
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier: VNXC0H5dWmocgue7RqpsjH+KerQwbff9QEgAWwOQBI8=
Subject key identifier: 22:3E:85:84:10:F7:09:B1:6B:74:EB:F5:47:E7:82:24:2C:86:AF:9B
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number: E2
Signing time: Tue 21 Jul 2026 08:12:13 +0000
Manifest this update: Tue 21 Jul 2026 08:12:12 +0000
Manifest next update: Tue 28 Jul 2026 08:12:12 +0000
Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: 76Slx3c8fJnc9jzjIaxox1u1fWN7E66/j4ZTs+utT/E=)
2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=)
3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Jul 21 08:12:12 2026 GMT
Not After : Jul 28 08:12:12 2026 GMT
Subject: CN=6a5f29dc-53e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:bb:6a:55:c1:69:78:6e:81:60:eb:5c:36:
a3:10:74:87:5a:9a:1d:32:1a:ff:d2:ac:3f:df:3d:
c6:5c:76:ce:76:b9:ae:d0:90:8a:46:c8:52:6e:24:
d0:c2:b6:ef:c7:0b:dd:a6:47:57:34:9c:c9:0f:2a:
ca:2b:69:33:cf:97:2f:30:98:76:81:1b:ca:2b:c9:
b4:de:c3:b3:0e:01:2d:0b:d7:76:7e:03:99:72:2c:
9f:52:56:35:52:2c:15:63:d5:5d:ea:58:d2:f2:45:
ac:83:34:3e:24:fb:f2:5f:db:0a:c5:b4:69:d1:43:
be:63:d1:39:11:86:bb:19:9b:42:3a:66:b5:f3:a2:
c2:ca:2a:51:77:06:84:4d:5f:e1:08:41:95:f0:36:
cc:08:fe:be:36:5d:2d:6b:36:85:b4:43:e3:71:9d:
2c:f5:58:c4:d0:4d:95:e7:c1:1e:64:cb:d0:d2:a6:
0c:cb:b3:64:75:3c:4a:1a:c4:fa:fa:e6:99:cc:d2:
f0:35:30:67:a1:1f:2e:6d:46:c0:19:d6:5e:22:bf:
03:07:f4:7a:ec:ef:4c:b2:5e:2b:c6:3b:68:87:ad:
21:24:d8:ad:b4:fe:b0:e4:c2:bc:2d:2d:75:ec:a7:
94:54:1b:21:d4:90:50:17:c8:09:25:af:7f:cc:29:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:85:84:10:F7:09:B1:6B:74:EB:F5:47:E7:82:24:2C:86:AF:9B
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:0a:2d:21:77:a6:8e:fb:c1:ba:0c:96:d5:e5:02:95:91:
8d:90:0c:64:f3:90:72:6c:db:43:b3:5c:2f:5d:c2:a3:0e:ee:
2f:c7:56:b8:d7:4a:2d:fd:bd:81:d6:56:94:28:43:19:34:66:
fd:b0:9a:35:8d:a8:48:a4:6a:02:6c:5e:e0:bb:96:08:8c:56:
e8:e6:f8:9d:14:79:ea:a3:d7:96:f0:2e:5a:5b:62:61:7b:98:
43:72:cd:15:a1:ed:e7:dd:17:08:b1:b1:68:3a:54:89:ad:8c:
63:51:c3:46:f2:6e:cd:75:25:94:82:ed:1a:87:2a:23:4e:4a:
1a:a5:22:91:93:fe:1a:3f:ca:7b:0a:b7:87:10:09:82:dd:cb:
30:80:5d:72:5c:94:83:d1:c4:1b:f2:2d:9a:ba:07:e4:16:14:
b0:74:9d:ce:f4:29:8b:bc:05:f5:03:a3:94:54:7e:ec:a7:d0:
66:f4:89:4e:79:1d:75:9c:ed:cc:b5:dd:26:6a:57:b5:8a:f6:
ce:ea:3a:9d:f3:39:2b:49:1f:f8:00:d9:f9:51:84:a7:a4:7b:
a2:8f:aa:59:a6:49:49:d3:d2:03:b2:f0:ce:70:e9:bb:77:a7:
32:b6:1d:b9:28:67:64:a5:77:69:1f:a5:52:03:66:8f:23:66:
12:86:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:14:52 2026 by rpki-client