
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json)
Hash identifier: diwm+GgoXxsH1DmGZZ4wtk6YjFQx2MqXqZXKKNyNKwA=
Subject key identifier: 72:53:E3:FB:FE:5B:F7:E3:EF:A2:99:8B:3D:57:3B:CA:72:81:EC:FD
Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
Manifest number: 4B
Signing time: Tue 21 Jul 2026 10:15:00 +0000
Manifest this update: Tue 21 Jul 2026 10:14:59 +0000
Manifest next update: Tue 28 Jul 2026 10:14:59 +0000
Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: Xmk5akkvCJ0nO7pjcQEXBkA15Ch9z2bJ8tz+YkEwAOc=)
2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
Validity
Not Before: Jul 21 10:14:59 2026 GMT
Not After : Jul 28 10:14:59 2026 GMT
Subject: CN=6a5f46a4-ad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:bc:21:e6:74:fe:b9:ee:de:91:0c:a9:ed:
1e:6f:81:5d:d1:bc:09:57:39:ac:2d:0b:5c:f8:c2:
fa:f4:7e:f0:2a:00:f7:2a:47:e7:df:c1:91:68:84:
5a:42:1d:a6:2c:f5:b9:42:66:00:d2:49:66:cd:c8:
c9:1a:9d:c0:4a:db:d0:82:66:f9:72:1e:1d:f3:fb:
1e:ec:9d:3f:52:e2:a4:77:8b:1c:89:44:5e:14:b9:
38:ae:7f:07:62:46:0a:e4:90:8d:c2:d8:65:e4:7e:
b2:c1:6c:b8:59:41:15:82:5d:16:b6:b1:a0:ca:5e:
8b:d6:15:6f:ea:70:fa:0d:8e:b4:c3:c9:45:bd:e0:
0f:ab:e2:fb:5b:f4:db:0b:15:69:92:2a:61:10:5f:
bb:4a:5d:1f:90:51:ec:4a:eb:d5:0b:a6:70:27:08:
03:6d:e3:b4:f9:22:76:f4:0e:25:d4:7f:6c:c3:c2:
16:84:d8:bb:b5:6b:71:82:76:e5:f9:bb:66:7d:5a:
f7:04:29:6c:c8:e5:8f:b9:2b:33:3d:66:80:a1:96:
5b:b8:19:3c:97:bd:35:89:ea:bc:e0:57:71:0a:27:
1c:23:8f:16:98:ae:43:3c:e7:b8:ca:1f:ef:b7:cb:
81:d3:08:eb:3d:ca:6e:79:ac:94:59:b9:dd:e4:65:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:E3:FB:FE:5B:F7:E3:EF:A2:99:8B:3D:57:3B:CA:72:81:EC:FD
X509v3 Authority Key Identifier:
keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:87:0b:51:2b:6c:5f:57:92:b8:e2:15:2a:0c:46:b6:97:3b:
4d:b9:40:65:19:d4:e3:65:3d:62:d8:75:14:23:8b:de:66:d9:
5f:da:f1:28:57:fd:46:8a:4e:4b:df:42:f3:75:dc:fc:26:f1:
bc:c2:ed:da:5d:3b:8c:87:66:bf:42:88:c7:32:12:31:cd:9e:
ce:b0:f1:e4:f0:a9:c8:3f:25:75:2a:a5:5c:21:e3:d6:9a:c7:
30:53:ef:b3:77:db:40:d2:80:74:52:bc:a3:ad:66:a3:fb:be:
42:4e:e0:bb:c6:20:b2:44:14:5b:66:28:3b:64:57:86:f5:cc:
b2:b2:eb:dd:31:a6:22:a6:51:ee:c2:de:af:a7:7e:d8:75:66:
93:2e:9c:73:e1:38:8e:ac:37:ab:82:fa:be:13:97:3a:11:6e:
2c:3d:f9:1b:f9:f5:88:d3:c6:6d:9d:b9:5e:31:1f:1a:de:33:
7c:4a:f2:8b:25:06:7c:27:89:3b:00:db:66:92:76:7c:4a:e8:
5a:50:46:a4:5d:62:13:14:30:81:49:da:99:6c:5b:10:97:dc:
d6:a1:cd:da:44:b2:c4:bf:7b:a6:b7:c7:d9:c2:b7:4b:44:29:
55:ff:1b:2f:6c:39:a3:41:1c:cd:41:15:3c:5d:36:c1:84:2b:
f4:b1:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:19:40 2026 by rpki-client