
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json)
Hash identifier: dTTOTyOZHxB2HHGEoSYGDU3nGWyKrqK2WxrCW4XD9Mk=
Subject key identifier: 39:C4:FE:B8:1D:4B:FA:A6:05:0D:ED:56:30:82:7F:61:77:2C:A1:DF
Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Certificate serial: 2C82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
Manifest number: 2C82
Signing time: Tue 28 Jul 2026 15:36:32 +0000
Manifest this update: Tue 28 Jul 2026 15:36:32 +0000
Manifest next update: Tue 04 Aug 2026 15:36:32 +0000
Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: nltFv26vnt3Ya0SivI3hVfcMuBsZxCAgei8A9sAFAm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11394 (0x2c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Validity
Not Before: Jul 28 15:36:32 2026 GMT
Not After : Aug 4 15:36:32 2026 GMT
Subject: CN=6a68cc80-9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:99:34:61:c4:6b:0d:7c:84:a1:99:76:cd:
ae:75:47:a8:9b:02:31:16:c7:b3:5d:12:bf:e2:e6:
ea:10:7e:92:ae:6e:e5:6f:24:de:73:70:d4:fd:95:
cb:e6:44:ee:1c:b3:57:ec:d5:77:91:b6:54:0e:c8:
13:58:d8:f0:46:ad:14:5a:81:93:06:76:e9:98:cc:
96:81:0c:43:c5:46:23:62:50:d7:12:c3:82:02:b4:
f2:1f:8e:b7:2c:96:65:2f:f0:e0:e3:e5:a7:f6:fa:
bf:dd:20:97:4e:8f:e1:73:99:04:c9:32:fe:7f:ec:
a8:1a:95:6a:2e:18:90:84:1d:cc:f2:30:3e:d9:04:
31:71:5b:29:af:2f:41:6f:6d:79:35:26:f0:bc:e4:
d1:2a:ee:17:e1:bc:30:d8:f3:57:3f:9f:a8:62:b3:
e9:85:90:18:62:bf:84:fc:6b:5c:b1:86:03:ea:ad:
04:37:09:15:1d:31:c9:a9:f2:50:3f:34:10:04:1b:
77:57:4c:7f:d6:df:4e:31:df:ad:a7:fc:54:88:94:
ab:fa:f8:66:78:61:51:d1:97:1a:b2:07:e8:34:e1:
2c:5e:56:86:8b:f4:1c:b4:86:e4:9b:40:93:7a:ff:
b5:70:28:0f:75:40:13:ec:f9:c6:25:42:74:48:6d:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:FE:B8:1D:4B:FA:A6:05:0D:ED:56:30:82:7F:61:77:2C:A1:DF
X509v3 Authority Key Identifier:
keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:be:61:ed:69:2a:01:33:1a:f9:9b:82:d4:98:5a:12:37:
ef:7a:af:a1:f3:78:11:9e:f5:3e:d7:8a:ce:c7:81:f0:57:7f:
7e:7a:c5:a9:a6:e9:d6:50:55:86:09:77:90:b6:5f:97:8b:96:
7a:5b:41:4f:23:ad:48:b0:d9:63:e9:d8:61:22:40:7f:00:cd:
8e:43:9c:0a:fe:76:ec:23:9f:85:24:55:88:4b:39:aa:fd:27:
56:5b:c9:d5:04:58:a8:b7:64:41:29:63:a7:ea:42:b6:91:8a:
08:0f:98:35:52:8f:78:77:42:3c:ea:7b:d8:8f:af:e3:4e:15:
d3:3f:17:9f:96:b5:bc:b9:25:8f:49:fc:8f:02:6e:3d:7f:08:
22:05:2a:f9:fa:0c:d8:9d:36:4c:d4:01:eb:57:6c:87:60:a2:
72:34:54:40:53:9f:6c:63:42:c6:04:5d:1c:c5:0e:9f:74:68:
63:b2:2e:a6:ef:75:9c:df:d7:66:20:72:83:77:68:35:97:f2:
90:85:eb:9c:d2:c8:49:2a:7a:b5:2c:1b:32:6f:43:e4:f9:8e:
83:a3:54:5d:5c:1a:04:e0:89:24:d6:bb:0d:58:78:aa:c4:4e:
38:5f:4a:a4:0b:a9:52:d1:e1:0c:ad:40:6e:51:f9:ae:53:23:
e9:11:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:10 2026 by rpki-client