
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier: kCB8x9upKX7vc3486EVSzNNPwkgnnKy5l+0X316hX84=
Subject key identifier: BC:8D:08:31:34:8A:E9:88:81:89:61:C5:F5:F4:70:7A:E1:67:8A:EB
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial: 0489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number: 0480
Signing time: Wed 05 Aug 2026 00:43:17 +0000
Manifest this update: Wed 05 Aug 2026 00:43:17 +0000
Manifest next update: Wed 12 Aug 2026 00:43:17 +0000
Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: h2TQFSkKDWM0JA1CQF/5P6gWXV1jKgzKAeMaMdMnBz0=)
2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 00:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Validity
Not Before: Aug 5 00:43:17 2026 GMT
Not After : Aug 12 00:43:17 2026 GMT
Subject: CN=6a728725-bf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:c6:96:25:a4:f5:5e:8c:a7:f5:9d:c3:4f:
50:8d:df:09:49:38:f8:18:10:80:59:52:f4:b9:09:
a8:0f:02:d3:10:97:16:59:a9:94:70:2f:e8:99:5c:
0b:3d:fb:5d:c7:e7:cf:6d:20:6c:53:7f:44:dc:cb:
9b:cb:af:ae:22:10:5e:d7:3a:c3:c5:1d:07:7e:37:
0e:3e:ee:18:91:50:56:ff:2f:00:0a:09:66:9e:ea:
01:a4:d0:1b:7d:41:22:b7:e4:fa:13:f9:0e:64:de:
c9:41:82:09:7e:33:2b:5a:14:86:42:31:d0:a4:16:
7e:44:18:1a:df:77:9f:84:0d:48:60:10:10:4d:b4:
13:2c:c7:d8:c6:98:63:b1:5a:1e:d1:19:a9:82:c7:
9c:b8:e0:c3:0e:e0:6c:d9:23:a0:c9:10:e4:e8:3b:
9b:69:36:e6:d5:41:d1:02:2b:d1:83:0f:ad:47:78:
f9:54:10:46:6c:e2:60:f8:f9:b0:7d:f7:d8:cb:33:
56:f3:4d:1b:f0:bb:ec:0e:01:bc:d7:2d:91:be:a4:
56:0d:bc:d0:b9:2e:38:6c:35:fe:74:8e:c7:79:d6:
73:99:81:f8:0e:2d:cb:a0:c4:d0:92:68:0b:c2:c9:
b8:10:b8:cf:0d:9c:3b:00:d0:db:69:d5:34:84:51:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:08:31:34:8A:E9:88:81:89:61:C5:F5:F4:70:7A:E1:67:8A:EB
X509v3 Authority Key Identifier:
keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:60:9e:e8:5f:2b:37:11:57:14:7d:bb:92:05:e4:f3:b1:8e:
44:d3:88:7b:08:45:11:c7:b0:27:8b:0d:d0:8e:dc:20:08:34:
c4:6f:dc:1e:a6:b9:df:46:97:33:b6:97:75:ac:84:86:f2:2e:
33:90:5b:d4:c3:c6:3b:64:b3:6d:6d:8e:c9:05:dc:34:be:df:
a1:d5:fd:37:30:94:a0:86:f9:66:3f:47:84:2a:72:7d:fa:9d:
57:6f:2a:fc:10:48:81:fa:04:17:c0:f5:8f:8f:60:5e:4a:c0:
38:bb:84:4b:67:76:78:65:e4:b9:91:95:57:4e:26:56:a3:9f:
ad:4f:2a:95:91:c7:09:db:95:8c:fb:3a:3e:7a:d2:41:b3:27:
75:db:7b:91:31:5a:48:f5:93:b9:7f:67:2d:d0:73:99:dc:55:
5f:69:d9:e2:8c:5f:5f:cf:49:0c:5e:f1:f2:60:de:26:fd:8c:
b6:40:b0:fd:bf:32:7f:e4:10:d3:c6:43:a7:d8:a6:5e:09:98:
93:7a:fe:e9:d7:92:ec:98:1b:f0:9a:4b:7b:67:55:f2:4d:f0:
bd:1f:57:34:79:f6:89:9e:6b:43:1b:07:a3:e9:e3:e9:aa:1b:
67:0d:5d:73:d1:e3:cf:93:1a:35:dd:53:57:be:d0:e0:9b:53:
f4:85:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:08:51 2026 by rpki-client