
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier: Gnre3zElSllHhWgLCASni1itwqucr+Kb9wWZwcdGHX0=
Subject key identifier: 4A:24:7B:E9:14:13:39:C1:41:E7:9E:7B:FF:74:CF:CD:38:85:24:3C
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 19CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number: 1995
Signing time: Sun 26 Jul 2026 16:30:59 +0000
Manifest this update: Sun 26 Jul 2026 16:30:58 +0000
Manifest next update: Sun 02 Aug 2026 16:30:58 +0000
Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: Tt+FM4lmJootmkMySHgq7OEzYcOmOG3J3IzNPEdjq5M=)
2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
3: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6603 (0x19cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Jul 26 16:30:58 2026 GMT
Not After : Aug 2 16:30:58 2026 GMT
Subject: CN=6a663643-4d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:ba:62:44:f9:c7:c8:8b:b4:42:d3:a3:bc:
a1:ff:e7:42:b0:8d:95:95:16:17:51:74:90:31:b7:
42:f7:47:d6:50:a5:13:ae:c4:54:17:94:d7:14:98:
4f:61:0b:44:80:ec:01:ff:98:78:d3:8e:d5:c0:06:
63:e7:7a:96:fb:e8:63:37:99:90:d2:64:94:08:4f:
95:0e:e8:10:df:d7:28:f9:b4:43:95:4b:81:da:54:
06:7f:d7:e8:86:4d:fa:27:d8:a7:34:e1:26:05:15:
bf:21:bd:31:ae:9a:bf:6a:b8:9d:5f:63:e4:ae:05:
86:40:76:4a:ab:ea:a5:b7:d1:54:ca:c4:aa:68:e3:
de:0b:0a:5b:04:62:3d:e1:bb:88:91:f8:ca:96:61:
a9:2f:e5:59:36:82:2f:26:6c:d4:bb:42:a2:e9:c8:
55:9e:aa:63:ef:b8:54:3e:e1:95:91:7d:5d:a8:97:
f3:64:f2:a8:3d:66:e0:7e:67:08:c1:41:98:20:5e:
5a:3e:46:e5:a4:87:6a:46:91:53:34:8a:ab:1c:c8:
21:1b:6d:b9:bc:3b:43:93:49:ae:72:58:ac:d4:bb:
08:2a:d2:13:a0:13:97:1e:32:96:c4:3c:e5:8b:f5:
26:69:8b:22:bc:2d:67:98:80:20:6e:78:8f:4e:b3:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:7B:E9:14:13:39:C1:41:E7:9E:7B:FF:74:CF:CD:38:85:24:3C
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:5b:d4:bd:dd:0b:15:1c:14:d7:fb:bf:00:90:e1:fa:d5:
35:5f:75:b9:61:33:eb:51:f9:27:24:2e:a2:e0:51:11:e8:43:
69:ea:13:a6:8e:c5:ea:b7:b8:26:e6:96:f0:50:75:4b:73:90:
2f:e8:0b:0f:42:28:c4:fc:44:2c:39:49:09:02:72:a9:8b:a7:
e2:c6:8c:54:28:aa:9e:86:6a:0f:ce:e1:bb:b3:a8:36:2b:d0:
ab:21:fd:cb:30:99:38:32:74:26:82:f7:72:b4:cb:33:aa:c9:
9e:bd:57:28:f1:f9:9c:3f:3c:85:e1:ed:e1:f3:85:2b:c4:b3:
a8:54:ee:7c:72:24:87:84:ef:ed:ea:a3:c9:ab:b2:03:5c:1b:
5b:59:4d:8e:9e:b4:18:3d:fd:e9:d0:f6:c5:54:a2:4a:57:d2:
5f:ef:c6:d0:f3:e6:20:c9:0d:92:b9:ce:d8:59:00:9a:f4:e1:
0c:2f:6e:c2:75:62:63:06:09:2e:64:76:2f:fb:90:a7:b4:2f:
29:71:6f:8d:73:fb:53:c5:18:ac:70:51:86:a0:1b:0d:e3:32:
2e:c8:3c:ad:bc:02:c3:71:2e:2e:a9:d9:8e:c0:2a:2f:15:0e:
9a:22:fa:41:fc:bc:0e:aa:e9:9f:9e:d7:76:44:8c:30:16:bc:
83:19:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:29 2026 by rpki-client