
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: PXoXM680fTQkByIjCSufOi1Oz4905xp6IwNstOE2sy4=
Subject key identifier: 07:68:F7:A8:DF:73:B0:3C:1C:96:80:6E:C6:58:0C:7A:97:A8:53:16
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 0758
Signing time: Mon 20 Jul 2026 22:20:31 +0000
Manifest this update: Mon 20 Jul 2026 22:20:30 +0000
Manifest next update: Mon 27 Jul 2026 22:20:30 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: i1sPyruGKDxJGHbEbdk+3re1FB9d1KKnxy2q7Bu3AdI=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Jul 20 22:20:30 2026 GMT
Not After : Jul 27 22:20:30 2026 GMT
Subject: CN=6a5e9f2f-d3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:11:9c:6f:5c:a3:f8:9d:a6:8e:e9:29:58:
61:98:7e:5a:b6:ae:d2:38:4a:3f:f2:ed:63:41:56:
5b:be:50:71:e4:b7:07:59:14:d6:0b:48:49:8f:66:
6f:36:f3:7b:ad:cc:b9:df:67:a1:38:61:7a:6b:d0:
e5:5c:7c:d1:a2:6e:da:c1:e2:48:18:e4:09:f0:0e:
fc:37:aa:c4:b3:54:54:b2:a0:8f:ff:ba:2d:5c:3c:
c8:bf:bf:20:5f:cd:53:95:04:2d:2d:52:1d:76:3c:
48:24:d7:a7:7b:29:63:bf:b6:1e:0a:16:50:ee:0f:
be:22:67:dd:04:4e:78:5b:82:84:8e:c7:4a:5d:db:
38:a3:3b:7a:ca:b1:b1:4f:00:97:8a:b3:58:ab:2f:
a2:35:3e:14:85:c1:2d:5e:58:4d:1a:c1:5f:b1:ee:
4b:e4:41:c3:3c:15:aa:1d:c1:2e:8f:f5:fe:7b:82:
02:40:85:2a:94:aa:14:cf:60:18:c6:0f:c9:a4:b0:
0d:87:f0:04:ec:e2:bc:ba:36:8e:f2:57:43:85:f2:
10:ad:c2:64:8d:0a:48:19:b7:94:af:b0:3b:28:30:
18:38:2c:7c:da:b4:40:f8:5e:8f:e0:e6:31:43:02:
c2:76:da:59:03:5f:fe:68:f7:d8:b3:7d:9a:78:36:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:F7:A8:DF:73:B0:3C:1C:96:80:6E:C6:58:0C:7A:97:A8:53:16
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:95:65:1c:88:d2:f6:36:91:3a:a3:e9:ca:6f:b7:e9:ac:0f:
91:c2:76:38:19:bb:42:c1:e0:de:a7:bf:9e:7c:b1:9e:a5:4a:
ce:82:5e:37:20:49:d4:18:4d:ed:8d:64:81:7d:35:c0:c4:63:
9b:d7:a3:44:cc:70:a9:0c:42:85:ba:a8:bf:f5:af:4f:72:1a:
1c:68:a6:c5:f6:82:dd:b9:9a:03:f2:46:f8:dc:e7:5d:b9:7d:
0d:4d:5c:f2:5e:01:97:52:6e:b7:04:86:47:cb:bc:3e:87:5b:
03:df:ac:9c:a4:3f:5c:c3:de:13:7a:05:01:ba:81:29:57:aa:
3f:ed:f0:17:67:3d:dd:3e:3e:86:c9:60:e5:86:c5:a8:8e:9d:
e4:38:62:8d:eb:f7:3d:2c:28:b6:43:46:0b:91:fb:46:62:98:
80:92:d9:f3:ad:3b:1c:cc:f1:86:1a:b1:6d:1e:38:88:42:1d:
41:0f:30:f3:45:e9:7c:f7:7a:41:30:7c:b9:fd:61:22:23:5a:
9c:9e:50:2d:93:50:38:72:1e:a4:40:af:40:18:7e:8f:d4:ad:
d6:95:2e:bd:3e:15:34:6b:88:fe:54:ed:ad:51:c2:3f:3c:d5:
43:9b:fe:8d:89:e6:8a:e3:81:81:e7:14:b3:e7:84:22:f6:7f:
9f:ad:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:14:45 2026 by rpki-client