
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json)
Hash identifier: rF/juEuJa7SLVVC1mGA90H19g4HFiZn+XgaFE3upuq4=
Subject key identifier: 64:6A:68:11:B2:0E:84:5F:E8:D2:C1:A8:1E:C5:52:AC:56:56:6E:5B
Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
Manifest number: 01B4
Signing time: Fri 17 Jul 2026 05:04:04 +0000
Manifest this update: Fri 17 Jul 2026 05:04:04 +0000
Manifest next update: Fri 24 Jul 2026 05:04:04 +0000
Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: s4/euEJs1ALQk1wmlA63DzPqMtykOdF0XfNiNXpc0eA=)
2: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: tjSNlsLVDVemDbg8MkCxHj6lieTSIIDFdS4u4JZvSN0=)
3: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: tI8081Qes7Wl6iTmVmk2PhB8XaNxc++Td85vrFv3YGM=)
4: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496
Validity
Not Before: Jul 17 05:04:04 2026 GMT
Not After : Jul 24 05:04:04 2026 GMT
Subject: CN=6a59b7c4-b871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:7b:bd:5a:5f:fb:22:dc:60:9a:66:f9:d7:
3e:74:99:65:e4:4c:53:30:6b:78:19:38:bf:d3:61:
e9:60:8c:c5:37:42:fa:9b:82:ff:80:44:a8:f8:f8:
f0:41:c1:21:43:e9:85:87:1f:74:c5:44:3f:8e:c4:
c7:88:97:d9:23:14:12:a3:0a:d7:4c:8b:c0:0c:fc:
c2:6f:04:e8:ff:c3:5e:a7:1b:b7:9a:26:a7:f9:aa:
49:04:3b:9f:60:b3:c8:49:be:a3:e5:22:f8:60:14:
a2:45:3f:b7:16:22:51:d4:e2:7b:eb:b8:40:2a:73:
4a:a5:45:c5:85:64:b9:44:b1:04:f8:5e:ad:3f:90:
2b:d6:bb:17:26:af:3f:13:91:5f:3a:66:3c:2e:76:
3b:45:da:a2:ef:12:0e:3f:83:7e:42:3f:e3:73:7e:
69:f5:e8:7e:5a:84:2c:e7:15:88:36:94:18:94:f7:
75:01:a9:40:22:90:d5:89:a1:f9:b3:73:38:82:2f:
90:e3:64:8a:9e:df:bf:9f:e2:6c:45:fb:0e:8f:22:
84:4f:cd:3a:a4:fe:1c:54:99:bd:e1:fe:9c:6a:1a:
98:47:d3:9b:55:e0:cb:13:4d:6b:94:67:06:84:04:
d3:4e:55:18:b7:21:7d:ec:57:18:21:b0:c0:77:db:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:68:11:B2:0E:84:5F:E8:D2:C1:A8:1E:C5:52:AC:56:56:6E:5B
X509v3 Authority Key Identifier:
keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:82:a4:83:41:8d:b7:1d:3a:8c:87:67:6a:f1:91:13:1b:
3b:72:fe:52:49:be:70:52:e7:fc:4a:e4:19:3f:01:7b:2d:e3:
0f:5c:b6:2d:e8:54:9b:e0:67:f1:8a:af:5f:64:47:77:be:9d:
43:f6:41:b8:cd:09:3a:c4:35:24:69:51:6a:79:7c:3d:9b:2a:
dd:f7:f5:82:d4:ca:a4:ff:99:38:5c:b1:46:ba:9d:4a:7d:e4:
d3:a1:3c:f6:69:5f:5c:8a:f8:e5:a3:de:11:bd:2c:8a:31:c5:
38:5c:c5:db:38:8b:dc:fd:2a:20:11:6b:36:31:c0:63:af:4c:
ba:90:04:de:b6:e7:c5:fb:39:4b:39:17:20:fc:e7:40:6a:8a:
0e:01:1e:aa:d3:46:1d:60:98:35:ef:f3:9c:45:e6:a2:df:83:
f6:94:6c:d0:33:92:ba:da:00:5b:63:db:9c:e6:db:1a:be:da:
71:52:7c:93:41:dc:16:a4:9a:32:f0:16:8d:c0:c8:6e:31:1e:
3c:20:51:bd:53:8c:f8:39:79:32:f3:6a:26:2e:00:8a:b5:78:
8f:4d:41:88:07:6a:83:b6:3d:89:da:32:e7:ab:9a:3f:29:b1:
20:dd:fd:87:80:05:80:5a:cb:72:92:4c:b8:b6:01:94:11:d8:
93:c8:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:20:56 2026 by rpki-client