
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json)
Hash identifier: l0puGb0DcSOQtZCr2C/divFiw81JTiDOWNsh+czn+BY=
Subject key identifier: D0:39:5B:63:09:72:CD:21:D3:E6:29:63:3C:32:29:CD:9D:12:72:A5
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
Manifest number: E3
Signing time: Mon 27 Jul 2026 08:37:51 +0000
Manifest this update: Mon 27 Jul 2026 08:37:51 +0000
Manifest next update: Mon 03 Aug 2026 08:37:51 +0000
Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: fZ5s+zik2poPQD/nfBzjLCLJurwTOqyHIu0vGadeDhs=)
2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: QDtioVWIhSQHKs0Tk+R/fmPWRMMOJ24+WyiTZJLSleU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Validity
Not Before: Jul 27 08:37:51 2026 GMT
Not After : Aug 3 08:37:51 2026 GMT
Subject: CN=6a6718df-ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:7d:9e:12:cb:17:ef:1d:12:23:f6:19:db:
1b:e2:2d:b3:61:3f:e6:0f:f1:75:8c:6c:48:ee:99:
0d:9c:1a:01:85:8b:eb:55:2b:4a:34:eb:85:72:28:
17:27:88:de:ae:58:5a:f7:39:25:ab:9b:78:b8:d3:
2f:c0:99:cb:6a:79:4f:e5:44:f5:c0:11:4d:b2:a3:
1b:45:e1:e0:30:99:ca:79:20:e2:25:79:b1:65:27:
34:42:03:07:b5:56:c9:6f:3e:56:24:ee:43:cc:dd:
df:2e:75:e1:a8:f5:2c:88:ef:bf:29:72:97:b2:cf:
32:55:66:00:cc:fe:1c:c7:c9:47:9b:6f:96:5e:5c:
34:af:2b:87:6c:4b:53:2a:c0:d8:61:2a:3f:0d:0a:
7c:fe:58:ca:82:28:a5:cf:41:72:46:05:a4:1a:08:
52:87:29:83:9a:e8:12:eb:82:89:51:97:79:38:e9:
2d:c7:50:41:e0:67:e8:90:ad:d8:6f:5a:72:f2:1c:
3f:13:00:ec:cd:3f:9e:59:5b:d1:1c:33:55:fd:fc:
8e:10:35:91:9e:f2:87:cf:b3:27:15:d9:40:44:47:
48:de:15:d4:30:4e:06:9e:96:c5:ae:9f:99:c2:8d:
d6:91:cd:dc:f2:ae:81:3d:8b:0d:10:d1:70:88:c4:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:5B:63:09:72:CD:21:D3:E6:29:63:3C:32:29:CD:9D:12:72:A5
X509v3 Authority Key Identifier:
keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:8e:82:4a:9d:9b:17:b9:12:c5:e1:cf:71:38:17:bf:f7:ce:
05:81:77:b2:0e:90:48:ae:f5:31:ef:d2:ea:56:8a:5a:d3:93:
0e:09:e7:cb:9f:70:b2:fd:19:0e:81:90:ad:1b:76:17:e7:5e:
a8:44:0d:7d:2a:91:b0:8b:08:6f:8b:27:38:4f:a3:22:98:0d:
fd:a3:16:72:6a:b2:c4:98:3c:c5:b3:67:55:bb:1d:11:5f:a1:
64:0f:a1:f3:11:d7:2f:5e:c0:55:53:ab:d6:c3:00:85:4b:56:
5e:68:04:c0:8f:38:89:b8:68:6b:6a:d4:90:1e:cf:38:51:5f:
99:b8:c3:82:39:9f:e8:91:52:94:f2:6a:37:9a:2f:b4:b6:82:
0c:f5:f1:2a:b8:17:e5:7b:1c:34:a6:f7:f0:dd:2b:39:df:d2:
07:d3:a7:9f:60:dc:3f:43:6d:8a:c8:c5:fc:c0:65:a0:68:a9:
ea:ed:98:33:a3:95:5f:71:ac:90:bf:94:77:79:fe:a8:e6:4d:
8a:15:a2:aa:a4:33:b5:1b:ea:b8:fd:5e:06:38:59:b2:a5:1f:
98:34:97:06:86:0a:b9:43:bf:01:e1:62:e2:08:58:a5:19:17:
8c:03:cf:5f:03:77:97:48:eb:ee:d0:5b:07:59:4e:09:92:fa:
df:58:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:27 2026 by rpki-client