
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier: DY/7iGhHRuGAgNhbBEG2txRzm+n6CIYohwMUdVFcXzY=
Subject key identifier: CB:6D:A9:39:A8:71:B7:A9:F5:73:F2:C3:7A:80:FB:9A:FB:A4:FF:B6
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 0959
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number: 094D
Signing time: Tue 28 Jul 2026 20:31:35 +0000
Manifest this update: Tue 28 Jul 2026 20:31:35 +0000
Manifest next update: Tue 04 Aug 2026 20:31:35 +0000
Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: hHfq2fSGT7+VsJFsD4YnRsaq14xQdd0UaAt1mYz86ns=)
2: 1FB57044282911F18EC27654C4833773.roa (hash: tvgwjpZx2kCjR2qHWsoqJbARDpqCYop4rB7GvFRI6Uk=)
3: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: CR2jSan4WVvbilZ1W676Y7qalg7FKVHGW317Tr8xfUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Validity
Not Before: Jul 28 20:31:35 2026 GMT
Not After : Aug 4 20:31:35 2026 GMT
Subject: CN=6a6911a7-bbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:c5:c1:a1:65:20:1d:51:9b:c7:70:4b:cd:
fe:15:6a:73:1f:76:8c:74:8a:65:ff:11:2b:54:fc:
3e:9f:b9:36:22:5e:4c:21:00:1e:25:d6:f1:e4:b4:
c1:0b:33:2a:49:e0:c3:a8:36:25:5c:85:93:ad:84:
bf:c0:4a:74:a8:34:f9:cd:7b:38:ee:88:f1:ed:86:
e7:0b:b7:9b:76:1e:78:09:07:58:11:5b:d7:b0:04:
15:d1:f2:77:91:96:6f:5a:39:df:aa:92:ad:42:68:
3d:4e:5a:81:ed:ae:9a:0b:a6:f3:a9:cc:28:93:c0:
a0:63:4d:42:98:b9:b7:ca:32:47:ba:78:80:43:a4:
6a:0f:22:7e:8b:7b:b8:73:0e:fe:bf:e8:83:59:74:
f5:fe:1d:77:aa:6d:46:a6:70:5d:9c:bd:31:da:1b:
3c:91:40:31:11:1e:7a:16:67:41:95:19:c4:18:98:
da:9b:b4:a2:82:e9:63:52:ee:d1:f4:2f:55:b1:39:
17:72:40:cf:61:fb:5d:02:55:25:c8:17:f1:1f:ef:
fe:ec:0e:fa:86:0e:5d:74:55:6b:25:70:60:4b:46:
73:c6:d7:12:b9:70:9b:27:81:b8:e3:99:bc:6c:08:
af:e5:46:1d:f5:78:07:05:9f:db:14:68:c9:e7:20:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:A9:39:A8:71:B7:A9:F5:73:F2:C3:7A:80:FB:9A:FB:A4:FF:B6
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b1:9f:a1:04:29:ff:2b:a7:26:02:e8:7b:ab:7a:7b:b4:e4:
b9:a8:ee:2a:e2:79:53:c1:1b:0b:97:32:cf:87:37:91:2b:15:
4b:7e:fd:ef:eb:1b:cd:f0:cd:35:28:08:96:4f:3d:5a:a9:62:
98:31:78:06:ea:f5:5d:0e:3f:46:d8:34:ce:6e:91:be:72:5f:
87:e2:4f:ce:ee:34:bd:ae:dd:c6:73:03:4d:c7:57:cd:62:64:
06:c8:ce:f9:22:86:65:ab:be:c3:72:10:15:d7:70:fa:cb:cb:
1f:b8:7b:95:ba:0b:de:92:25:b3:00:f1:d7:96:92:2a:1b:e9:
b2:18:e0:1a:fa:de:5f:38:5d:1e:e2:a3:f2:75:50:83:e2:93:
6f:2e:62:68:97:04:a5:28:44:10:d7:22:0f:ef:a6:9d:45:f8:
6a:83:d1:73:be:2a:16:71:f1:77:40:72:95:6f:0e:bd:88:1e:
b0:43:03:62:45:90:01:d9:9b:c7:da:b3:8a:a2:d4:5a:33:b2:
2c:08:43:d5:62:4d:37:9b:5c:90:7e:84:5f:34:90:c1:a9:d8:
67:1e:49:fd:73:0e:9c:bc:eb:9c:a8:84:df:36:2d:5d:63:62:
d2:cb:eb:1b:fa:7d:28:b1:b4:9a:9f:12:b4:02:ab:82:51:0b:
ff:0f:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:17 2026 by rpki-client