
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: 5CPcHGnH/CHFeASH9xhsT0biZMdVpo3GmuCkAUr6yyg=
Subject key identifier: 31:BD:C3:04:88:E2:0A:88:24:4E:C7:A1:33:E4:93:B9:A2:A5:0B:36
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0DA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0D82
Signing time: Tue 18 Aug 2026 18:13:52 +0000
Manifest this update: Tue 18 Aug 2026 18:13:52 +0000
Manifest next update: Tue 25 Aug 2026 18:13:52 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: /daJtt25ha5maj7MDyEfHwqXqX+/xUBbpmcVNyV8gAo=)
2: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: aZH7AGbUAJmYZGYha9pGojk2fBRZAfCTIV6XXubldXM=)
3: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: kd9hYn47YTtDthbMKqLgRPuWvH7+p6sK2VRouTMhpYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Aug 18 18:13:52 2026 GMT
Not After : Aug 25 18:13:52 2026 GMT
Subject: CN=6a84a0e0-df02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:0d:69:5b:fc:3a:a5:64:51:91:41:7c:68:
9f:5b:ef:90:80:34:48:e2:bb:1b:34:61:a5:5e:1b:
3e:bd:08:72:47:93:c5:32:bb:b8:09:97:53:4e:8f:
81:c4:d6:48:a4:6d:0f:f1:99:4e:2c:19:0e:ad:d8:
80:0a:72:ea:a9:21:3f:78:c6:1b:09:28:03:ae:7a:
99:dc:af:d5:7c:b9:92:a4:f6:4b:1f:1a:20:43:a1:
95:da:34:6b:3d:92:07:fe:b3:75:e8:14:1a:67:5b:
fc:02:32:83:fb:a1:21:c8:6d:33:ba:eb:82:a6:fe:
2b:cb:71:77:94:3c:f1:55:f1:53:45:4b:d1:6f:95:
b2:74:5d:04:a2:6d:75:1f:86:50:6c:0c:c5:83:a6:
f9:56:15:30:11:8f:ac:32:93:3b:b5:ea:29:fd:88:
af:5d:e1:20:e4:7e:b3:c7:1f:80:cc:4d:39:63:36:
33:7e:65:56:77:22:c7:ad:41:12:db:79:9c:4f:02:
49:e5:05:12:fa:b7:cf:20:e8:6a:58:56:85:40:bd:
2e:bc:20:c7:b3:7d:51:dc:ef:2a:9e:1d:95:4a:e4:
68:d5:b6:6c:09:d5:db:3d:56:af:83:d8:eb:75:6a:
93:95:97:77:98:87:cf:15:10:22:fc:71:0f:8d:d9:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:C3:04:88:E2:0A:88:24:4E:C7:A1:33:E4:93:B9:A2:A5:0B:36
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:aa:8a:fe:3e:fa:47:73:2b:5e:a8:02:8b:40:0d:82:90:aa:
87:cc:51:37:ad:02:a1:d3:97:5f:83:fa:b5:66:a1:41:0b:81:
30:fc:6b:2d:05:1a:14:5b:36:0d:67:c1:4f:01:bf:1a:06:68:
c6:5d:0a:b2:8f:97:2f:82:30:cf:bd:c0:95:d4:26:35:39:94:
78:2f:5c:dd:7e:f6:61:dc:ae:a7:10:32:55:fe:ff:6f:7d:00:
c6:f4:94:bd:05:ee:6f:e7:b2:a1:e6:12:37:23:71:63:01:f6:
30:b5:3d:43:ea:c0:a2:24:e4:a5:e7:fd:80:95:11:e3:da:0b:
2c:53:83:67:6b:b7:ea:ba:f1:6f:c2:df:d0:65:7c:96:cd:fe:
4f:35:6c:96:ce:51:d2:09:81:00:6d:2f:76:3f:9b:e5:42:05:
b8:17:4f:0c:0d:81:85:7a:c8:d7:30:d8:a0:2f:9b:60:85:14:
a2:db:32:a3:14:4c:43:4e:16:2d:6d:fc:d1:93:34:1e:3b:31:
14:55:3c:49:fd:de:54:1e:20:e0:3d:eb:1f:e4:5f:20:43:3c:
76:dd:ed:9f:51:dc:76:2e:ea:23:58:d6:3b:a8:63:5d:ed:83:
fc:eb:02:15:c4:c4:46:3f:ff:80:0d:5c:2e:1a:f4:c5:ab:54:
19:c6:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:55 2026 by rpki-client