
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json)
Hash identifier: hLqeH4BE6Gsu3UuA0MHv9WfEOHHRIcBFYf4n07BIjLs=
Subject key identifier: 7B:30:AF:A4:8F:5A:BA:56:15:CD:2D:DD:50:59:41:36:64:21:AF:4E
Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Certificate serial: 0D55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
Manifest number: 0D42
Signing time: Wed 26 Aug 2026 18:02:45 +0000
Manifest this update: Wed 26 Aug 2026 18:02:44 +0000
Manifest next update: Wed 02 Sep 2026 18:02:44 +0000
Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: A9QlPCHITG7B7LyJVWlVD44N/5wwK5sSwRqq7aF5Awg=)
2: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: UvXINsVdmgJ+8axZ9DhL372u1E0J1vH5XbDCRfLraeY=)
3: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 3w1ZCU5DBe8qob2yfo+1JFPIsMpuEFgSBiA3mSkvjmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 18:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Validity
Not Before: Aug 26 18:02:44 2026 GMT
Not After : Sep 2 18:02:44 2026 GMT
Subject: CN=6a8f2a45-2c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:eb:34:55:9c:1b:ce:36:b4:86:b1:3b:41:
ab:80:35:f8:1d:ed:90:04:90:a9:c4:df:74:21:6f:
1a:5f:3d:65:32:d2:27:39:2d:d1:36:8c:3f:86:71:
3e:91:2b:b8:e0:70:88:d4:d4:25:16:dc:1a:5a:21:
f0:56:4b:f2:45:e3:e3:66:d4:1f:22:9b:90:10:36:
2d:b2:15:d3:59:2d:9f:32:0e:ad:85:24:c6:10:0e:
83:73:c4:d3:26:e9:e4:91:bd:98:1d:3f:5b:50:3b:
dc:f6:5b:14:d9:7f:dc:7e:a8:54:51:ce:99:40:e4:
b7:a8:a4:a3:c6:5b:65:12:86:94:a1:74:24:98:93:
a9:90:8f:49:5f:9b:cf:6e:0d:2f:c8:bf:13:55:df:
1d:1e:67:34:0f:00:21:ff:0d:58:fe:18:ca:68:3f:
c9:f0:75:54:cd:c0:d3:a2:fc:f6:1a:39:c9:31:f3:
e6:fb:5c:99:73:7f:8b:9c:f1:02:8e:bb:d0:9f:b3:
8f:44:80:01:18:5c:ff:84:2d:14:d2:2f:9b:ea:27:
b5:32:26:f5:7f:32:ad:d2:bb:68:1b:ac:25:99:98:
f9:76:4f:88:c5:82:06:d7:3e:77:a5:ae:cc:f6:2a:
c6:0e:a9:46:e2:51:d9:e2:d1:e1:fb:91:c8:3e:d0:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:AF:A4:8F:5A:BA:56:15:CD:2D:DD:50:59:41:36:64:21:AF:4E
X509v3 Authority Key Identifier:
keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:42:86:f6:5b:df:63:6d:c4:07:35:16:13:d2:f2:11:c9:
d3:be:3d:de:d8:d2:f4:62:e4:ac:64:99:28:28:97:e1:d2:10:
fd:35:5f:80:03:ae:b4:fb:33:94:c8:c9:2b:9f:66:93:a3:b1:
d6:51:a0:28:c2:32:4a:3a:57:ee:9e:0c:ec:f9:b9:1c:ff:d9:
df:4c:8b:e2:7f:60:d7:b6:19:62:91:c7:13:8f:59:21:cd:9d:
7e:7e:14:fe:55:54:5d:88:ad:a6:6f:fe:aa:4a:24:28:79:d1:
a3:34:57:bf:24:60:05:1d:5f:e1:3f:cf:ab:82:d1:f3:2d:b4:
37:08:98:7c:14:af:f6:48:7f:51:2a:8a:b0:e8:f7:98:a1:64:
27:bc:28:89:09:f7:61:65:4a:34:3d:8d:04:54:3a:a2:bf:40:
dc:69:f6:38:25:17:8c:6b:6f:97:a3:8b:bc:89:23:69:f8:06:
e5:36:8e:54:8e:2a:1c:df:a9:b4:b9:95:af:78:3d:06:62:33:
9b:0c:68:00:f2:20:d7:54:6f:07:4d:5a:db:ae:10:d2:f5:80:
28:eb:c6:42:d9:67:62:e2:9e:ad:1f:cd:cb:7f:58:35:b9:40:
54:2a:f3:66:42:ee:2b:d2:6f:76:55:48:4d:1b:53:74:5b:9c:
60:17:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:51:07 2026 by rpki-client