
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier: 1s1ft4G/HmzkBKEFsSq3FMUtnvm0Vs8y83RZ4zSDlms=
Subject key identifier: 10:E1:8B:FE:5A:AD:23:76:F1:91:76:AD:26:EE:7E:A6:54:08:0D:99
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number: 7D
Signing time: Fri 03 Jul 2026 08:36:47 +0000
Manifest this update: Fri 03 Jul 2026 08:36:46 +0000
Manifest next update: Fri 10 Jul 2026 08:36:46 +0000
Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 5P3tmaO2XKelHnEonDcoy0XmVERNci2QXVBgIRidcJI=)
2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 08:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Validity
Not Before: Jul 3 08:36:46 2026 GMT
Not After : Jul 10 08:36:46 2026 GMT
Subject: CN=6a47749f-9a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:bf:82:02:f7:3e:a0:8b:6e:36:50:27:78:
3b:4f:cf:8e:fd:43:ff:4d:00:88:c5:f2:82:92:74:
b4:80:8b:36:dd:c8:7f:6e:e5:09:77:19:1b:b1:b3:
41:eb:65:00:17:91:b8:f3:cb:4e:32:b4:f7:45:72:
f4:d7:0d:23:a7:eb:ff:e2:e2:69:f8:1b:ad:9f:17:
8e:82:4f:43:90:c0:e4:5a:df:9b:d6:16:4b:41:d2:
7a:93:ae:1f:5f:d9:ed:26:68:f4:87:51:de:2c:5e:
d3:ad:20:9b:b7:17:3d:3e:e8:6c:1d:31:d2:10:d4:
1a:17:3c:79:4f:ba:18:cb:91:5a:95:a0:08:0b:ed:
e0:d7:5d:f0:9d:40:f8:b6:a8:27:5e:53:f5:f9:cb:
05:d1:6b:65:3d:5d:2e:5f:f4:0a:be:71:6d:84:c5:
58:23:44:30:24:05:47:29:be:af:09:fc:12:d0:d8:
d8:fd:c5:6c:0d:d0:e2:c5:0b:88:bf:c6:32:f1:70:
6d:2d:47:6c:f6:cf:e9:01:1f:89:20:8e:fd:57:c2:
ca:d6:d1:bd:81:cf:a8:cc:e7:14:07:42:b2:48:99:
53:1b:c8:b9:c5:37:d8:1c:df:e8:f2:e6:1e:58:8a:
4e:15:36:e9:3a:82:a9:26:19:12:62:6e:c5:6e:33:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:8B:FE:5A:AD:23:76:F1:91:76:AD:26:EE:7E:A6:54:08:0D:99
X509v3 Authority Key Identifier:
keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:9f:9e:9f:b6:48:44:1d:26:0d:b6:43:cc:44:64:5a:b4:
b9:49:f6:dd:b1:99:63:7d:2a:ea:6b:10:9c:44:40:68:ec:99:
fd:41:09:6d:ea:39:43:21:9e:48:5f:9f:ea:ff:76:37:f3:05:
c2:0d:5f:37:34:b3:2b:48:dd:6c:98:e3:d6:bd:ce:7b:ca:bb:
8c:97:ee:37:33:32:8b:26:79:f6:dc:13:be:a8:f0:64:32:b0:
59:af:0b:f4:81:2b:90:63:01:55:87:42:d4:d1:2c:ca:d0:af:
35:de:5a:53:46:6c:34:ae:e5:5d:19:c2:1b:65:a5:43:84:84:
63:8a:5b:71:e7:11:a4:b8:9e:18:89:4f:d3:f4:f4:d8:9b:56:
f7:de:f8:c2:2d:39:8c:35:f0:7a:3e:e1:59:b1:87:bf:1f:c9:
11:41:7a:96:24:56:8c:59:76:0b:7a:24:2b:a5:0f:e4:39:a9:
bc:ba:87:d0:6f:c7:ba:2c:66:97:e7:a9:ab:ed:27:71:1f:1e:
c1:2e:a9:c8:56:9b:ed:41:01:0e:b6:43:af:5a:f9:90:93:8f:
b2:4d:db:02:f8:5d:a7:34:94:5b:18:60:1b:c9:5b:9f:24:e9:
8b:95:49:02:22:a8:b2:b7:9a:b0:45:f4:32:20:0d:6e:9c:00:
63:15:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:42:46 2026 by rpki-client