
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier: DJpExf7E7lg/uVEw6YxMUKFTTL8aWIZpWz2y4gvHwZ4=
Subject key identifier: 7C:09:D0:48:A8:0B:02:97:6A:EC:96:F9:8D:8D:5E:96:69:45:44:16
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial: 0CDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number: 0CD3
Signing time: Tue 28 Jul 2026 18:37:39 +0000
Manifest this update: Tue 28 Jul 2026 18:37:38 +0000
Manifest next update: Tue 04 Aug 2026 18:37:38 +0000
Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: rdklg/VsA9LOQSN1ERsZhVh1Am6Ly8T1nlEPIXlUDLI=)
2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Validity
Not Before: Jul 28 18:37:38 2026 GMT
Not After : Aug 4 18:37:38 2026 GMT
Subject: CN=6a68f6f3-d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:39:32:bf:10:2a:eb:d6:b9:85:88:62:bd:
4c:b4:9c:b0:05:8a:78:78:2c:41:64:ff:7f:16:ec:
26:33:80:83:0a:2c:c5:4d:da:40:62:31:b6:8b:90:
1b:34:00:0d:c6:7c:8e:2f:d1:63:a3:89:9d:9c:7a:
c1:d4:b0:e4:b2:1f:dd:43:a8:78:0a:a8:0d:59:03:
3b:23:09:6d:b3:8f:55:be:29:8d:62:80:75:90:c3:
d8:5b:07:c6:ec:11:53:76:16:bb:98:8d:fa:06:02:
97:68:55:af:f1:03:8d:d5:a1:bf:06:cb:94:11:5d:
b0:31:a7:42:21:45:0f:66:18:7d:7a:67:e2:7f:d3:
17:f5:74:2a:6a:3e:d8:4a:85:57:f3:b8:10:b3:f8:
cf:a3:7f:e0:41:e1:8a:4e:44:6f:f8:4a:c6:9b:c5:
23:58:98:e0:17:93:ca:36:31:03:44:09:60:19:52:
ee:15:29:42:81:c3:07:1b:03:74:82:69:fe:4e:47:
b4:60:9a:ee:e1:e5:ce:d7:ab:26:57:9f:b0:76:5e:
b8:e0:78:13:d9:c1:94:fa:6d:34:95:db:17:f8:ae:
2b:69:af:bf:04:85:94:92:80:52:41:b1:b8:75:6f:
a6:19:a9:f7:41:30:dd:c6:69:82:06:ee:a3:2d:2f:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:D0:48:A8:0B:02:97:6A:EC:96:F9:8D:8D:5E:96:69:45:44:16
X509v3 Authority Key Identifier:
keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:d5:68:8d:66:2a:62:99:35:29:ad:5f:79:35:3c:d1:da:
b5:d2:54:cf:36:73:ab:f0:43:58:f0:7d:62:9b:f5:55:6c:a3:
47:1c:1e:e9:7a:e4:05:76:91:0c:68:91:6b:97:80:2e:ba:18:
2c:0e:50:0b:ca:a8:d6:a6:69:c7:60:03:d2:97:77:6d:3b:ef:
2c:08:b7:69:6a:54:92:b9:35:a9:d2:b9:0c:09:a8:46:c5:68:
de:1b:79:ae:16:39:ad:88:f5:02:6a:b7:72:23:1f:7b:94:de:
e0:a9:5b:52:1a:21:9a:06:38:18:76:c0:45:3c:de:57:08:ab:
fb:8c:eb:be:02:46:e3:43:5d:2e:d2:ae:f3:7c:31:c8:86:d7:
56:83:16:49:3a:a9:e6:75:12:0a:0b:4f:e8:fa:b4:55:ab:fd:
1d:37:50:8f:f2:e0:e7:41:c3:e4:28:bc:90:36:e7:d2:bc:ee:
df:11:4d:38:99:45:9d:42:4c:f1:ab:c8:6f:98:e9:25:bb:be:
92:11:b7:db:f8:63:13:17:88:ce:6d:b8:e2:e5:ac:b1:9f:65:
5a:8a:94:92:95:5c:cf:1b:92:cc:2f:e4:71:bd:72:76:02:8d:
46:59:2f:a5:e5:8e:85:40:75:be:6f:ec:95:c8:fa:e7:fc:34:
02:00:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:21 2026 by rpki-client