
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier: 50yNIQqYHuQCyJw7BFUQTlDjIo11MkXblXfWL1sn9s8=
Subject key identifier: 2D:B1:5D:A8:FC:3E:93:62:27:A7:02:49:C1:5E:05:10:8F:96:22:96
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial: 0647
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number: 05E6
Signing time: Mon 20 Jul 2026 16:25:05 +0000
Manifest this update: Mon 20 Jul 2026 16:25:05 +0000
Manifest next update: Mon 27 Jul 2026 16:25:05 +0000
Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: KNNtJ1ShrV155lxepXET4jJJvczrRRezyX1yEyBIeyg=)
2: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
3: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
4: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
5: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
6: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Validity
Not Before: Jul 20 16:25:05 2026 GMT
Not After : Jul 27 16:25:05 2026 GMT
Subject: CN=6a5e4be1-b6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:6e:e9:b6:8e:5d:ce:3b:4a:73:8d:00:57:
08:bf:10:77:3f:a2:d3:71:b6:2e:f0:d3:76:1c:ab:
74:b3:e4:32:94:8c:a2:0d:cb:62:9b:57:50:e2:0a:
1a:96:3d:e5:13:56:22:18:66:1f:dc:65:e2:b8:d7:
de:be:a2:80:41:e4:b5:88:8c:47:57:28:db:c7:df:
6b:33:f6:c6:17:11:36:53:3f:c3:96:f8:40:d4:6d:
ab:64:28:0e:9c:ba:ad:dd:b6:17:b0:f1:07:88:67:
50:4f:c3:8a:33:0c:07:c9:3c:94:a0:ad:22:05:33:
49:9d:29:d2:d4:f5:86:8e:7d:fe:e7:97:a3:bd:aa:
16:ab:05:b0:ea:61:09:fe:1c:bc:72:cf:6d:eb:8d:
06:b7:75:aa:dd:11:ad:2b:0a:68:9c:56:90:07:ae:
4d:5c:b6:7d:be:5f:1c:78:e8:0e:80:05:ce:76:f7:
37:2d:fb:00:40:a7:39:5e:f7:bc:72:61:76:70:2c:
3b:b5:58:35:2d:ed:19:82:a8:b4:e5:1c:65:f7:60:
8b:02:60:5a:b4:f3:2e:47:46:35:8b:1d:0c:4d:23:
51:c7:2f:a5:32:b8:db:84:c6:08:86:8b:b7:b4:a4:
27:d7:eb:6a:26:eb:14:b9:f2:ed:b9:ac:eb:74:71:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:5D:A8:FC:3E:93:62:27:A7:02:49:C1:5E:05:10:8F:96:22:96
X509v3 Authority Key Identifier:
keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:06:18:3e:6a:4c:f6:1b:02:d6:93:31:56:b3:d5:1f:26:
50:fc:a9:eb:a5:31:1f:fe:f8:a0:b0:26:2e:74:a4:f2:14:2b:
ea:36:3f:76:2b:6a:9b:66:26:b7:88:d8:83:1c:dd:9b:65:21:
f4:9f:7e:eb:25:42:e7:fe:84:87:f0:85:18:f1:08:64:74:c5:
72:20:d8:00:1d:55:94:fa:0c:d7:27:02:a4:12:ac:7e:b2:bf:
c8:9e:a8:ca:d3:2f:48:94:0b:f5:e6:f6:b2:c4:88:df:ed:d4:
cb:c6:78:e0:e5:1a:7e:1c:2e:41:bf:a5:ea:40:bd:92:29:f7:
e9:62:9f:49:39:cc:e2:0b:4f:77:b0:cc:c8:ef:fb:01:e4:da:
80:2a:79:17:7c:7c:d5:fd:2b:f8:6d:3b:fc:78:9e:50:52:c6:
b7:22:28:7b:2a:3e:71:30:03:29:3a:7c:00:f4:ef:2f:33:77:
a0:11:d3:84:f3:f8:42:ec:9d:21:68:cf:79:a6:0f:19:8a:1b:
03:a7:a8:66:42:cc:4a:66:7a:60:ec:17:09:e7:d5:74:2c:dd:
54:a5:78:e9:a3:46:42:d5:b6:ad:63:19:e3:a8:66:c7:b6:75:
b8:8d:f5:fa:72:ed:41:34:87:6d:f3:cb:4d:9f:85:80:5e:89:
b9:ba:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:34 2026 by rpki-client