
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: PQxBvRu4UqKocFlqXTgZcDwMuZH8nJp6sYmYXyGWJTo=
Subject key identifier: 3F:80:BB:D4:BF:00:05:04:8B:FE:48:1F:B4:0E:EE:89:2D:99:04:B2
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 0919
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 090B
Signing time: Tue 04 Aug 2026 20:34:59 +0000
Manifest this update: Tue 04 Aug 2026 20:34:58 +0000
Manifest next update: Tue 11 Aug 2026 20:34:58 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: V+Q8Xl8SscC/GldAtDYjAjFIRJ0/knGqm0bn1DamXFw=)
2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 20:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Aug 4 20:34:58 2026 GMT
Not After : Aug 11 20:34:58 2026 GMT
Subject: CN=6a724cf2-e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:ab:cb:2f:a0:5f:eb:d3:8f:84:d1:a0:49:
8e:3a:eb:78:c6:00:f5:7d:56:c8:18:80:6e:7a:28:
52:91:6c:a1:3f:80:31:01:03:8e:ee:e8:fd:f3:7e:
5d:42:4e:2a:3b:47:f6:a8:31:0e:66:b0:a2:6c:79:
50:b9:83:3e:cb:93:be:de:80:db:01:26:3e:d8:b3:
34:70:7b:94:6c:43:88:01:02:e2:f5:49:9a:12:f8:
1f:de:72:0a:f8:f5:83:18:e7:a3:0b:32:62:9e:ee:
44:84:eb:8e:30:a6:0a:79:6b:cc:fe:6e:1b:0c:a2:
36:e9:91:64:bb:6c:9f:2a:67:88:fd:f4:45:75:a1:
db:18:fa:ba:d1:71:bc:d0:49:95:1d:66:fe:f8:ec:
62:a3:8e:fc:6c:3d:5a:75:1f:c5:7c:22:c7:ea:0b:
26:b3:29:22:b1:24:bf:b6:33:76:0a:ab:40:e2:dd:
dd:7d:3b:95:d7:43:7d:21:62:1c:e9:f9:45:90:11:
5d:16:aa:00:54:d0:8b:90:53:b0:63:1c:f1:ff:70:
91:50:96:b3:57:9a:25:77:8e:f3:d6:d2:d7:ab:3d:
45:7e:cd:f8:cd:62:58:c8:a1:f0:1e:0a:1d:a5:e8:
0a:70:90:e4:cd:6b:93:1e:cf:a9:b8:cc:71:01:14:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:BB:D4:BF:00:05:04:8B:FE:48:1F:B4:0E:EE:89:2D:99:04:B2
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:ff:be:71:ee:d4:a3:18:bb:c5:16:fc:b0:f2:b5:e8:ee:
25:21:58:5a:fd:a4:24:f0:e9:26:fa:34:16:e4:92:b1:c0:23:
ef:4d:82:6e:50:b2:4b:67:81:25:67:a6:21:5c:79:73:8d:32:
c0:1e:2e:a4:2d:cd:81:65:ce:93:00:8e:e1:39:1e:fd:94:6b:
11:e1:c6:e0:14:df:c6:81:59:78:be:fd:8b:9e:f5:72:ee:94:
da:51:08:88:7e:14:e2:5f:1d:b6:2e:d1:e4:09:64:29:22:40:
4f:c9:15:9c:2c:63:4e:cb:73:01:79:04:be:6f:1d:96:40:4f:
82:df:c0:18:d1:41:0c:5e:79:09:94:2d:22:2c:b9:be:af:37:
1e:29:86:21:8e:67:3f:8c:ca:37:2c:18:07:48:a7:e1:8f:24:
c4:7d:75:e5:8c:89:9d:91:ef:d0:4e:0d:1a:1b:39:86:88:33:
a5:4c:5d:61:62:16:f9:01:38:ec:41:08:07:e7:b9:28:d4:c8:
a7:e3:8c:9a:07:59:a6:e9:ff:34:93:18:13:70:f6:df:3d:59:
60:3b:9a:f6:70:9e:df:f5:0d:62:46:62:2c:5a:bb:bd:31:28:
36:7e:6c:73:24:73:1b:27:63:a9:9c:33:4f:b0:8c:b1:f9:a9:
35:0a:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:13:52 2026 by rpki-client