
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier: jpe0WTfUrDSxW3lwWhyRLsSfw/vUVgMv2ql9Xc7Z4fI=
Subject key identifier: B5:73:45:3A:63:45:18:76:4A:8D:58:AC:32:6C:07:6B:2E:4E:84:4B
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number: B8
Signing time: Fri 17 Jul 2026 08:15:44 +0000
Manifest this update: Fri 17 Jul 2026 08:15:44 +0000
Manifest next update: Fri 24 Jul 2026 08:15:44 +0000
Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: w3G3gJO+9O9nEAcYHt9jHppNm/gafNVnBpkRc/7hH7k=)
2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Validity
Not Before: Jul 17 08:15:44 2026 GMT
Not After : Jul 24 08:15:44 2026 GMT
Subject: CN=6a59e4b0-2ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:4e:3e:c9:62:ce:e6:f8:25:a8:4e:2d:7a:
db:c6:12:2d:9d:57:5a:28:fb:26:eb:c0:19:7a:1e:
55:88:e7:f5:8d:8b:50:00:b6:5a:a2:ba:70:1f:9f:
2d:09:ef:91:15:21:39:6d:fb:ac:84:89:e5:00:f5:
ff:90:78:11:77:d4:ef:ea:2e:60:5f:fc:cf:07:31:
6d:67:33:54:c3:0f:5d:78:03:1a:c9:c0:4f:dd:9c:
d9:e9:c8:b8:b4:3a:49:8d:5f:b4:0d:1f:77:c0:7a:
64:19:24:00:d9:ee:67:36:18:53:dc:92:d0:55:3a:
95:16:9c:49:97:76:c0:9d:01:24:03:8f:7e:94:1a:
3e:01:e6:fc:72:a3:22:16:f9:f6:5b:2a:eb:e6:b8:
9e:22:a9:0c:37:d6:55:ad:db:f1:87:6a:35:9a:45:
a2:8a:57:ca:a2:5d:78:ac:00:ca:89:8e:e8:a2:51:
23:0d:09:41:8d:9b:c5:28:91:6a:d2:67:92:b7:3b:
2e:4e:2c:5f:45:b8:9f:5f:5d:95:22:58:88:0e:dd:
16:71:5f:46:84:9a:10:74:08:cc:32:4d:94:47:6e:
d9:8d:63:11:14:62:00:d8:d0:2d:6a:c8:82:f0:b9:
aa:bb:a7:2b:12:1e:0d:8d:f7:fc:dd:f1:bd:00:0c:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:45:3A:63:45:18:76:4A:8D:58:AC:32:6C:07:6B:2E:4E:84:4B
X509v3 Authority Key Identifier:
keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b3:6f:8b:8e:35:32:dd:21:42:1e:94:f5:42:80:41:35:f3:
86:e0:24:6d:f8:13:fd:33:d2:d3:87:9b:17:04:ce:55:c3:bc:
0f:fa:7b:e6:0a:c5:6a:f4:62:38:06:04:2e:03:a6:3e:58:ed:
a6:90:7b:4c:af:e0:d9:cb:4f:17:28:bf:f3:0c:c0:bc:54:ea:
d3:aa:47:3c:89:d9:10:70:90:1b:ec:3f:55:34:21:db:0c:fd:
28:a6:fb:57:da:6f:0a:3b:e8:67:25:82:77:99:e4:53:da:55:
fc:5f:e6:35:0e:33:c7:7c:bf:3d:50:4c:a4:44:24:2a:e4:3e:
29:99:fc:8e:a0:b0:1d:29:ce:19:66:57:4b:fb:36:a4:2a:78:
e3:02:58:34:b9:8e:83:53:31:a3:a0:68:2f:68:d3:84:ca:ca:
4d:88:05:c6:0d:20:cc:2f:68:f3:50:53:42:4d:d5:fd:cd:5b:
d4:52:44:60:28:76:38:18:8b:24:9e:ab:72:eb:8c:1f:93:ab:
fb:c0:5f:c4:0a:4b:87:d6:64:b7:e5:55:fd:d7:f0:16:7a:8f:
f9:8e:dc:f4:11:a7:07:89:63:39:12:df:8f:58:f4:e4:f7:ab:
46:a9:d6:e3:4a:81:0a:0e:f1:f7:65:86:37:c7:9c:e7:e7:b6:
b6:78:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:45 2026 by rpki-client