
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json)
Hash identifier: edc/OoRGtstDwrfGSIrsH03w+YGgYPKHbyR1rhqRkgQ=
Subject key identifier: 27:06:0D:89:08:51:A7:B7:A3:C0:61:FE:19:F4:39:0A:04:4C:14:88
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial: 06C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
Manifest number: 06BD
Signing time: Tue 18 Aug 2026 22:41:16 +0000
Manifest this update: Tue 18 Aug 2026 22:41:16 +0000
Manifest next update: Tue 25 Aug 2026 22:41:16 +0000
Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: FggRe+NWL4TAY/QK4HIoIw6TeybgKIVeql6YTH5BwZY=)
2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Validity
Not Before: Aug 18 22:41:16 2026 GMT
Not After : Aug 25 22:41:16 2026 GMT
Subject: CN=6a84df8c-812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:b5:26:3c:4c:c8:93:85:95:30:6f:f8:e5:
fb:3e:ed:71:56:70:99:9c:87:0c:19:d9:a0:3d:77:
14:e7:8d:11:93:1d:8d:9f:f2:bd:64:22:23:d5:bf:
44:ab:8b:04:36:ae:33:13:d7:1b:12:f6:10:9b:4a:
ec:27:48:97:2b:8c:8d:87:42:bd:7d:43:83:7f:c9:
df:6c:95:f9:3d:b6:ee:b8:2a:f8:3a:c3:3d:d1:8e:
f5:37:2d:78:33:69:3b:c3:9f:c6:e1:df:27:74:ed:
f4:d2:21:23:52:e5:88:fe:90:63:01:d8:49:d9:12:
23:49:3b:67:45:29:f4:4c:5b:3e:e5:00:55:62:aa:
3d:c2:82:c1:92:d4:3f:fc:b2:60:a2:59:ef:79:ff:
a4:23:97:88:47:97:6c:cb:cb:7e:24:09:df:22:ff:
7e:48:f2:89:08:1f:19:22:1a:a3:32:f2:a8:31:8c:
3c:2f:ec:e1:28:c9:85:0d:e4:be:4b:94:e6:a2:27:
21:06:72:be:4c:12:72:0f:d4:73:77:f9:47:61:de:
80:61:21:37:5f:6e:8e:79:9e:93:6a:bc:54:d7:bc:
4c:46:b6:70:22:7e:56:b2:99:95:ce:b3:e7:11:e4:
06:b5:c4:51:e9:ca:cc:9d:f6:53:75:86:e0:fc:4f:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:0D:89:08:51:A7:B7:A3:C0:61:FE:19:F4:39:0A:04:4C:14:88
X509v3 Authority Key Identifier:
keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:56:32:df:55:62:69:c6:ea:95:75:01:62:e8:c7:a8:c8:9a:
50:df:3e:88:a3:f5:73:06:3d:5f:90:f4:99:75:ae:a8:ea:4e:
05:16:86:64:e9:31:83:7d:25:1e:c8:18:0a:95:39:61:41:32:
ad:f6:fc:a4:78:ca:31:78:2a:49:f7:f1:0f:c8:11:4e:e4:da:
52:5d:8b:e6:ca:87:96:ef:e2:82:39:6a:7c:d3:93:ba:5b:24:
fd:66:11:d8:a2:5c:a3:35:39:74:ce:a1:13:75:65:c8:10:4e:
94:93:16:9b:1e:9e:7c:94:8e:8b:8b:84:f9:f1:db:c5:7b:74:
9e:9b:e0:d0:48:4f:17:38:3f:2c:45:96:36:ac:c1:d8:f2:a4:
d6:da:e2:8b:14:08:a3:a2:05:14:ec:c8:8b:bc:3c:b0:29:29:
c3:65:57:20:ee:82:75:e9:2e:f8:97:16:9a:0c:b1:58:1e:49:
d4:21:c5:ab:82:3c:95:b6:a4:8c:fb:02:83:e8:5f:09:92:3c:
6d:38:ca:d1:d0:cd:33:6f:92:c4:56:cd:10:6e:35:f1:2b:0e:
43:1d:22:76:12:8a:2f:26:34:f2:fc:b5:15:7b:f7:bf:50:76:
6c:d3:4b:da:10:ac:eb:ce:11:df:3e:64:24:61:d0:f1:ac:42:
f4:83:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:08 2026 by rpki-client