
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json)
Hash identifier: PL9CbbbiliAJvkn81Yv/L5v0ByNkNKeSb/FpCYSHCyA=
Subject key identifier: 9A:16:1B:5B:81:AD:E1:49:A6:EE:4F:95:AE:56:92:60:64:49:35:4A
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
Manifest number: 03D3
Signing time: Sun 05 Jul 2026 00:58:53 +0000
Manifest this update: Sun 05 Jul 2026 00:58:52 +0000
Manifest next update: Sun 12 Jul 2026 00:58:52 +0000
Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: jX+VVlF46KR+05CZSD749L31bhyhUynDBebIQ1Rk0yQ=)
2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: vZQX4t8MAHwhEYks15AvCgJPCCzogD0p8+MoFespB6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 00:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Validity
Not Before: Jul 5 00:58:52 2026 GMT
Not After : Jul 12 00:58:52 2026 GMT
Subject: CN=6a49ac4c-6d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:c7:8f:48:49:c7:9b:b0:62:ee:3c:14:b4:
8e:52:93:e5:ab:bc:cf:37:f4:73:71:1d:09:9e:ce:
de:93:a8:b0:d3:7d:97:89:84:98:21:20:a8:3e:7d:
e1:4d:a1:0d:25:b6:a9:cc:98:88:ea:73:3b:3c:53:
d5:cc:26:4c:d6:ff:d2:55:ef:ad:27:6c:f0:38:57:
2c:ba:82:e6:d6:b1:ae:d2:22:ce:2f:5f:85:7a:c1:
be:4b:31:47:1d:2d:e7:ef:65:42:a9:d5:e1:b5:7a:
10:5e:85:67:40:48:5a:29:c3:59:cb:42:bb:73:dd:
ac:e7:de:eb:63:fe:29:cd:68:ac:f5:cc:3d:46:1a:
bd:fa:3f:d7:eb:47:23:e7:34:ab:3b:cb:f5:f9:9e:
c2:a3:27:e8:55:c9:44:7b:44:5a:77:b5:9d:29:78:
78:ad:43:7c:98:83:02:cc:e8:25:ad:37:5f:97:88:
9b:ce:bc:b8:8c:d4:bc:51:9a:52:d7:41:c8:f2:60:
c3:83:53:cc:ae:ad:36:19:76:3f:2c:b0:8a:8f:07:
aa:3c:30:73:aa:d5:73:66:be:c7:65:b3:1c:98:06:
06:d7:34:11:ba:dd:b4:20:69:71:54:60:e3:cc:be:
fb:08:cd:98:05:f8:60:02:e6:e4:a1:95:72:4d:f1:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:1B:5B:81:AD:E1:49:A6:EE:4F:95:AE:56:92:60:64:49:35:4A
X509v3 Authority Key Identifier:
keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:a0:04:06:65:c9:ba:b7:1c:ad:a7:2f:ad:98:c2:1e:ee:
33:99:6e:c4:06:36:00:d3:3e:b6:6f:df:4d:fd:86:14:f0:1d:
cd:d0:e7:65:d3:a7:c8:94:dd:f4:67:a3:70:8a:08:df:25:a5:
70:7e:d6:dd:c7:8b:3d:db:b1:ae:35:41:c2:03:4e:88:4c:2f:
43:dc:ea:93:9f:7a:29:29:80:88:b1:f3:20:00:7b:6e:f5:da:
da:00:fb:17:9f:d5:ee:00:6d:4b:ff:b4:34:1c:39:0d:21:74:
4f:b0:cb:6e:4a:a6:c0:aa:18:3d:e5:9f:f9:f4:0e:a6:1a:d1:
cd:98:fd:b2:9b:9d:cd:50:da:29:db:b8:9a:cc:9a:7a:9c:a9:
64:c8:db:a1:6d:ee:05:7f:a0:5d:a7:a3:40:00:c5:ff:b3:e2:
fe:b5:6b:2a:f1:8f:7a:33:b0:23:52:9b:d5:c3:57:01:e8:e5:
f1:eb:c8:8f:62:57:68:3b:f6:bf:42:a0:e3:e4:a0:28:a5:be:
97:11:9c:39:af:83:60:c6:de:af:70:6a:ad:2d:eb:01:c0:d4:
2f:ef:23:a0:a1:ce:17:8f:41:62:3d:35:bf:69:e6:a2:6c:f9:
c1:88:f6:cb:46:fd:29:0e:88:fb:dd:f3:74:86:22:11:b3:ef:
8c:d9:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:43 2026 by rpki-client