
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json)
Hash identifier: rquW4rCjt7JF9/bq73VKdzajrzvhwNQ+f+pVSuWix3g=
Subject key identifier: 9A:F8:A4:7C:B5:7A:81:9C:B5:3F:F0:CD:8D:F0:CD:B1:22:85:6B:2C
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial: 21F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
Manifest number: 21E4
Signing time: Tue 18 Aug 2026 15:59:31 +0000
Manifest this update: Tue 18 Aug 2026 15:59:30 +0000
Manifest next update: Tue 25 Aug 2026 15:59:30 +0000
Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 1tsPNwVcqfuSUydUmOmzCfJGyR378p/fuEXOp55VKhE=)
2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8691 (0x21f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Validity
Not Before: Aug 18 15:59:30 2026 GMT
Not After : Aug 25 15:59:30 2026 GMT
Subject: CN=6a848162-1013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:7d:2a:70:27:f8:72:e7:f7:12:16:57:0e:
c4:e7:e0:cc:ab:bb:dd:9e:9d:0c:6a:f3:44:91:17:
ff:fd:35:5f:db:b0:e4:0f:8b:c4:31:fe:d2:88:f4:
0e:ed:f1:3d:d0:03:f7:e6:c1:5c:64:f1:fb:cd:32:
b2:cb:c5:63:0b:36:97:e2:b0:e3:57:6b:d1:59:60:
ab:28:fd:e1:8c:81:83:06:89:0b:af:84:30:25:70:
c1:05:e3:79:67:4b:3b:d6:bd:5b:aa:6d:46:c3:2c:
46:f0:f5:f3:2c:2e:f5:73:cc:98:27:fb:ed:65:dc:
b5:9b:90:b3:18:24:ec:1c:c8:4c:3a:05:93:f7:e1:
f6:25:77:21:5e:6c:41:8f:99:ae:87:e3:14:e9:bf:
86:0f:d1:b8:e4:30:5e:b7:ac:cf:4e:5a:75:0a:4e:
fd:21:21:58:a6:57:82:bc:ed:2c:e0:ae:3c:f5:a7:
07:75:2f:ef:77:49:db:03:e5:9f:c1:66:13:21:fc:
cf:af:dc:38:3b:6b:3d:2d:a5:02:dc:15:b4:cd:7a:
32:8a:87:fd:f9:7d:35:84:b4:17:c2:b5:5c:ae:7d:
6a:a5:b2:24:ac:81:a4:62:17:85:36:35:d6:22:98:
5d:a4:92:9d:1b:aa:3b:fe:42:af:e2:c1:24:5b:af:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:A4:7C:B5:7A:81:9C:B5:3F:F0:CD:8D:F0:CD:B1:22:85:6B:2C
X509v3 Authority Key Identifier:
keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:07:1a:b5:af:b6:d2:41:67:1c:ad:66:a4:97:20:c6:00:dc:
9a:0c:2b:2d:4b:ae:8c:23:27:cc:48:0c:6d:9c:f9:2d:2d:3f:
53:a0:80:9b:02:3a:6b:6d:a0:59:07:e8:18:a1:16:95:5e:57:
a0:0c:2b:de:7a:70:77:66:51:ac:8a:3b:4c:e4:1b:62:03:5b:
c4:a2:68:8f:f4:d9:8e:95:19:aa:71:a1:eb:4e:1d:30:6a:aa:
24:28:15:75:46:7c:77:b2:0d:6b:8a:96:99:e3:13:e5:f8:27:
49:e5:e6:de:3e:e6:5c:23:f9:4b:fc:dd:10:6f:62:a8:de:0c:
88:31:0a:ad:c8:3a:23:f7:53:85:74:2c:ba:ba:a9:20:62:42:
eb:db:7a:f8:bd:9d:55:22:85:d4:72:1f:b2:e5:2d:b2:b2:c1:
ce:95:cc:d7:b7:2a:b8:b6:42:09:fe:73:93:b1:d1:fc:0b:aa:
93:6d:95:07:25:d3:cc:3e:fb:f6:f1:8e:cd:ab:7a:dc:6b:9e:
0f:51:02:22:09:ac:7e:5b:a4:14:1a:a1:92:e7:a1:b8:b6:df:
82:93:b0:e5:73:7b:c7:42:7f:87:d2:90:61:04:1c:03:2f:bb:
59:7b:b3:f4:75:a2:2f:2a:13:bd:7b:f4:a9:3d:8e:ed:68:36:
07:51:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:30 2026 by rpki-client