
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: 3s+lyleAZNmORldafw2yGQM4b4gURu1hDIUS70O4Fbg=
Subject key identifier: 91:AB:92:7B:8E:12:59:22:5F:DF:5D:99:E1:BA:2C:41:8E:C3:C2:1F
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 01A2
Signing time: Tue 23 Jun 2026 04:24:21 +0000
Manifest this update: Tue 23 Jun 2026 04:24:20 +0000
Manifest next update: Tue 30 Jun 2026 04:24:20 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: of+MQXW1ZPYiUrgP3XzNY/vjb85rd276gnhvdWckzPA=)
2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Jun 23 04:24:20 2026 GMT
Not After : Jun 30 04:24:20 2026 GMT
Subject: CN=6a3a0a75-9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:5f:ce:4b:f8:5b:b8:c9:4f:15:b0:6f:f5:
3a:c9:83:b1:9c:d3:64:b1:c3:76:07:11:f5:87:d3:
ce:02:39:d8:4f:d4:fb:56:5b:2e:d1:94:5a:a4:5f:
84:c7:33:3c:9e:fb:75:a4:e0:58:67:f9:3d:46:4a:
60:10:ef:75:39:c4:5e:dc:b1:89:6b:e0:ee:df:5e:
c9:58:3c:75:40:02:05:fe:ed:28:48:72:ea:37:a5:
f6:ad:5f:7b:70:62:9e:d5:1c:84:7c:01:c9:c9:c9:
98:9e:e2:91:8a:1a:7e:32:76:43:0d:3e:60:8f:dd:
01:c5:e6:44:00:cf:20:4e:7f:05:33:24:8c:86:36:
89:b2:72:e0:9d:57:b0:71:6b:f5:9e:af:76:69:d1:
cb:b9:d6:4d:43:ad:0b:b6:63:e5:4a:5d:b2:38:c9:
99:b8:f6:89:59:0d:18:99:5d:dc:b3:1d:26:9b:a0:
72:7f:7d:5e:67:81:ef:de:a3:3f:d2:27:e5:5a:50:
df:ad:22:ad:88:92:c1:6c:5a:44:16:f0:6f:04:8a:
2b:9e:94:27:90:f6:eb:b8:4f:a9:85:fc:1c:96:9b:
4d:ef:1e:c1:7e:cd:66:f4:aa:f3:76:10:e6:a7:e1:
0e:9e:f6:43:19:9d:18:b7:a9:db:22:11:c9:c8:73:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:92:7B:8E:12:59:22:5F:DF:5D:99:E1:BA:2C:41:8E:C3:C2:1F
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:63:b8:64:0b:7c:90:b6:38:34:c3:df:92:e8:b5:d7:0d:
7b:b2:6a:d1:f9:de:50:71:87:97:d7:1e:24:4a:b9:13:62:d0:
7b:e3:23:76:b8:25:9b:9f:64:2f:a0:90:84:5f:e7:72:f9:b5:
67:c8:45:cc:f1:ee:ad:46:f1:d5:c5:69:dc:fc:be:9b:6c:94:
1f:cd:d3:4b:bd:f8:38:84:4e:29:ae:e2:7b:77:b6:15:6a:e6:
48:2b:7c:dc:3c:ee:ef:b9:b7:dd:8f:1d:d7:33:4e:62:40:75:
7a:b4:af:e9:00:ea:73:3a:62:3c:7e:ab:8d:b9:1e:22:e1:c7:
69:10:68:a9:3e:03:35:72:c2:09:f6:14:12:3b:5e:1c:cc:51:
9a:b8:c4:44:87:cc:82:ee:ce:63:b0:97:ce:bb:06:a6:80:1b:
c1:8a:73:82:6a:78:d7:2d:5b:6f:dd:79:31:01:49:aa:ff:d1:
21:97:ad:1f:28:d6:27:22:04:b9:7b:62:00:07:ea:4a:ed:15:
91:df:b4:c3:5a:98:df:7d:6b:8a:4e:af:eb:b8:fc:c6:17:23:
7f:60:13:1c:76:be:57:35:69:12:ed:7d:5a:24:d1:0d:28:51:
51:cd:04:4f:ab:33:12:ec:9e:32:85:31:4f:84:38:84:b1:fa:
ac:2c:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:32 2026 by rpki-client