1a:f6:fd:6a:46:ff:11:5f:6d:b0:ab:8e:f7:d7:26:
3b:f3:27:5f:47:c0:3b:cc:0b:48:f8:2c:4e:1c:1c:
b5:53:06:fb:43:d9:ea:95:81:b6:44:8e:c2:6a:a9:
4d:31:3e:b1:cc:61:be:3f:08:b4:46:8c:dc:cc:9a:
94:37:18:e7:c8:ed:b6:c1:2c:5a:50:31:1e:40:d4:
7e:e9:af:5f:dd:ab:c1:c3:23:c6:84:41:1d:ba:1b:
4c:16:24:5b:f3:d0:dc:0b:2a:05:5f:a3:37:57:bf:
e7:91:91:95:7f:d1:df:f3:2d:3a:5b:ac:23:46:aa:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:11:58:EC:C0:4B:47:2C:18:AF:47:FB:C2:25:DC:C5:71:51:5A
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:34:08:4b:f8:a1:a2:62:02:1a:a8:19:f8:23:9b:e0:0b:24:
95:ae:f3:30:1b:ec:ad:74:54:9b:c5:49:81:4d:16:36:fb:59:
f6:7e:f7:08:63:ac:ba:73:3f:b5:c0:96:a2:4c:e0:9a:b0:c1:
7c:05:d8:7d:36:6a:f7:61:78:57:73:4c:cf:21:17:d1:07:4a:
65:04:14:2b:88:da:5e:31:57:bd:55:cb:d4:16:ca:50:fb:4a:
23:22:5e:38:b5:bc:d1:9d:9d:11:f4:3c:b9:be:a6:a9:a3:d1:
d7:ed:cd:33:40:0e:60:bc:c2:bb:47:16:03:fa:6f:ef:00:e8:
9a:f6:7e:14:09:aa:73:d3:75:6c:d0:11:97:62:16:67:ee:bc:
8a:9b:51:09:17:c8:ca:88:42:15:31:a9:da:60:dd:a7:92:78:
23:39:33:94:44:35:4e:3a:c7:53:a4:74:48:74:57:c8:1b:7d:
0a:9b:34:84:a4:f6:f7:90:9b:a0:03:eb:e1:3a:53:73:4b:c8:
1b:99:b5:e1:b4:e9:ea:2f:1c:43:01:7f:f7:f7:4f:cc:b1:02:
58:8c:2b:f1:02:43:7b:fe:30:d0:7c:05:49:38:f6:92:7e:ff:
39:67:12:1f:d5:33:1f:8d:d7:2a:87:c3:0a:07:78:d7:0e:0c:
b5:1c:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:40 2026 by rpki-client