
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json)
Hash identifier: KrlkEyxbuiBeQOsKuT3H4lY3/SxHUVslaN5XsfrqJio=
Subject key identifier: BE:18:12:24:49:7D:42:C2:93:4B:DA:A1:65:55:7A:37:05:33:5D:B6
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
Manifest number: 013B
Signing time: Tue 07 Jul 2026 06:33:09 +0000
Manifest this update: Tue 07 Jul 2026 06:33:09 +0000
Manifest next update: Tue 14 Jul 2026 06:33:09 +0000
Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: 4zExI/sx/MIRbjCBmfx5LEKU2BbiJMFX+uOchqRWeXA=)
2: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=)
3: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=)
4: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 06:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Validity
Not Before: Jul 7 06:33:09 2026 GMT
Not After : Jul 14 06:33:09 2026 GMT
Subject: CN=6a4c9da5-bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:29:b1:a6:35:25:6a:07:42:0b:58:f8:92:
71:e2:d7:b1:f9:a7:99:87:95:f6:b3:b4:1f:dd:ac:
46:a2:30:93:36:9e:85:9e:47:72:cf:56:04:2b:91:
1d:c9:aa:10:da:11:bc:67:f3:c1:5e:6d:25:6a:97:
13:ae:36:6c:9a:0d:fb:91:14:ab:0f:a2:03:f5:38:
9c:52:78:c6:c1:21:7d:1e:6a:91:90:54:7c:2f:29:
7a:e9:87:5b:d1:25:bf:01:ae:5b:5a:32:f5:85:75:
1a:5a:40:f9:4f:e6:96:b7:b8:f4:c8:bf:4b:38:58:
84:97:7e:f3:4f:07:96:86:58:3b:de:3f:6c:5a:79:
9a:72:98:4a:1f:0d:cc:64:46:b1:25:64:cc:57:7d:
a1:a9:c4:89:a1:e6:5d:72:e7:a0:5e:4c:2e:e4:8a:
bd:be:e2:ca:5a:1e:c7:8e:7f:b2:73:a8:6c:38:b2:
be:54:3f:1e:80:e1:4e:7f:cf:4b:9f:f7:77:fd:2e:
a6:2f:d4:1a:82:f1:f1:37:60:f5:a9:11:74:99:2a:
e4:aa:93:64:3d:2c:41:ff:fb:60:e5:47:ee:c8:56:
2f:fc:25:ec:fd:d0:25:c4:99:8e:2d:bf:27:01:3c:
a8:85:71:74:79:f0:db:6c:33:ec:6b:fa:8d:74:4d:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:12:24:49:7D:42:C2:93:4B:DA:A1:65:55:7A:37:05:33:5D:B6
X509v3 Authority Key Identifier:
keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:5e:1a:8f:29:2b:4d:6e:0b:48:85:8f:c9:b4:09:87:db:
4e:dc:e4:64:a6:38:26:d9:32:ce:c7:f0:bd:ca:07:2e:58:83:
58:6a:42:40:bc:e5:48:a5:f6:ae:af:ed:11:0b:f7:76:f2:86:
dd:f3:1d:4f:4c:4b:a4:1a:01:a7:a2:16:a3:28:5a:64:51:64:
ad:de:ca:5e:8c:85:d5:fe:56:9e:d1:b8:43:ee:bb:18:51:c6:
e6:19:77:8d:e8:25:ee:3a:d7:de:76:27:af:0f:ff:5a:eb:26:
5d:f5:9e:ad:fa:48:5e:81:0a:cb:eb:b8:1a:66:4d:84:db:75:
0b:77:3b:13:fe:fc:9a:d6:2b:f1:cb:af:03:9f:af:b2:1a:90:
e6:53:9b:47:f4:2e:7b:07:05:7c:f6:92:9e:ca:5b:96:3e:24:
b8:b3:8f:51:64:03:95:94:77:06:92:a4:53:9d:71:65:99:64:
47:0e:c5:2b:59:94:9b:ea:61:40:5d:31:24:a4:b1:e5:55:10:
01:fb:d9:77:99:87:7f:a4:1d:bd:10:3e:d2:0d:9e:40:e9:52:
5b:9d:c8:be:fe:ba:d5:26:9d:c2:01:a8:4a:4f:cc:2a:42:b3:
88:93:c4:d8:09:25:42:10:c7:42:56:4b:8e:c0:c9:7c:a9:eb:
71:4b:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:53 2026 by rpki-client