
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json)
Hash identifier: QwbhwxZ/rnOVaLkqY2/tkJrwiszB3jETqFD0ZhxYjMY=
Subject key identifier: EA:6E:27:A6:A4:25:4A:74:0D:6C:AF:25:3B:2D:23:69:07:BF:7E:B1
Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
Manifest number: F7
Signing time: Fri 17 Jul 2026 07:31:55 +0000
Manifest this update: Fri 17 Jul 2026 07:31:55 +0000
Manifest next update: Fri 24 Jul 2026 07:31:55 +0000
Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: fMG+xJBVgNBqyNIakuQ3umbP/lwOL7Es8e2zcoNiLYE=)
2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83
Validity
Not Before: Jul 17 07:31:55 2026 GMT
Not After : Jul 24 07:31:55 2026 GMT
Subject: CN=6a59da6b-a7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:ab:20:63:e0:6e:20:86:63:43:3e:cf:f7:
ba:b8:13:af:d5:69:08:f0:65:2f:0c:3d:d6:bd:05:
c8:30:63:44:49:62:ef:e1:94:8d:b3:ce:de:11:ef:
f8:25:6a:2d:b3:64:45:08:86:7d:3d:69:50:f7:b8:
7b:04:b1:78:70:97:ed:c4:f0:c5:8d:df:79:9f:10:
9a:48:e0:13:26:06:8a:cd:92:2b:dc:a4:df:9c:b2:
28:7f:a3:6d:23:f3:09:08:da:21:22:54:ce:6b:03:
f1:40:51:69:36:63:56:b4:95:1e:c3:b9:78:7f:9b:
8f:9e:2e:e3:4a:77:b8:a5:a3:a2:13:ef:7e:b5:e1:
df:68:6e:53:08:9f:1b:6c:52:0c:f6:f6:5f:9e:e7:
31:42:7a:d6:a6:7e:32:dc:5e:07:7b:d3:f3:e8:39:
64:87:91:e0:20:23:5b:c9:06:cc:be:bf:41:30:cc:
39:12:2f:3e:3a:78:21:ff:a0:2c:08:b2:ce:0a:37:
52:77:45:0b:28:2a:dd:a4:58:c9:c2:1e:a6:18:ac:
c4:8f:25:53:fe:3c:44:6a:01:07:b2:75:ad:2e:10:
02:18:e2:f7:e0:04:26:8d:00:c3:bf:f1:34:29:f0:
7b:a1:ba:aa:96:eb:6b:3f:05:6a:d4:36:42:66:a8:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:27:A6:A4:25:4A:74:0D:6C:AF:25:3B:2D:23:69:07:BF:7E:B1
X509v3 Authority Key Identifier:
keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:a8:88:85:db:0e:9c:8c:c5:7b:78:66:59:d1:1b:f5:55:
35:aa:06:00:6c:e8:45:70:4f:be:41:58:15:0c:bf:50:67:77:
8c:12:ba:11:b6:d3:e9:83:20:1d:86:64:8c:37:15:d2:32:51:
89:39:50:f2:6f:3c:37:f9:b1:32:de:4b:14:39:93:e0:c8:f7:
0d:1d:0d:f3:f1:56:bc:3c:0e:8e:98:cb:fb:49:21:ec:c0:e7:
5e:92:94:1a:95:d5:93:d8:46:6e:2b:07:48:76:8d:34:b9:3e:
85:01:fe:59:57:00:1f:3c:c5:62:b6:57:58:8c:a2:f9:dd:37:
95:d0:a1:fb:54:28:05:be:73:d5:f3:8a:05:2a:0d:5e:2f:cc:
c4:2b:d4:d6:1a:2f:9e:db:fe:6f:e4:85:6d:e1:1a:88:97:13:
3b:d2:4a:90:67:1f:5c:ac:eb:b7:62:b7:9b:a7:2c:d2:8b:c7:
49:a6:2d:20:ab:bf:fe:8f:6e:92:6c:98:d6:51:cb:c9:63:f5:
d8:99:9c:f3:29:8d:f2:2b:61:41:cf:96:a2:f4:a8:55:54:ec:
de:07:a7:5f:44:96:f8:52:0e:11:50:8e:75:8d:e9:fb:c3:e1:
d0:49:80:7a:ac:ac:fe:d2:f4:07:b3:1f:7a:c1:c2:05:9a:e1:
c8:98:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:44 2026 by rpki-client