
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier: NhizNk5PvID8dI7uwwKnd5yr6M+mbZk/tK9G2LIulS0=
Subject key identifier: 0F:47:E7:DD:29:6A:D3:9B:A2:46:4D:74:70:1D:A0:5A:5B:41:F8:42
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number: 01C6
Signing time: Fri 17 Jul 2026 04:49:51 +0000
Manifest this update: Fri 17 Jul 2026 04:49:50 +0000
Manifest next update: Fri 24 Jul 2026 04:49:50 +0000
Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: 140xZm2+pnmiQW0XdjohzK7G2sW1jRrkfye2noJijlg=)
2: 27977B04816611F1AB207D5289A30FBC.roa (hash: UyFIb241AuLpbDftlAbio/XfDKLk0wTp953m8m4bfaQ=)
3: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: IIgjx5hMDfgzrpHDFYnjfbNSp51tU2xzdb1oFbQHBNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Validity
Not Before: Jul 17 04:49:50 2026 GMT
Not After : Jul 24 04:49:50 2026 GMT
Subject: CN=6a59b46f-b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:86:d0:44:94:2a:47:1d:c0:24:4f:b9:73:
55:32:87:6f:48:72:98:bf:48:5d:2d:aa:eb:90:1c:
b5:cc:84:39:92:df:3d:bb:93:c5:33:7f:73:3a:c9:
94:56:b0:5d:07:3f:f1:fc:3d:23:e7:08:78:4c:f1:
50:da:b0:fa:51:b7:16:13:cd:27:1a:e0:f4:60:6b:
ad:d4:0a:6d:a7:6a:fd:95:04:79:6c:91:0e:61:83:
1a:7e:13:c7:31:7a:79:30:d0:ea:b2:58:44:47:85:
92:47:40:d7:c1:73:1a:52:7f:38:72:f6:bc:a9:6c:
8a:00:d2:48:6b:b6:fd:ba:7b:b4:26:11:1f:bf:d7:
98:d9:d2:0f:1b:33:06:f2:46:7f:5a:d0:fb:34:86:
3d:96:e1:64:43:63:16:95:13:09:fa:66:2f:29:05:
29:37:5f:d1:a0:54:5a:c7:f5:51:cb:14:6e:f2:a1:
c7:d4:a8:c6:d0:3d:8a:39:b7:47:0b:97:80:41:ec:
95:c2:1b:e9:f9:e0:1d:b9:89:dc:fc:72:b6:35:54:
31:e4:1f:85:ab:22:4d:d9:3f:e8:f2:13:59:73:df:
8a:27:76:01:20:b2:27:6c:dc:36:2b:a8:be:c2:f4:
14:c6:00:3b:31:9f:7e:e0:f6:08:02:0d:4b:d3:3b:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:E7:DD:29:6A:D3:9B:A2:46:4D:74:70:1D:A0:5A:5B:41:F8:42
X509v3 Authority Key Identifier:
keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:25:99:06:c9:de:1b:2f:08:c7:d4:6c:0c:46:0b:5d:cb:9e:
3a:a8:49:e2:f0:93:14:cc:95:77:6c:0f:b3:a0:31:60:fb:75:
7a:1c:e7:f4:f6:3d:41:56:a8:9c:0b:da:95:38:75:dd:bb:8c:
bd:68:0d:7b:7f:68:f5:db:db:2f:b5:69:ae:80:30:a9:3b:7c:
f0:fa:3e:1c:8b:0a:f5:a8:ac:11:bf:f0:01:22:cc:36:53:90:
9e:27:1f:a2:ed:bb:75:63:ba:42:db:51:12:af:93:fd:3b:cd:
f4:03:63:ed:dd:42:1c:df:db:e8:9d:aa:06:1f:08:10:86:a4:
08:a2:7b:31:a5:7e:2e:4a:ee:a2:90:cd:1f:d6:35:d9:42:3b:
c8:e7:ec:57:cb:05:db:cf:39:17:68:f5:58:54:80:c4:95:97:
f1:af:d7:08:94:5f:91:8e:a0:42:04:af:37:95:65:ad:a6:80:
8a:7d:1b:7c:1d:41:0e:a8:95:af:1b:be:46:40:d1:3d:a8:5d:
69:97:fc:44:bb:13:99:95:5f:a0:3b:41:98:60:6b:e9:64:b9:
f3:54:ac:5b:d6:0f:15:b0:6e:a0:af:8f:1d:a6:f6:92:81:8f:
3f:82:bc:98:63:17:f6:1b:b6:ce:c5:fa:72:12:91:28:5d:04:
9b:20:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:39 2026 by rpki-client