
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: cJTswmz8fCnw+ezWB2unbDdhLnn/EsFMS6ItE7d9FY0=
Subject key identifier: 53:C6:70:3A:02:7E:DE:0B:E3:1F:F3:A9:DD:EB:E8:8A:B8:84:3F:F3
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 079F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 076D
Signing time: Thu 20 Aug 2026 21:40:05 +0000
Manifest this update: Thu 20 Aug 2026 21:40:05 +0000
Manifest next update: Thu 27 Aug 2026 21:40:05 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: H5jAG3Jfw1nUVr8ukYlmqGMIrAk94/M3G3Dn3CWtsHM=)
2: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: imktHZ192rrh9lhy/38oX7N5C2b0tCeJYpVYjXO+0oM=)
3: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: 94GzLbfU9wvrOoMqnHUdOKE75uiqX+97F7gLUxAyt+c=)
4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hmmC+8svUfRjvfcFg1OnJ8MEGlC71NOJ13MdkwrsIP4=)
5: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /uXsRHtQ85wtkXc8gIZyNG8uYla6OZlWtyeyihZtW9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: Aug 20 21:40:05 2026 GMT
Not After : Aug 27 21:40:05 2026 GMT
Subject: CN=6a877435-b64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:16:96:7c:60:1d:1a:61:01:38:a9:da:08:
59:9d:2b:74:c9:0a:2f:27:ee:e6:e8:96:f9:4b:37:
04:41:9d:c3:74:eb:93:79:2d:03:a2:d5:d6:fe:6d:
07:e6:70:83:84:95:8a:70:4d:3c:f6:94:3f:b9:e6:
f0:bc:bd:06:de:b9:21:3c:05:61:f5:b0:ac:8b:d3:
2e:e7:e1:4d:60:a5:b0:f7:9c:60:9c:59:3f:e4:52:
f1:bf:af:f9:6f:ca:11:f3:0c:b7:fd:b9:1e:03:a0:
d5:33:32:f7:8f:38:7f:41:9f:9f:6e:3f:6a:9e:04:
49:0e:21:b2:aa:e4:b2:f6:53:34:8f:ce:b0:c7:f7:
c3:f8:b2:87:ad:ee:63:9c:51:9d:a9:14:f4:b7:52:
68:ae:d0:77:4c:34:46:c0:58:83:67:13:f2:fe:94:
74:c7:d9:e1:b0:9d:72:bc:2e:59:25:fc:91:ee:3c:
8b:75:66:5e:ee:b1:42:71:d7:5e:1f:fe:f3:c5:68:
a2:65:77:88:45:14:dc:71:c4:7a:f8:c8:3f:72:a1:
88:64:53:f7:11:ef:82:63:56:31:8d:37:7c:7c:ca:
63:9f:05:9d:61:14:a2:c4:7d:51:45:8b:7e:00:b0:
40:1f:64:3d:0b:99:56:49:10:93:c7:7c:41:ff:50:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:70:3A:02:7E:DE:0B:E3:1F:F3:A9:DD:EB:E8:8A:B8:84:3F:F3
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:be:b5:37:8d:af:78:ee:b5:d3:3f:20:74:e1:43:cf:5a:
a0:51:c5:c4:f5:36:8a:31:7f:c6:85:38:9a:84:99:6e:77:0a:
c6:e0:80:ba:58:c3:d6:bc:4f:b8:a5:81:73:ca:59:13:f2:03:
e8:09:1e:3d:14:e8:ba:d9:e0:a0:15:f3:a8:d8:54:5c:dc:9e:
f3:aa:91:fa:c1:c7:1f:a3:86:ad:70:cb:cc:52:d4:79:15:c2:
8c:e5:2a:8c:2c:99:07:2d:f8:6f:4a:eb:32:d5:6a:f3:6c:cd:
8a:d7:3f:18:fe:42:2f:0f:25:e9:b9:4e:00:1c:bd:cd:f9:b6:
cd:5b:21:f3:2c:79:5f:37:ed:ab:dc:73:72:38:36:a7:3c:a6:
ab:48:9b:fd:9f:65:39:d0:4e:53:b8:70:b8:ce:c3:ce:e1:69:
a5:be:81:c6:0a:e3:c0:58:33:66:9c:4b:60:93:ce:78:6c:6f:
b7:50:43:f8:5b:0c:a3:6f:a7:31:ad:b6:2d:3b:16:47:6b:29:
13:d3:a9:e4:04:a7:0f:71:5f:50:2e:1f:aa:6c:fd:52:03:cf:
cf:12:cb:f8:7b:d5:b7:a5:d1:3a:7e:a6:2d:29:58:d7:e2:14:
4b:2c:55:82:be:5a:5d:58:b9:3a:fe:e4:d2:82:7c:d1:ac:85:
2c:0a:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:27 2026 by rpki-client