
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: HZylEDOZcjoDaCgbJ4B7ZDnsKtxa0zbJ7d46TX0u0Mc=
Subject key identifier: B0:70:CB:44:63:5C:21:C8:02:D0:23:75:15:DE:B3:0D:35:24:83:8D
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 356B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 3567
Signing time: Mon 20 Jul 2026 14:37:23 +0000
Manifest this update: Mon 20 Jul 2026 14:37:22 +0000
Manifest next update: Mon 27 Jul 2026 14:37:22 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: /ukPmjq+KyEcEXWh5qb8io0mxoQBAHtMwLVPm/PMZRQ=)
2: C264EF40348611F1AD86C498AC833773.roa (hash: UCNqkXsLDv2zmllrc+fMw9VjxTkEQBJi+aRxDGtZ/P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Jul 20 14:37:22 2026 GMT
Not After : Jul 27 14:37:22 2026 GMT
Subject: CN=6a5e32a3-e275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:da:46:4f:cd:b8:30:64:64:d4:5b:28:ec:
66:5b:66:41:ec:86:1a:ea:b4:75:f1:cd:6b:11:3e:
38:1c:85:d3:f0:d1:b1:eb:0d:95:56:48:ab:14:3b:
04:06:cd:9e:d0:c5:9b:ae:d0:3b:f5:bb:6c:3e:19:
8a:29:f5:f2:94:a2:49:ae:68:01:2b:f9:10:ed:2b:
aa:81:c1:f8:52:1a:6c:49:40:f3:07:e5:21:cf:55:
f7:e6:49:88:74:07:91:31:c4:f3:82:03:b5:b6:db:
5e:ab:e9:56:25:cd:cb:8d:94:7e:67:7c:ba:72:c8:
62:87:38:86:6f:9c:c5:e2:ae:cf:2c:53:1d:03:f1:
89:37:bd:72:ad:fb:51:45:b5:81:a2:6b:19:35:ea:
14:97:ec:22:64:57:ef:65:07:f1:d8:5b:10:54:4c:
b9:28:1c:4e:00:da:07:90:d8:64:a2:30:d4:b5:7d:
04:6b:1f:67:b8:f7:d1:62:2a:f5:5d:6c:9a:76:fe:
89:d7:ab:09:53:e1:37:9d:2d:7e:86:de:43:b9:ec:
b5:e9:1e:21:af:ee:11:f4:f1:f9:08:2b:f9:05:0b:
07:78:fd:cf:a6:bc:45:22:56:db:88:a3:76:05:89:
c2:82:54:b0:a6:be:5d:dc:d8:82:94:ae:6c:44:00:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:CB:44:63:5C:21:C8:02:D0:23:75:15:DE:B3:0D:35:24:83:8D
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ce:14:3b:a2:11:70:05:24:d3:07:29:b3:c2:f5:3d:bd:22:
7f:76:55:ab:e1:23:1b:05:aa:91:ae:c2:46:6b:6f:4a:6c:4a:
39:bd:dd:4d:4c:9c:45:46:b5:04:84:70:39:89:3f:9e:25:db:
77:fa:2b:e4:30:93:ba:ae:24:41:bb:e0:e6:44:05:73:2d:e8:
bb:a5:1f:94:8e:cf:5a:6c:7f:14:0d:d5:51:fc:1f:1f:9d:bc:
7e:8b:b7:d0:ad:ee:e8:ea:e8:6e:a5:66:24:bd:40:cb:25:4a:
dc:51:2e:ad:8c:ba:84:e3:29:56:36:89:39:b7:d2:6e:fa:d5:
33:1a:43:f1:84:46:72:3f:94:89:28:43:0c:c7:2c:1d:78:01:
48:db:b4:8f:76:49:07:fc:5a:2c:c1:99:92:cb:17:df:56:42:
b9:bf:0c:85:2c:60:5b:93:35:1d:6f:43:3b:8f:b1:a0:e7:3e:
fe:b2:57:9e:11:07:a0:f8:29:6d:02:ff:ff:87:64:11:fe:19:
cf:b7:fd:51:0f:40:09:ba:c2:cc:6a:b1:89:0f:8b:19:5d:98:
1d:f4:75:a0:1c:8e:ce:5a:c4:a7:7b:44:59:02:4c:23:ee:23:
3e:86:92:73:b7:af:19:2d:a3:c1:53:85:c6:88:c7:b4:d2:04:
b0:05:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:34:22 2026 by rpki-client