
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier: iH9y8kOUrEua5GSM8x4zNmsl9lg/dP6YtPhG+quEjkc=
Subject key identifier: 60:17:B9:9E:BB:66:4A:F3:FC:C2:B9:AB:12:16:CC:CC:EC:1C:C2:52
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial: 318D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number: 3186
Signing time: Mon 20 Jul 2026 15:29:55 +0000
Manifest this update: Mon 20 Jul 2026 15:29:54 +0000
Manifest next update: Mon 27 Jul 2026 15:29:54 +0000
Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: xkFa04OzGPrkKP/jcIuWhyx7rveGLEg+4/szCxEKWXE=)
2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12685 (0x318d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Validity
Not Before: Jul 20 15:29:54 2026 GMT
Not After : Jul 27 15:29:54 2026 GMT
Subject: CN=6a5e3ef3-cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:fb:cb:4f:51:46:2c:01:ba:94:34:f2:dc:
73:de:11:1f:23:4a:27:37:e1:b9:a7:4b:3c:87:b5:
eb:fc:4e:6f:7e:79:98:7a:d6:dd:7d:98:3c:b9:21:
fb:f2:e9:09:2f:2c:8c:13:e5:24:35:6c:08:d1:01:
b5:1e:04:23:42:4a:d8:51:9c:21:16:49:a8:8f:2a:
08:ae:ee:40:ac:9e:3a:ee:7f:c6:ad:44:fe:ba:f6:
54:4c:10:84:c0:eb:75:e0:45:21:01:bd:71:01:50:
cd:9b:90:9c:9d:5d:4f:a3:63:43:4f:15:64:0c:b5:
32:35:ee:85:49:5c:20:be:95:4a:d4:84:c1:f9:b3:
49:9f:ba:e4:1c:4a:1e:8f:70:33:59:ac:cc:74:11:
25:e1:68:b8:eb:80:85:41:ce:d0:8b:2c:2c:c9:d3:
d5:5f:55:da:a8:30:ca:13:f9:c0:a4:a4:b6:7a:60:
40:84:74:f8:9a:cd:e0:7c:62:e6:af:75:c6:98:ea:
d2:52:4c:2e:a4:f3:f0:4f:f2:6d:f8:0b:b2:f8:41:
a3:d3:be:a5:85:83:6b:b8:55:10:fc:fb:c7:c4:a2:
f8:2d:42:23:36:7e:58:ce:fd:e7:25:aa:5a:b2:c8:
f7:18:cb:c4:55:2c:61:0b:3d:e7:53:82:b9:26:62:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:B9:9E:BB:66:4A:F3:FC:C2:B9:AB:12:16:CC:CC:EC:1C:C2:52
X509v3 Authority Key Identifier:
keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:8f:ce:35:79:1f:13:bc:f9:87:b5:c3:e2:9d:d5:fa:62:
7a:04:5c:27:96:7e:1b:1f:f6:14:5a:ae:83:aa:9d:f4:d9:8e:
02:69:7d:c5:08:11:ed:f5:d8:73:4f:5c:f0:04:66:ed:b0:20:
e8:05:f3:e1:a8:17:cf:00:0b:d7:0b:13:3c:d7:60:7a:f8:ef:
fa:0f:bd:3c:21:0e:79:16:bb:f6:0b:05:98:99:b4:bf:de:b3:
42:82:53:5e:e0:06:a8:b9:a7:4e:46:fe:9f:df:1d:70:31:97:
bd:9c:85:55:7f:c2:97:ef:05:13:0d:d5:ea:5f:e1:dc:4d:ae:
72:df:ed:80:72:be:b4:21:19:b1:d5:51:94:c7:02:90:a6:5e:
98:31:af:65:62:be:2d:48:ab:a6:f0:2e:d9:0d:5e:8a:5e:be:
34:fc:40:1a:3a:50:e7:7b:a1:1e:e0:98:70:97:7d:49:91:42:
6c:47:0b:1e:99:07:29:5d:42:ec:33:91:3f:d7:83:af:9e:5f:
e8:38:92:2c:28:d6:16:0e:be:0d:3d:eb:5a:91:8a:b6:87:68:
ce:c6:15:37:b6:d6:60:a3:fd:5e:58:f5:3f:b0:5b:8a:f1:fb:
c3:00:d0:d6:49:50:dd:6b:3c:e9:96:0c:bf:ef:33:de:32:4a:
da:73:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:00 2026 by rpki-client