
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: OOO36CsKPcTAuIZSQ+m61ZTA2PGInCpfcQMhFe/x22Q=
Subject key identifier: 54:DD:F6:0C:2A:9E:77:EF:9C:75:C4:D8:E8:70:8A:F6:F1:D2:31:F6
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 04EB
Signing time: Mon 27 Jul 2026 00:44:55 +0000
Manifest this update: Mon 27 Jul 2026 00:44:54 +0000
Manifest next update: Mon 03 Aug 2026 00:44:54 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: QXw46wGvt8uStve23XNj35RTk3Wl0Ick3uOlS5LdKNY=)
2: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
3: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
4: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
5: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
6: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
7: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Jul 27 00:44:54 2026 GMT
Not After : Aug 3 00:44:54 2026 GMT
Subject: CN=6a66aa07-0c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:9d:84:30:a2:97:15:a8:8a:65:67:1d:e8:
df:77:5b:13:ce:1b:ec:b0:bb:70:b0:17:fc:4c:a0:
63:af:c6:b0:21:8c:9a:34:59:14:dd:30:0d:91:de:
96:c3:93:ad:d4:72:5e:86:22:a9:ee:5d:37:cd:79:
37:98:4a:5c:a1:0f:63:1c:fb:4f:49:e5:2b:ca:62:
5a:83:8f:30:ca:91:58:49:00:a0:e9:9f:50:d6:24:
ea:d4:30:7a:1f:e8:7b:af:cc:c3:76:07:83:16:e9:
88:f5:7d:f1:cf:72:d0:4a:e6:fa:67:4d:08:48:76:
91:c0:76:b2:6d:28:56:53:c3:a1:4d:c2:a2:fc:58:
49:ca:ec:1f:87:31:01:cb:53:2c:33:95:1c:27:9d:
cd:e5:cf:81:11:9c:34:6a:c3:f6:30:ed:7a:0b:6e:
ce:0f:bb:44:01:5e:a3:ef:72:c6:51:36:e7:3a:73:
c1:72:25:c9:27:26:5c:02:05:d0:68:28:59:f5:78:
26:82:8a:f8:ee:9f:d6:ba:a1:83:74:78:df:73:2c:
6e:60:fd:e8:f2:8c:ad:bf:4e:06:ab:81:3e:48:c8:
ad:49:c4:8c:08:2b:cd:ba:c0:04:57:e8:1c:4b:2e:
94:9b:ab:f1:6f:2c:b8:c4:3b:eb:cd:b4:35:9a:a4:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:F6:0C:2A:9E:77:EF:9C:75:C4:D8:E8:70:8A:F6:F1:D2:31:F6
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:6d:87:ae:18:c0:e9:c9:84:06:f8:cd:30:cf:b6:4c:7c:
73:6f:45:15:e6:e1:77:c0:3e:5b:74:37:ca:5b:22:38:ae:f0:
c5:ec:bc:81:15:90:94:bb:21:74:e4:a3:77:11:bd:89:5b:2b:
da:8f:9b:b4:c0:f6:7d:4b:56:46:74:db:8a:0a:17:02:08:52:
10:20:2a:7e:65:42:cd:d4:ed:22:23:9b:9b:69:e2:88:06:9d:
f6:4b:4d:87:55:76:c0:07:ea:8b:9e:6d:8e:a1:e4:a4:1f:73:
68:bc:aa:64:f1:0f:7c:08:64:8c:4c:f3:5f:05:0f:5a:1b:08:
e8:5b:d6:86:26:18:81:9f:5f:e8:2f:67:f4:d0:a7:44:e5:46:
f8:d9:b3:91:8f:ce:ba:f6:1c:f5:1b:0d:b6:ed:6e:17:9a:11:
d0:cd:22:d3:1d:07:35:91:d1:98:3f:8f:4e:7f:1c:44:b9:87:
55:34:7c:12:2d:b7:a7:05:a1:17:fd:cf:1e:71:a1:21:dc:d6:
e3:8a:bb:bc:2d:9c:0f:01:38:4f:42:f4:56:a2:65:f7:d5:2c:
ad:3a:5e:39:81:ee:b8:d9:5f:1a:46:a9:16:e2:19:df:a6:1f:
e4:eb:e6:5a:a1:f6:42:a9:29:4b:ed:f7:bb:56:c6:3a:80:28:
f3:5e:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:41 2026 by rpki-client