
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json)
Hash identifier: 8ufNWXCvdifuwgb3mTwaEAFfsWNn1eN4+r0Qa/h/oGg=
Subject key identifier: E4:8B:22:70:F7:28:7F:93:D1:43:B5:7A:FE:7F:03:70:B0:1E:E4:CF
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial: 05B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
Manifest number: 05AC
Signing time: Mon 20 Jul 2026 23:54:47 +0000
Manifest this update: Mon 20 Jul 2026 23:54:46 +0000
Manifest next update: Mon 27 Jul 2026 23:54:46 +0000
Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: 5/AdH5jPs9TIxiTzbyjFt/hibK61tvjauPyPwQhAtT8=)
2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Validity
Not Before: Jul 20 23:54:46 2026 GMT
Not After : Jul 27 23:54:46 2026 GMT
Subject: CN=6a5eb547-2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:40:f1:0a:85:02:34:44:bd:00:6a:37:c3:
8b:c5:d6:97:30:67:84:34:37:4c:d5:4e:0f:90:b8:
d6:16:33:8f:35:a2:5d:29:d9:e8:0e:9e:86:8c:02:
e2:86:5a:c8:ea:b8:07:26:e0:a7:05:17:63:2c:f5:
8b:38:1b:f1:f6:89:90:75:87:b5:b9:f5:6e:64:3d:
21:9d:71:ee:c4:57:01:c0:bb:39:ba:9b:27:c8:52:
ee:36:0e:24:c9:5b:1f:65:7c:ce:a8:15:d8:a6:27:
6d:f7:aa:ce:23:af:27:6c:68:bf:21:69:a2:cd:fa:
f6:d9:26:0c:41:10:68:04:f6:1a:8e:db:fe:62:3c:
27:17:8f:72:14:18:c8:2c:ec:68:76:21:58:f0:1b:
8f:23:00:08:41:f4:f8:41:9f:b8:1a:ba:1c:fa:66:
75:b2:d6:28:86:e6:18:e7:c1:de:75:02:5c:4a:26:
dd:33:14:7e:6f:31:6c:21:de:65:4f:99:78:16:30:
e5:fd:b5:c5:90:00:09:ac:a1:7a:6e:0d:6c:ed:0f:
07:4e:dd:8a:b0:c5:9d:53:d8:92:bf:d9:42:49:b8:
8b:46:3d:1a:03:25:b0:58:c3:be:fa:e8:3c:e3:04:
75:c4:77:0e:eb:62:7f:29:07:48:d8:72:54:77:ea:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:22:70:F7:28:7F:93:D1:43:B5:7A:FE:7F:03:70:B0:1E:E4:CF
X509v3 Authority Key Identifier:
keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:32:cb:21:4b:53:71:d9:ca:9e:82:c8:25:54:01:37:43:
f6:90:23:d0:4c:7e:a2:ef:da:fc:c1:29:9d:65:4c:4d:fe:14:
7b:d0:ed:d2:c5:4e:42:91:48:d0:07:bd:c9:88:a1:51:86:4d:
cf:f7:84:fc:ed:e9:06:b2:d8:ea:68:58:ca:16:91:10:ef:4a:
69:a2:1f:a5:1b:af:c4:77:5f:18:87:89:05:19:b5:a6:77:e6:
b9:d5:06:36:b5:54:b1:1b:0f:84:71:c4:02:28:fd:49:02:ff:
11:2b:6b:99:e6:f6:2d:05:ed:22:4b:1a:fe:d0:13:bd:06:3a:
33:0e:e5:d3:9b:1c:ec:e4:8e:7b:68:a3:df:fc:91:0a:5a:f8:
72:3f:73:08:54:48:da:89:4a:19:72:df:52:a2:2c:44:e2:d4:
be:39:be:fb:db:aa:94:64:98:54:28:bf:0a:a7:90:c9:e6:19:
c4:a4:16:11:56:b3:af:f8:f4:42:38:52:7d:ac:17:15:96:59:
5c:eb:b2:ed:93:97:a4:3b:53:ad:03:df:9f:38:5d:1d:f9:cf:
13:9c:ea:4c:20:3e:39:e8:ba:bb:db:7d:dd:0a:8c:35:74:61:
06:13:14:23:70:6d:28:06:d9:dd:e7:53:8e:97:3c:5f:b7:f1:
86:b2:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:36:20 2026 by rpki-client