
$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File: 0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier: 2TTOcdwIh1uxX5l0nESSeMDAmNV+gKqAHrZ8oOYqvMQ=
Subject key identifier: 10:7B:5A:1E:3D:92:F7:EE:51:BF:9E:2B:E3:65:32:79:60:04:9D:32
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer: /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number: 027B
Signing time: Mon 27 Jul 2026 03:21:50 +0000
Manifest this update: Mon 27 Jul 2026 03:21:50 +0000
Manifest next update: Mon 03 Aug 2026 03:21:50 +0000
Files and hashes: 1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: afJsfI/JtjNwE8DMaIvNi8fmXh9MbDyIyqMiK4hxsmM=)
2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
Validity
Not Before: Jul 27 03:21:50 2026 GMT
Not After : Aug 3 03:21:50 2026 GMT
Subject: CN=6a66cece-8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:51:c1:13:77:a7:37:ba:07:1f:e6:ed:66:
ac:4f:45:13:10:3e:fd:ec:28:13:4d:10:06:18:87:
af:d9:1f:73:dd:66:2b:ed:4f:4f:c3:86:65:04:1c:
80:6d:14:bb:d6:49:13:a1:ac:d6:34:42:d2:61:20:
98:67:8c:47:5f:27:6b:2c:51:57:94:40:ec:4b:4d:
fb:eb:dd:01:2a:22:60:5a:68:5b:b0:d8:cd:3c:42:
6a:04:86:8c:e5:2e:13:be:09:ee:4a:fc:be:8f:f6:
22:dc:bf:f0:a4:eb:71:30:74:4d:d8:c5:92:6f:74:
22:f2:17:6c:ef:ee:02:f1:3d:69:8a:ec:78:b3:33:
dd:0a:7c:55:0f:6f:47:ae:df:0e:a5:e5:c6:63:a2:
56:0d:8f:e3:e9:ff:96:cf:dd:68:24:58:51:4f:c9:
71:37:7d:dc:06:6d:75:62:21:ce:0b:cc:e0:6a:55:
50:4e:5c:9c:c4:b7:d7:4a:56:13:80:37:b0:23:a6:
e5:98:e2:b5:81:15:54:f7:81:ab:7d:78:b5:4f:18:
63:78:66:72:36:97:80:0d:c8:b0:6a:66:d5:14:3e:
e5:0d:0f:2f:07:1b:55:a6:17:52:a0:1c:a3:44:36:
67:34:d3:b1:8c:8d:de:7b:2a:51:d9:79:e6:7d:d5:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:5A:1E:3D:92:F7:EE:51:BF:9E:2B:E3:65:32:79:60:04:9D:32
X509v3 Authority Key Identifier:
keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:dc:cb:63:00:9a:b6:d3:45:b5:0c:bd:b1:23:d9:7a:8c:98:
04:ab:4d:f2:a3:09:69:b1:e0:7b:b6:5b:6f:b2:54:f2:e0:0d:
a9:97:d5:39:fa:5a:76:c9:db:63:85:f6:aa:e1:ca:80:91:b2:
24:94:94:83:4f:d3:ed:d1:ad:b8:92:a2:37:5b:0a:03:98:56:
b0:26:96:34:8e:22:f0:ba:24:2d:c4:7c:ce:b9:10:d2:84:7f:
42:ef:42:23:b2:13:d4:16:9d:e2:7b:2e:76:33:15:60:1b:4d:
aa:0c:88:8c:9f:b5:31:5d:e8:fa:0d:ca:d4:c4:3d:ae:2a:58:
55:ba:17:38:01:de:b9:75:e5:08:c4:a7:b0:47:d7:3b:02:a9:
48:b5:ca:74:1a:b4:65:e2:da:e8:af:63:3f:ee:99:33:5e:66:
e6:28:73:88:bc:bd:fc:32:53:d7:41:9a:cd:02:05:d6:96:f1:
56:45:db:6a:62:60:4e:e2:88:1d:42:0f:74:70:31:a0:8c:41:
c8:e7:5c:e5:d7:aa:3c:4c:77:9a:84:6e:43:60:3a:50:40:8c:
c9:4a:92:6f:42:01:d3:82:f3:19:1f:08:30:cb:30:4d:ad:f5:
57:76:96:72:8c:a7:b1:5a:d2:a2:1f:24:78:46:5e:c4:f1:26:
da:25:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:10 2026 by rpki-client