
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json)
Hash identifier: Vu7n3IKPls8raNtogeBt6CAz9GG4H2UgXI+aTP/tkNI=
Subject key identifier: F7:C4:9F:24:97:39:65:05:53:09:FD:78:A2:F9:01:10:A7:3F:DA:35
Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
Manifest number: 0296
Signing time: Mon 27 Jul 2026 03:01:32 +0000
Manifest this update: Mon 27 Jul 2026 03:01:31 +0000
Manifest next update: Mon 03 Aug 2026 03:01:31 +0000
Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: rBmILawBUXb+kCo+xY59Fkac+B2ZBdKg+AX3ZUpSkhE=)
2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: TNBEB8bv/VEmVVea2OmlN0ueyYUZVCLkiz8lmx3cgdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A
Validity
Not Before: Jul 27 03:01:31 2026 GMT
Not After : Aug 3 03:01:31 2026 GMT
Subject: CN=6a66ca0b-f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:2b:1e:8d:91:fc:ed:9f:75:b9:77:80:89:
ad:17:28:94:11:03:64:3a:4f:f8:b3:b8:74:e9:ec:
95:4b:2e:55:b7:24:5a:86:34:61:47:5d:64:6f:e2:
29:11:4b:b6:c9:ed:18:ac:f7:bc:2a:b2:28:84:0b:
a6:36:cf:64:c0:ef:d5:d4:a8:39:8f:6b:c3:6f:1d:
cd:36:83:74:0c:21:1d:66:1d:55:24:ec:2d:5c:eb:
87:10:c6:36:37:c0:30:cd:aa:83:2c:60:2a:31:17:
24:eb:64:b8:a0:d4:94:3d:f6:45:18:ff:0a:ed:e8:
ef:94:6c:91:d9:26:74:ac:59:f9:b6:1e:f3:e7:eb:
4d:96:be:0c:4c:07:07:e6:78:d5:0a:7f:93:20:92:
e4:c6:e2:1c:95:24:3f:d6:74:15:59:92:4c:cb:00:
08:51:c7:2b:68:81:f8:f3:df:83:8f:29:66:af:04:
f9:ff:75:c0:09:9a:4a:eb:56:fa:01:94:11:37:52:
12:5e:4b:5d:2a:cb:63:92:78:20:1d:a2:b0:e2:a7:
e2:8a:92:cf:e3:c0:b4:13:7b:69:b5:14:4d:42:d7:
c3:e3:f4:a3:aa:8d:a7:81:6b:ae:6f:a7:29:d8:41:
86:23:4e:a8:5c:e1:6c:ee:ef:84:38:6c:42:29:75:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:9F:24:97:39:65:05:53:09:FD:78:A2:F9:01:10:A7:3F:DA:35
X509v3 Authority Key Identifier:
keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:8d:bf:00:ab:df:43:f8:12:42:71:c2:03:33:f1:76:44:72:
08:2a:12:25:5b:ee:6d:c2:00:11:b7:1f:1b:89:84:d2:64:39:
97:10:03:d7:40:8c:40:6c:84:c3:5b:2e:eb:a1:17:75:ca:a8:
b7:f8:2f:6a:8b:da:3d:b0:47:70:6f:e3:bb:f5:29:e1:f1:ff:
cc:3f:df:a5:d8:74:93:91:af:2e:7c:8a:b5:d9:1a:79:89:62:
a9:3c:0e:f5:83:c2:84:89:58:82:fc:6b:97:d3:12:2a:32:58:
9c:c2:60:8a:a2:36:d1:66:b3:76:73:1e:d4:00:08:50:dc:98:
0f:01:4f:4f:d0:eb:af:14:e2:e4:67:e4:63:7b:9d:ab:df:66:
c3:55:cc:08:14:73:8e:eb:09:cc:23:02:72:57:b3:d6:a3:15:
81:f7:87:12:8d:55:ef:db:ae:55:43:47:d4:ba:a6:43:0a:6b:
62:54:89:42:c4:00:b3:56:6b:45:14:ce:49:21:2d:aa:75:6e:
39:ad:44:db:a3:74:26:e2:a0:51:9e:39:70:98:8f:8e:9c:da:
0a:34:0e:5b:56:58:a0:18:ee:73:16:72:76:ea:78:8f:6d:3d:
ab:d6:e6:6c:e6:1e:e5:ec:25:73:44:91:96:69:7c:f0:ae:8e:
b1:6d:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:17 2026 by rpki-client