
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: ScLKeKTqw1h6VdQ+hUsaecnXOlHXWd+6QmSVVc1AFNI=
Subject key identifier: BA:08:EF:E9:17:84:DB:B2:F5:8F:2B:82:28:21:92:79:7C:54:AE:79
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 07C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 07B5
Signing time: Mon 20 Jul 2026 22:01:12 +0000
Manifest this update: Mon 20 Jul 2026 22:01:12 +0000
Manifest next update: Mon 27 Jul 2026 22:01:12 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: CkA5qKyXTGr/fH57z52y4UvxV+F6/G86SRGnC5T3IbI=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Jul 20 22:01:12 2026 GMT
Not After : Jul 27 22:01:12 2026 GMT
Subject: CN=6a5e9aa8-f910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:72:19:2b:8e:fe:68:33:68:26:10:2a:77:
63:d2:30:01:b0:bc:ec:ca:3a:16:6e:1b:7c:b2:37:
10:d7:cf:7c:71:7c:09:50:1b:1c:eb:9b:c8:c2:7f:
71:5b:3d:49:e0:76:fe:e3:c5:a7:6f:da:0b:d2:38:
10:84:b9:75:f8:c8:32:fb:f8:bc:c5:3b:60:3b:de:
37:32:ad:6a:4b:97:45:b8:eb:02:6b:37:e9:7f:2b:
28:d7:18:47:5a:14:63:75:92:ce:8e:7e:71:ad:9e:
ac:6e:25:c2:26:23:25:89:9d:6e:0a:b0:14:53:a7:
cf:73:9a:b0:f6:cc:16:19:e1:dd:9c:54:46:be:74:
2e:df:8f:f4:58:67:88:b5:88:3b:3c:5e:b5:fb:56:
97:2b:da:2e:12:01:22:35:6e:35:88:f5:1d:a9:36:
d5:37:09:18:bf:b1:a1:b3:40:fb:a5:14:5d:3a:cd:
3c:ed:4b:b1:87:19:d2:cc:42:c4:5c:2f:ed:c9:ca:
3b:0c:7b:93:86:ce:3e:cc:58:23:e2:98:4a:ff:c4:
99:40:ac:71:ad:58:07:44:05:ed:93:fd:8f:01:01:
f0:6a:31:6b:b3:99:c0:ca:bc:64:61:b3:74:28:ea:
21:23:b8:1e:c1:b0:f1:d7:f1:7c:e9:a5:49:7e:79:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:EF:E9:17:84:DB:B2:F5:8F:2B:82:28:21:92:79:7C:54:AE:79
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7a:1b:3d:0c:77:10:a3:24:71:ae:0a:e3:17:d9:42:c1:5d:
53:b0:58:8f:16:ea:2e:ca:3e:69:a0:d4:15:10:d4:65:c3:50:
6f:ee:a7:f9:de:8e:05:12:6b:ea:64:8a:71:c2:0a:28:b0:79:
39:17:b7:b6:42:77:fa:8f:2c:d3:57:8e:82:44:01:b7:33:e8:
36:e5:ee:34:dd:34:bd:16:be:ca:c8:6c:b8:57:a2:95:08:9d:
c6:fe:31:79:c1:df:4f:7c:a5:86:88:7b:63:01:f3:cf:00:76:
c3:41:95:3c:8e:bd:f6:ce:8c:c2:47:8a:c4:b7:1c:bb:63:b2:
81:3c:f7:4b:db:cb:82:f0:1b:3d:63:83:b6:7a:dc:e6:15:4d:
e8:fd:8a:b8:68:52:e6:89:49:84:52:ad:ad:41:2e:e3:6d:cf:
9c:ef:ce:48:1d:0b:87:78:df:76:44:95:e2:c0:db:a3:2b:80:
59:68:3b:4a:f8:c0:cc:90:ff:38:64:56:61:1f:05:db:5a:6e:
19:cb:e6:36:d0:2c:b0:0a:2a:1c:a0:3d:be:81:b4:6b:29:ef:
ea:97:1a:53:63:12:eb:0c:4b:aa:ed:e8:79:05:b3:4d:3f:b0:
6f:69:17:b0:22:af:d8:c4:b3:49:a6:95:77:df:e4:2e:d8:1d:
4e:f3:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:24 2026 by rpki-client