
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: ixJFJeR6zISAsYjHJ4KeuzXg+0FBEluBhgsRVMuLVpQ=
Subject key identifier: 60:F6:2B:F3:E5:A9:B9:C9:2F:50:D7:9E:96:C2:53:E6:58:26:95:28
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 04B8
Signing time: Thu 16 Apr 2026 23:49:30 +0000
Manifest this update: Thu 16 Apr 2026 23:49:30 +0000
Manifest next update: Thu 23 Apr 2026 23:49:30 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: PBUbS+EBi9hLfM9oJTfV7sBeZQ8jHlyB66YL6Lz826E=)
2: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
3: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
4: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
5: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
6: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Apr 16 23:49:30 2026 GMT
Not After : Apr 23 23:49:30 2026 GMT
Subject: CN=69e1758a-1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:ef:d7:19:17:fb:d9:7c:1f:d0:c4:7d:39:
93:55:82:26:34:17:43:d5:e5:23:a8:1f:3f:54:12:
2c:90:dd:7e:19:59:bc:67:70:69:26:bf:a1:bf:7c:
3b:9c:e5:db:d7:03:14:fa:6c:0a:36:8d:52:b5:e1:
58:7a:c3:04:ad:0c:77:69:55:4d:a1:5b:87:b5:0b:
25:4c:8a:e1:96:fb:8a:e6:55:0f:f5:43:5e:21:80:
cb:76:52:0f:29:10:1c:47:b6:35:79:f6:c7:99:db:
97:b6:01:29:3f:31:f3:d0:38:58:27:7f:8a:27:7a:
c9:39:22:19:a0:ba:59:4f:de:e8:fa:5a:08:7e:59:
75:3e:57:3f:9b:a1:e7:b6:9e:3c:ac:3f:28:de:09:
d1:cc:0e:37:fd:bc:6e:93:ae:c8:e1:79:eb:e0:c0:
a5:7f:7b:e1:26:bf:5f:68:80:8e:88:47:ef:7f:ad:
02:48:63:81:d8:fe:7e:6c:c5:79:bd:8f:a6:a7:f7:
cf:56:97:2a:d7:10:c6:81:0e:7b:d3:a3:cb:fc:2c:
8f:d5:9a:20:23:cf:fa:64:f6:f8:9b:55:fd:df:42:
84:b4:5d:b9:28:05:3b:88:41:ed:4f:17:7e:a7:e1:
dd:1b:89:97:5b:55:09:1a:0d:f9:65:91:a9:1e:55:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:2B:F3:E5:A9:B9:C9:2F:50:D7:9E:96:C2:53:E6:58:26:95:28
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:19:a6:21:c4:43:07:f2:55:75:b2:cb:80:11:e1:1f:6a:
f8:2f:ea:ed:44:4e:dc:cd:33:74:17:33:c2:18:0b:f1:b9:fb:
09:30:a1:b7:a9:a5:d6:f6:d8:c6:cf:0a:8b:00:53:7e:65:bf:
56:22:bc:b6:10:2e:2a:17:f2:7f:3d:08:b7:4f:1e:69:04:3b:
8d:6b:47:d7:84:53:87:7d:bf:33:70:1b:4a:1c:be:17:d8:d6:
16:61:30:2c:92:c0:b4:c0:ef:ee:ce:0c:f7:35:f8:ed:8d:7d:
0b:01:d6:7f:b2:a3:e0:a3:c8:d2:2c:78:d1:b7:42:96:83:e0:
74:a9:33:4e:3f:99:39:da:a1:e7:58:ee:34:5a:83:3e:4b:68:
c5:45:e6:b6:44:e5:b5:e7:0d:54:2b:12:d8:23:d4:21:f2:21:
ee:8a:fc:89:24:e9:69:0f:17:64:8b:59:ee:54:77:42:95:bc:
98:cf:82:f5:6a:0b:12:f2:b1:96:6e:1b:cf:6a:fb:d5:46:fc:
2e:74:e1:41:18:8c:14:e8:26:f4:7d:93:2a:d1:71:b2:7d:49:
73:5f:b4:85:55:01:77:0a:16:e1:ea:b0:0b:48:c2:ed:c1:5f:
46:ef:41:dd:5d:a6:73:ee:13:b2:ea:8e:6f:e6:5a:87:9c:13:
45:7b:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:20 2026 by rpki-client