
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: NIYlYsMMzF4yiNyR/gQEbiAggTHQnKjr5HVPZgCAPAA=
Subject key identifier: 72:18:3B:61:77:E1:6A:14:15:D6:53:41:E6:E3:46:BF:C7:B7:4A:89
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: 0132
Signing time: Fri 17 Jul 2026 06:43:58 +0000
Manifest this update: Fri 17 Jul 2026 06:43:57 +0000
Manifest next update: Fri 24 Jul 2026 06:43:57 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: All3c2S2R/p1VZfT4qfmtvGD2WkSpJGdrcXhIud2f4Q=)
2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Jul 17 06:43:57 2026 GMT
Not After : Jul 24 06:43:57 2026 GMT
Subject: CN=6a59cf2e-8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:e3:a4:32:e4:e4:a6:73:4d:d6:d0:89:b7:
52:45:9e:26:cb:0b:b2:ed:34:0a:fd:1f:5e:b9:8d:
f8:d9:53:c8:1f:89:c7:5f:3e:75:12:7b:76:64:e2:
47:19:ba:83:20:58:37:0f:41:02:87:ba:d3:dd:c5:
36:e8:25:b8:fa:61:8d:d0:5a:fa:0c:08:45:0e:c0:
bf:e9:eb:5c:06:d4:21:ca:4e:e4:17:cc:fc:76:73:
f6:2a:d0:5b:8c:5d:b1:41:2d:ee:cc:5c:a6:87:aa:
96:d1:84:61:a3:35:24:0d:86:90:fd:2b:ea:43:ce:
43:e8:b1:7c:4a:83:97:4f:bb:a4:b6:ff:ec:4d:3a:
e8:ed:fe:ea:79:c3:e2:a8:27:55:07:fc:d7:47:ab:
c7:b8:ef:1a:bf:ad:97:8d:4e:4d:5b:a7:d2:c5:f1:
ae:be:cc:a5:5b:50:92:c1:36:fe:fa:25:ba:f4:13:
87:64:5b:f1:24:de:d5:92:8a:bf:26:bd:9d:d1:d4:
cc:d2:05:65:c3:0e:7c:a6:c7:0a:73:ee:43:92:bb:
35:cf:75:b9:04:b8:81:77:aa:2c:a2:5e:72:f0:c3:
40:84:9d:19:a0:73:3b:8e:fd:76:e3:6d:26:81:6c:
6c:64:5e:df:b3:8e:f5:00:3f:b8:6d:62:a3:bf:79:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:3B:61:77:E1:6A:14:15:D6:53:41:E6:E3:46:BF:C7:B7:4A:89
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:54:3b:72:2e:f6:a1:84:19:8a:00:1c:52:72:28:1f:46:
8b:d1:87:83:56:af:45:ac:90:a0:0b:88:ec:00:16:7a:d3:c5:
6f:cc:e7:a7:ce:4f:ff:69:8d:73:5c:8c:09:79:c2:e3:40:19:
f0:c0:c5:02:38:a7:2d:dd:65:01:54:d7:08:c4:5a:1e:ed:2e:
99:6e:d0:f3:4e:d5:62:10:98:88:b6:9e:cf:2d:dc:43:a9:bb:
2f:9c:39:ed:5d:d8:a1:b0:8b:b9:4b:76:2f:a1:26:cd:3d:1b:
fb:7d:49:0e:7e:73:d4:29:16:f1:51:fc:d8:32:3b:97:15:0e:
48:c2:ef:29:99:0b:bd:50:e0:ed:db:85:b9:39:03:29:a6:fb:
fd:cf:3b:fe:e8:0e:d4:ad:7f:db:ce:56:b4:cf:30:ee:5f:fa:
31:df:83:df:6f:cf:02:5e:48:5a:e2:29:1a:64:3d:bd:3d:5a:
af:9f:0f:2d:98:63:d5:4c:be:01:e8:fd:9b:49:9f:74:a2:2a:
00:9d:af:51:6f:c7:19:00:c1:e8:51:ed:25:3a:70:9f:96:21:
ae:d0:cb:d5:12:21:06:3b:80:3f:b9:a2:2c:cb:47:54:de:92:
44:0b:90:a4:5a:fe:36:49:f6:a8:79:be:93:42:b5:4d:f5:32:
f4:fa:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:17 2026 by rpki-client