
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json)
Hash identifier: g4cNXfVTJYebRG7gGhbGKsF36DOO2dABmkyXSKh0slA=
Subject key identifier: D4:A0:FE:41:09:B0:D2:AF:E8:B8:23:25:BD:15:B1:88:D2:6B:81:0F
Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
Manifest number: 022D
Signing time: Sun 05 Jul 2026 03:16:49 +0000
Manifest this update: Sun 05 Jul 2026 03:16:49 +0000
Manifest next update: Sun 12 Jul 2026 03:16:48 +0000
Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: 8o4NuobDFInadg+UQsk1sjYbcBAwh00Wrs9FMHkAfMU=)
2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76
Validity
Not Before: Jul 5 03:16:49 2026 GMT
Not After : Jul 12 03:16:48 2026 GMT
Subject: CN=6a49cca1-a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:c9:e8:f2:8b:f1:41:b5:54:1f:36:a3:2a:
d6:02:6a:6d:df:8c:b6:db:6a:f9:c1:87:17:da:08:
ce:af:6d:4a:db:9a:09:3c:f2:08:b7:fe:5e:09:16:
3a:73:74:61:7c:e9:86:b7:43:74:5b:bb:d1:5b:9c:
91:0c:56:e1:a9:9a:ec:46:5c:cb:46:f7:d6:4a:a8:
d0:ac:54:d5:f0:7e:28:1c:44:8f:aa:ac:8d:11:a8:
a6:4c:73:91:90:43:f0:c1:98:59:fd:b9:2b:6c:c3:
f9:05:d2:5f:fe:b5:4f:7c:11:97:f3:e7:22:95:99:
3e:98:f6:f9:a7:04:44:19:ca:cb:9c:85:42:bc:b5:
16:5a:4d:60:2a:7d:b2:c6:62:f3:a0:20:21:28:f5:
76:9d:6a:32:36:70:0e:af:ad:4f:1d:a4:68:41:c4:
c4:42:37:f5:ff:56:ae:65:ff:af:c0:d5:45:b3:3d:
a8:c9:4b:17:c3:b4:68:b4:9f:6d:3c:0f:40:d9:99:
8b:f9:5c:ab:f8:bb:02:0b:cc:56:c4:61:e6:2d:10:
97:87:18:28:b2:98:02:4b:77:1c:f5:8f:17:d2:21:
31:23:b0:ad:3d:d4:6a:62:2c:bc:d2:40:a2:64:39:
3b:5f:c7:0b:ff:a9:be:0d:30:ae:c0:b5:30:8b:85:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:FE:41:09:B0:D2:AF:E8:B8:23:25:BD:15:B1:88:D2:6B:81:0F
X509v3 Authority Key Identifier:
keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b1:29:4a:7b:2f:c2:5d:9c:ba:67:2c:1b:ba:64:1c:af:da:
b4:02:dc:97:8d:3e:65:ed:63:3e:e1:98:fc:0e:76:70:c0:79:
09:fd:77:68:a1:4f:6c:33:e2:5e:a9:bd:75:ae:08:30:cf:45:
d7:18:52:44:60:2f:1c:6e:d8:cc:36:30:0c:88:7f:58:c6:d5:
c6:c0:04:9a:98:52:2d:ab:96:71:fc:7e:da:b4:97:5f:ce:07:
bc:b7:1b:0b:1c:af:ed:e2:30:b0:65:9d:62:fa:6f:64:0b:6e:
7c:4a:14:1b:6c:ef:a5:76:b1:c1:99:ba:ef:eb:3b:2b:b8:fa:
a0:36:1b:f3:fa:42:b6:14:70:49:ed:d0:48:f4:ef:54:87:e9:
a3:87:64:6f:e7:10:95:bb:7d:70:ba:d7:b3:4e:6a:de:ec:f4:
71:5b:b9:3e:0d:55:70:96:18:b2:9b:50:a0:0b:ef:e5:5c:88:
f9:59:73:e4:b4:fb:c0:df:70:c1:94:80:1d:b7:f8:87:a7:e8:
3f:47:62:b2:21:7c:6f:2a:b1:41:f4:cb:de:93:87:e2:6c:9a:
fc:8e:a9:f6:db:d2:3e:33:60:7c:fb:9e:33:37:3d:56:0b:ea:
5d:2a:c0:78:51:47:62:f9:d2:30:eb:7a:ee:a5:ee:9b:37:d4:
81:76:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:38 2026 by rpki-client