
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json)
Hash identifier: vRiP3isdpujE1+t4xL+EOHF7QaIrUYCk/pF1myi1sGY=
Subject key identifier: B2:83:F5:43:36:5C:52:4F:6C:B9:C6:C5:55:4F:C6:46:55:E0:63:C1
Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
Manifest number: A4
Signing time: Tue 07 Jul 2026 08:24:34 +0000
Manifest this update: Tue 07 Jul 2026 08:24:34 +0000
Manifest next update: Tue 14 Jul 2026 08:24:34 +0000
Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: syze+u1BpVLjpwCWHUxklAWw2v4GnlS/GHqb3N+tDNY=)
2: 7007614C829811F094DDE01BC4F9AE02.roa (hash: 3Tk53WJDcoEbmK8DIvMlxLaZgRNmWC+MaBXdvt1+Y1s=)
3: 707D9934829811F094DDE01BC4F9AE02.roa (hash: AllGpF4KU2W3TzGcGQm1tETu18F81+5vNhnXER9+Qao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 08:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E
Validity
Not Before: Jul 7 08:24:34 2026 GMT
Not After : Jul 14 08:24:34 2026 GMT
Subject: CN=6a4cb7c2-fe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:da:ee:95:60:dd:16:64:88:de:af:30:89:
8e:fe:42:f0:61:db:0c:59:62:e5:94:b4:b8:0f:e3:
f7:05:6b:71:32:8f:b0:0b:45:fc:bb:9d:69:bc:b0:
c9:6c:3c:7a:c3:86:a9:96:7c:96:94:e8:ec:3d:69:
ec:77:9b:df:8c:7c:27:e7:d8:2d:7c:96:5b:9c:a4:
3e:30:98:b4:d9:f0:73:3f:f0:58:d3:4b:09:0c:74:
27:53:a0:5b:5d:b6:db:ed:da:47:4c:99:72:f9:63:
71:a4:f0:48:53:f9:9b:44:67:b4:fe:36:d0:29:04:
b9:64:58:fa:8f:9b:06:42:ce:99:d0:5e:72:d6:ed:
09:c4:d9:6f:89:6d:90:d3:ac:42:14:8f:e3:13:b6:
46:55:aa:87:2e:27:f9:a6:32:af:4f:4f:2b:ca:26:
d5:f5:f2:f8:bc:01:43:37:a2:bf:5e:f1:84:9f:b6:
4d:e1:4e:90:b5:4a:ae:28:8f:52:14:3f:aa:6a:00:
5e:b4:43:1d:45:35:28:1f:e6:3e:d1:a0:6b:f4:00:
4a:dc:f1:f4:8c:52:f8:35:ed:3c:6c:97:5b:cc:87:
52:34:b1:12:a3:12:97:33:71:f3:b6:e7:cf:40:b0:
2d:d8:d3:98:45:48:e7:f0:37:19:d5:3c:2d:18:57:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:F5:43:36:5C:52:4F:6C:B9:C6:C5:55:4F:C6:46:55:E0:63:C1
X509v3 Authority Key Identifier:
keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:37:e7:b9:fa:ff:f7:a4:04:1c:b0:08:0c:0e:95:05:eb:
c9:20:65:ec:15:14:c0:38:c6:d6:6d:34:ef:23:c4:84:63:fe:
fa:8f:de:8c:57:38:61:e7:71:c5:f3:6c:a2:b0:4d:73:d6:7b:
4b:42:3c:98:49:e6:33:f7:ca:ba:f4:0d:e4:65:eb:9d:71:15:
ed:b7:22:01:54:49:f1:02:4d:b5:63:f8:ec:f1:07:03:ee:3c:
6e:48:62:86:5c:f4:c6:54:0a:b3:2c:d7:68:b6:98:e7:fa:46:
4a:c2:c7:0a:28:b0:f6:64:1a:cf:e2:e4:1d:09:a0:cf:3f:8c:
b2:ab:c3:b7:33:77:03:6b:e4:a7:d1:6a:95:51:8e:1d:4d:9a:
42:57:d8:74:1a:1e:33:a4:c6:67:0f:b1:08:30:4f:5c:18:14:
80:e8:08:d8:e3:64:9b:ca:9e:eb:c0:2d:99:bf:13:2a:a7:c7:
a6:bf:c1:e0:e8:9c:22:90:af:b7:0a:7c:c6:c0:73:94:f3:a2:
ef:3e:b8:46:52:e2:0d:6d:6e:f3:76:52:87:1b:97:e4:b7:59:
7d:8f:fb:81:6f:e5:91:ad:d4:51:03:0a:e5:32:a1:33:29:23:
a4:ef:9c:5a:4d:49:58:b8:47:1e:f0:1b:fe:b9:60:10:b6:14:
32:c1:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:36 2026 by rpki-client