
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: 5Z57wE4iDKWvK3qH1GOwuiEZFKTceJPPvPm+J1QM81Q=
Subject key identifier: 57:78:8D:CD:C6:43:E1:9F:81:39:57:47:AD:B1:37:A8:8F:A4:47:AF
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 09F6
Signing time: Fri 24 Jul 2026 20:26:34 +0000
Manifest this update: Fri 24 Jul 2026 20:26:33 +0000
Manifest next update: Fri 31 Jul 2026 20:26:33 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: NLuhs4MWEJCwtLMleo3JZ+cP2Or9ts8eWNE4kRW7K6U=)
2: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
3: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
4: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=)
5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 20:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2639 (0xa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Jul 24 20:26:33 2026 GMT
Not After : Jul 31 20:26:33 2026 GMT
Subject: CN=6a63ca7a-18cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:22:fe:d4:c9:bc:25:da:5f:a7:99:1d:0d:
4d:c0:83:08:d4:d2:5e:7b:fa:df:b6:79:bd:93:0d:
72:75:33:1e:7c:6b:d5:64:a7:53:3b:14:69:87:b9:
3f:e6:65:af:ad:bc:e3:42:ce:6f:26:cd:8b:7b:ee:
b3:a3:2a:cb:10:c9:81:80:77:b5:cb:80:8f:37:bb:
f1:2a:5c:b6:86:c0:e6:bb:36:2d:a8:92:2d:e9:ac:
91:32:65:5a:64:b1:8b:4a:c5:9c:44:aa:db:59:fa:
9e:e7:db:a3:98:9b:42:2d:d3:d9:e8:d7:83:ea:63:
63:6a:03:b5:82:07:2a:6e:8f:8b:2e:f6:2d:3c:17:
2c:8c:c2:75:a5:3d:8f:9b:a0:14:a6:d2:82:8e:9b:
a4:18:9d:93:61:dc:88:92:be:26:90:0a:b7:d4:18:
83:93:9c:2b:a6:de:1d:65:29:62:06:e5:d1:20:03:
79:2d:99:75:ca:1a:88:28:86:a8:8b:7a:b6:4f:e2:
31:d4:a6:a6:39:35:aa:d3:89:7f:c3:ba:17:a3:fe:
97:4d:08:db:80:4e:b2:70:94:18:fe:a5:a2:3a:44:
2c:04:28:9c:e5:c0:d4:f0:9e:15:5c:8a:9f:9a:b1:
94:fa:ce:4b:df:5b:06:f0:18:99:ad:44:3f:7d:88:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:8D:CD:C6:43:E1:9F:81:39:57:47:AD:B1:37:A8:8F:A4:47:AF
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:5f:68:17:32:e0:a5:b8:06:c7:0c:57:ec:17:1b:1b:e8:
5d:f2:76:b6:f3:58:f0:0d:da:aa:25:a5:17:3a:e2:7d:10:af:
c0:6b:e3:ee:15:35:18:0e:2c:39:3e:88:18:b7:f4:4b:04:37:
6e:b4:e5:83:cf:2b:aa:4a:2f:95:ac:08:e6:b0:7e:03:91:56:
e4:85:95:6c:9d:6a:8b:ec:60:e4:e4:6f:a0:76:d4:33:db:b2:
0a:e3:5a:e2:dc:06:1f:35:25:c7:09:d1:8e:44:0b:83:20:9e:
64:95:1c:6a:87:3d:2d:84:4a:63:79:1e:32:79:79:52:7a:c4:
18:e4:2b:71:6d:4e:72:ef:4a:56:7d:53:88:44:81:f0:fc:23:
04:63:ab:36:c4:a1:ae:61:76:21:82:64:f6:45:04:a0:44:ec:
93:f2:3c:d1:f9:59:96:12:7f:22:f0:99:1b:ba:e7:58:a8:ee:
73:22:51:61:74:6e:49:d6:53:14:12:e7:4a:44:f5:16:99:f4:
2b:3c:59:51:2b:2d:25:58:5e:68:1c:c0:05:2d:e5:17:16:ec:
80:c4:51:56:7e:35:fc:ad:eb:3c:e2:70:98:34:61:78:e5:53:
4a:59:15:c6:8a:62:6b:a7:15:39:95:fa:74:6b:3c:44:7e:95:
12:68:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 13:15:51 2026 by rpki-client