
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json)
Hash identifier: amEFl93ML4jHtWvbIGWo6yZY5+NmXkDOVB5MpTCrze8=
Subject key identifier: EF:7F:9D:72:8E:8D:74:0F:32:9E:45:54:C6:38:0A:DD:D6:AD:5E:D4
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
Manifest number: 02B0
Signing time: Mon 27 Jul 2026 02:50:57 +0000
Manifest this update: Mon 27 Jul 2026 02:50:56 +0000
Manifest next update: Mon 03 Aug 2026 02:50:56 +0000
Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: e8b4Nlbo4ALEshxkHM6dexZrupImhil+RrvYkENzjnY=)
2: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=)
3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=)
4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=)
5: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Jul 27 02:50:56 2026 GMT
Not After : Aug 3 02:50:56 2026 GMT
Subject: CN=6a66c791-ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:54:ee:e2:f7:f2:2e:3e:23:5e:fd:ec:dc:
49:2b:ff:b5:40:46:0e:dc:66:60:0a:3d:28:02:6f:
a1:ba:3b:d8:fa:e6:d0:51:96:0c:6c:3c:95:d2:e5:
ef:32:6e:72:b7:11:34:9d:27:32:63:6d:a3:65:73:
01:9f:b1:0c:94:50:1a:2a:ec:ad:31:ae:b5:97:a2:
4b:1c:ba:46:a7:93:8f:4b:9c:d7:f6:20:65:6b:e1:
70:c6:34:31:e4:37:a4:18:ac:ad:e2:19:c4:a4:81:
d6:04:11:ff:e7:07:55:e6:5d:62:d7:32:15:c9:28:
ec:48:5c:e1:c7:98:7e:7d:55:13:5e:09:31:b4:bf:
47:5a:e6:62:b2:6f:ed:bf:3e:ab:69:5e:83:45:8a:
d0:c7:f8:06:2f:38:c9:5c:11:d3:2c:79:d3:e4:6d:
70:de:2c:07:6e:0a:b2:c7:5e:a8:ba:f4:f4:3d:9c:
b8:36:6f:d3:2f:b0:87:14:37:f8:e1:03:2d:36:0f:
6f:89:0b:90:36:2d:82:e8:01:fe:ec:aa:ca:97:40:
f1:8f:ce:fe:4f:43:0a:af:63:36:67:b5:9f:fb:75:
a1:8d:cc:b2:68:58:72:ad:5b:77:c9:fe:50:fe:9f:
3e:3e:4a:6e:4d:99:e4:a6:3d:b4:ae:5c:86:e7:99:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:9D:72:8E:8D:74:0F:32:9E:45:54:C6:38:0A:DD:D6:AD:5E:D4
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:fd:a5:36:9e:29:f0:66:82:e7:0a:e3:14:26:d8:99:39:3e:
7b:bb:01:4d:46:6d:f8:63:e0:d3:68:0c:c9:4a:79:90:aa:59:
42:2b:1c:d9:78:71:dc:5c:88:78:64:fc:1c:dd:a2:9b:d9:5c:
8c:7f:db:26:f9:1a:01:79:0c:52:0d:da:4d:11:19:a7:7f:dd:
77:3f:8f:15:5a:38:d9:61:79:a5:af:9d:e6:ce:d1:05:ec:11:
5c:f5:09:8e:17:19:e2:97:15:49:f0:84:82:54:fb:5e:ce:cb:
cd:9e:e0:ce:d0:75:12:3b:9f:ab:57:23:fc:00:8a:dd:8c:db:
d7:e6:a6:d5:dd:fa:01:bb:a8:80:df:ad:a6:48:dd:8b:83:ee:
2e:ab:f4:65:7f:e2:88:94:7d:bd:b9:36:f2:6e:9b:44:c7:af:
12:ee:23:11:39:8b:f9:a0:21:dc:b8:48:08:7f:46:6c:4c:42:
1a:16:d3:f3:51:37:ac:38:44:26:d3:1a:f8:22:bd:85:13:da:
d6:01:df:fb:fc:2c:97:9b:45:ac:3f:04:0b:2d:48:f4:9c:c5:
58:c4:03:1d:a8:b3:d4:fd:97:62:c8:80:1a:f6:eb:61:c8:f7:
fb:74:1e:3f:87:9e:e0:8c:6f:76:d6:fd:77:d2:90:ea:80:c8:
9c:43:bf:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx
MTBENDVCRTMwHhcNMjYwNzI3MDI1MDU2WhcNMjYwODAzMDI1MDU2WjAYMRYwFAYD
VQQDEw02YTY2Yzc5MS1lZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7RU7uL38i4+I1797NxJK/+1QEYO3GZgCj0oAm+hujvY+ubQUZYMbDyV0uXv
Mm5ytxE0nScyY22jZXMBn7EMlFAaKuytMa61l6JLHLpGp5OPS5zX9iBla+FwxjQx
5DekGKyt4hnEpIHWBBH/5wdV5l1i1zIVySjsSFzhx5h+fVUTXgkxtL9HWuZism/t
vz6raV6DRYrQx/gGLzjJXBHTLHnT5G1w3iwHbgqyx16ouvT0PZy4Nm/TL7CHFDf4
4QMtNg9viQuQNi2C6AH+7KrKl0Dxj87+T0MKr2M2Z7Wf+3WhjcyyaFhyrVt3yf5Q
/p8+PkpuTZnkpj20rlyG55lNZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9/nXKO
jXQPMp5FVMY4Ct3WrV7UMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD
REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU
aTBkelJWUzJrRk1SRFVXLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARf2lNp4p8GaC5wrjFCbYmTk+e7sBTUZt+GPg02gMyUp5kKpZQisc2Xhx3FyI
eGT8HN2im9lcjH/bJvkaAXkMUg3aTREZp3/ddz+PFVo42WF5pa+d5s7RBewRXPUJ
jhcZ4pcVSfCEglT7Xs7LzZ7gztB1Ejufq1cj/ACK3Yzb1+am1d36AbuogN+tpkjd
i4PuLqv0ZX/iiJR9vbk28m6bRMevEu4jETmL+aAh3LhICH9GbExCGhbT81E3rDhE
JtMa+CK9hRPa1gHf+/wsl5tFrD8ECy1I9JzFWMQDHaiz1P2XYsiAGvbrYcj3+3Qe
P4ee4Ixvdtb9d9KQ6oDInEO/bA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:16 2026 by rpki-client