
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier: +xf6ugz7Are211P8vPXupgDn5zM6NVGNUJFsGMaDZaQ=
Subject key identifier: 0B:87:3F:C4:D7:A0:14:13:41:4D:48:E0:D2:83:B2:E7:8A:74:B3:5C
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 0577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number: 0563
Signing time: Mon 27 Jul 2026 00:22:23 +0000
Manifest this update: Mon 27 Jul 2026 00:22:22 +0000
Manifest next update: Mon 03 Aug 2026 00:22:22 +0000
Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: iDf0r6111oOzH+/7+s38pHDHzoiag3aNHl8OB7jXpVM=)
2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=)
3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Validity
Not Before: Jul 27 00:22:22 2026 GMT
Not After : Aug 3 00:22:22 2026 GMT
Subject: CN=6a66a4bf-437f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:59:1b:a0:8f:a2:7f:0f:cf:3e:1a:f4:36:
69:01:a8:56:ac:df:e8:e5:76:de:f3:f4:0a:41:f7:
de:28:04:35:d5:12:94:ad:84:52:c6:cc:be:8d:ac:
03:93:91:dc:b3:14:1a:c2:68:8f:41:92:c1:5b:b0:
80:e8:02:27:ce:be:27:b9:ac:92:2c:fd:53:a4:f0:
90:5c:67:b0:12:4b:d9:87:5c:65:7f:61:dc:d0:af:
7e:e6:ab:7a:bd:66:7d:17:27:3b:8b:a6:8e:d1:6f:
d7:c1:5c:45:80:df:75:51:d1:38:b6:63:2c:3f:d8:
cc:84:18:0b:c6:98:2d:93:04:bd:64:ff:54:a9:1f:
76:75:69:b5:5a:fd:e9:89:9d:f2:ff:f9:75:cc:48:
b9:41:27:ee:c8:94:5b:d3:f3:54:30:7c:25:27:8e:
04:36:75:1e:43:15:8f:37:77:92:57:8b:03:a9:9b:
df:8e:b5:f3:8c:5e:59:ab:44:05:e6:28:62:32:84:
21:1b:b4:13:f5:80:fe:4c:43:25:10:20:06:cf:15:
e9:17:75:09:ea:cd:1a:a2:76:7b:4b:ba:24:e4:f0:
34:46:25:04:1a:5f:be:e9:ad:eb:e5:1c:77:09:f9:
a0:05:39:35:1a:8e:1b:13:c4:4d:7b:8a:c7:6f:6b:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:3F:C4:D7:A0:14:13:41:4D:48:E0:D2:83:B2:E7:8A:74:B3:5C
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:18:74:20:22:f0:36:62:9c:44:a7:1e:09:a6:af:cc:74:
43:1c:54:4f:ed:05:8f:3b:ae:a7:6b:5e:65:7e:5b:9a:b3:24:
25:b7:1d:6c:5e:00:7e:0b:27:b0:47:7b:8f:65:a9:2a:ef:ce:
24:c4:57:c1:e3:4a:4c:70:53:fd:fc:88:20:d3:c4:94:fb:41:
d4:9d:8b:da:be:c6:92:40:1d:d7:c7:2a:a0:73:e9:db:b6:c6:
d4:28:48:94:19:57:24:22:11:8b:77:ae:35:86:b5:f5:70:0e:
21:6e:fa:8c:2e:94:1b:b4:37:fb:ba:04:91:89:0d:7b:a8:5e:
60:21:e6:f2:34:4b:43:21:99:d5:be:08:0d:1a:13:58:95:f6:
14:e2:1c:50:26:48:91:3b:68:86:0d:4c:ee:94:b3:80:7f:c8:
51:66:9e:c2:aa:32:fd:93:2f:92:c5:b3:5b:bd:a8:71:87:67:
cf:2c:e3:f1:27:f6:ad:04:84:af:a0:0d:a7:39:75:61:c0:11:
04:bc:67:f2:f9:00:be:e5:18:82:6e:5b:8b:a4:0e:92:4e:9e:
ae:09:bb:8c:0c:08:7f:69:0f:20:cf:e4:52:88:8c:91:c5:f2:
aa:d2:5b:35:e1:ce:3b:a3:fc:84:40:5f:b9:75:47:cd:6a:53:
80:ab:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:42:09 2026 by rpki-client