
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json)
Hash identifier: Bhe5qgVtncJkBSX4dtMV2RH/rCZvBJELjgsbRHfpW2k=
Subject key identifier: 12:EF:FE:61:02:95:7D:04:86:B1:F2:E6:50:9A:86:EB:34:E4:CB:A1
Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
Manifest number: 0177
Signing time: Thu 13 Aug 2026 04:19:42 +0000
Manifest this update: Thu 13 Aug 2026 04:19:41 +0000
Manifest next update: Thu 20 Aug 2026 04:19:41 +0000
Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: NVLrxr1nCSF/AowUXxcrXokwuyjCPFCRde6VYnZ+bpY=)
2: jsc9Rn7pQ7gShC6l1kkZBE6tymw.asa (hash: hMhoSubYagnVnZCyd/oeYugUTvsb//DcqIGQJikadoE=)
3: C0C401905AE311EF90924C30C4F9AE02.roa (hash: rKKs75f3Fq0WXiFUQVZhwV3/C+6KDS0+3S6WBSvsbeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 04:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402
Validity
Not Before: Aug 13 04:19:41 2026 GMT
Not After : Aug 20 04:19:41 2026 GMT
Subject: CN=6a7d45de-5759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:8f:1c:de:2b:24:9d:f1:7f:8c:cd:a4:18:
d2:7a:f6:e6:ce:57:30:39:ab:ce:8c:d5:34:d1:a3:
29:f6:04:08:e4:13:fb:0f:b0:5e:78:56:34:ef:07:
d4:86:58:48:2f:4f:98:e5:26:c3:72:11:6a:ce:4d:
fb:f9:ff:77:15:62:cc:e1:e9:a5:f9:73:79:69:a7:
ee:50:70:e2:07:44:ac:ad:b0:81:c9:56:b1:13:c8:
7b:c4:e2:e4:22:b0:0c:14:2a:96:0d:db:1f:41:12:
c1:f8:fe:1b:ea:f0:6c:7c:19:d2:6d:a2:fb:92:3a:
2f:53:ed:22:bc:e5:f3:aa:a9:ec:43:ec:eb:2b:1f:
db:fb:37:b4:84:83:d9:27:6b:70:5e:7c:6a:b5:32:
ec:1b:80:3e:ea:cd:54:c1:5c:ab:ee:e1:e7:ec:0f:
b7:be:7b:ab:d3:9a:d0:16:8f:16:ab:52:0e:4e:45:
5c:b4:71:90:3b:1a:14:80:92:d9:f2:9d:e4:69:0c:
08:da:73:0e:fb:fe:49:d1:d3:93:83:f0:50:57:8f:
8b:0a:8b:a6:09:0d:c9:56:aa:c5:a2:5c:01:d8:ec:
74:73:99:8b:b9:2c:eb:33:c0:66:bf:80:67:7b:08:
b3:14:99:cd:85:c2:5b:9f:18:61:24:d5:75:c8:28:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:FE:61:02:95:7D:04:86:B1:F2:E6:50:9A:86:EB:34:E4:CB:A1
X509v3 Authority Key Identifier:
keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:0a:30:31:2f:8a:57:30:49:ad:f0:2c:e0:27:08:d6:e8:
6d:e9:b4:d6:e5:d0:62:ab:42:fc:79:0b:a1:74:31:9f:ad:7d:
8b:0e:6c:ab:b3:36:7c:11:cb:8d:80:af:52:5f:32:e9:5b:bb:
9a:7b:3e:7b:77:69:72:6e:d1:b0:5a:4d:24:97:89:87:2d:c6:
a1:97:db:a9:0d:04:e1:26:b6:48:ea:5a:8b:2f:98:6b:4a:52:
67:5a:d2:a5:96:63:a4:76:d2:45:eb:6e:be:e3:fb:bb:a6:94:
2b:bf:c8:f7:81:38:0e:84:95:82:1c:7f:90:70:25:7d:48:bb:
4f:e9:56:de:e5:4c:79:96:02:c5:12:88:6e:37:8c:4d:02:e2:
87:a1:2b:77:2f:b7:f6:97:dd:19:52:4e:c6:54:37:85:0d:05:
ea:f7:9f:c0:0e:0d:55:e9:dd:95:51:6b:bc:81:47:7b:18:36:
ee:85:a3:86:0f:2f:51:04:6a:98:93:73:7e:d6:92:0d:34:20:
6c:2b:4b:79:ec:f4:e7:df:98:61:f3:06:d9:04:6d:cf:20:4b:
67:ad:c0:84:66:e5:63:e6:c6:73:2b:0e:ca:79:15:6a:3a:05:
27:8c:d7:e6:ad:37:f4:27:c5:2e:ec:7c:8c:9a:cc:e0:47:5b:
1f:a4:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:47 2026 by rpki-client