
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier: QeFwRFyWm9kWYoHgZZ2rcxJEGlVt9cH9H6hvsSCqETM=
Subject key identifier: E7:87:6B:EE:5E:D9:E0:F6:3A:CB:E1:03:72:A7:5F:4F:0F:6E:88:36
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 155C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number: 1545
Signing time: Sun 26 Jul 2026 16:57:48 +0000
Manifest this update: Sun 26 Jul 2026 16:57:48 +0000
Manifest next update: Sun 02 Aug 2026 16:57:48 +0000
Files and hashes: 1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: kpRFdQpC3lOlOQvFaOLMbgj2H32idi90uxTVNYRfFlE=)
2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5468 (0x155c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Validity
Not Before: Jul 26 16:57:48 2026 GMT
Not After : Aug 2 16:57:48 2026 GMT
Subject: CN=6a663c8c-e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:c4:d5:7f:81:e7:6f:ce:0d:68:f4:41:e2:
85:97:42:72:d8:26:36:b1:2e:e3:b3:00:3f:e1:d2:
fc:af:26:0a:1f:80:ff:cf:ad:88:71:cc:a7:ac:09:
a1:82:c1:2f:1e:00:2a:cc:44:58:fa:2e:88:c5:fe:
e0:4d:f5:3f:55:e6:81:6b:6a:c6:30:9a:cf:bc:c9:
81:ab:6d:21:75:c4:b6:94:01:6e:aa:2c:39:c3:24:
c4:03:53:91:81:c0:d4:1c:ef:12:40:c7:43:98:31:
ff:e4:e3:21:60:aa:ab:65:a9:e7:53:ee:4f:8e:c7:
3e:09:52:73:ec:f7:88:3e:f4:65:43:20:11:6e:dc:
e5:cb:3f:2e:ef:d7:7e:66:de:6f:ea:61:5c:cc:f4:
86:dc:18:4e:a6:4c:48:b9:b3:48:31:6d:72:1a:3d:
32:94:f0:e2:f7:d7:4b:0b:a3:f2:b4:d1:75:6a:07:
fd:7b:bd:e8:fb:cb:eb:42:38:1a:62:ad:cb:21:fe:
90:fc:0c:fb:ce:7f:77:0b:0f:c0:d9:48:51:f8:ba:
bb:b9:b9:c0:94:45:42:7f:e8:e2:55:8f:d3:7d:2b:
1d:7f:b4:93:47:dd:19:9e:41:17:19:39:a6:bd:b0:
dd:4c:61:3e:0f:64:c5:77:57:6b:b5:1f:27:02:c3:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:6B:EE:5E:D9:E0:F6:3A:CB:E1:03:72:A7:5F:4F:0F:6E:88:36
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:48:2e:39:31:73:a3:92:c6:f1:81:f9:8c:85:47:f9:39:
b6:62:1e:1d:86:32:56:06:e6:48:3f:59:e7:b2:08:e1:fd:7f:
66:7d:10:51:92:7b:46:ac:d7:9c:7c:bb:4e:34:51:d8:7a:e6:
91:a5:ed:0f:79:1e:4b:0b:a9:8c:4e:3f:a0:2c:d1:4f:b9:91:
25:a0:63:a1:ee:4a:77:ec:c7:0c:27:d8:74:19:ec:7c:05:6f:
e0:84:4e:78:a3:45:f5:98:f3:36:ba:63:9f:42:c4:3e:f9:c2:
43:50:a7:ef:f7:c7:75:80:4c:0f:5c:5d:70:8b:59:e5:8d:d6:
2d:b9:2b:28:0a:6a:e9:cb:fb:b5:f3:67:b0:17:9e:93:29:1f:
84:a3:9b:98:4b:5b:30:f0:e4:b1:4d:2c:f9:1f:db:a2:e1:10:
42:d0:29:9d:a4:b8:b7:b3:36:19:b8:e9:42:eb:03:b4:6e:d8:
f4:ad:06:c2:be:43:8c:8e:fc:c7:23:a7:a7:c0:5b:f0:1a:d9:
58:3e:e0:99:26:24:a4:fc:e8:ec:8d:7a:b9:62:12:c6:1b:fb:
8a:5e:09:26:9e:e6:1e:f2:1e:63:cb:a4:d5:00:92:08:44:3f:
c5:fc:68:d3:92:bd:21:db:e5:21:3f:77:94:3e:76:5f:7c:55:
5d:21:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:39 2026 by rpki-client