
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File: d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier: ZgyeiRDMdHaLBj1B9EJFfpPFvLeloSxaDQ9UQuyOegc=
Subject key identifier: 88:EB:1B:F3:01:D7:32:94:8C:FE:97:45:60:C6:5D:83:8D:41:7B:BE
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer: /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number: 0128
Signing time: Mon 27 Jul 2026 07:38:29 +0000
Manifest this update: Mon 27 Jul 2026 07:38:29 +0000
Manifest next update: Mon 03 Aug 2026 07:38:29 +0000
Files and hashes: 1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: shbiHlj4SZKOSaJd0n04p1asNx6TBbp/9vIhjSIsHGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Validity
Not Before: Jul 27 07:38:29 2026 GMT
Not After : Aug 3 07:38:29 2026 GMT
Subject: CN=6a670af5-c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:0b:10:6d:a3:a2:0f:be:59:5d:fa:4b:93:
c7:7d:5f:b1:f4:8d:a3:69:78:87:d3:5c:1f:7f:f5:
17:6a:21:30:58:9c:fd:5a:a4:6c:d0:4e:f4:72:6c:
bf:2d:fe:7e:37:69:3c:6a:9a:a1:83:0b:5d:44:8d:
4f:93:f3:6f:46:ab:c3:73:9e:3d:2d:d6:5b:8e:c9:
16:e6:bb:b4:59:b8:89:71:67:bf:23:5b:32:eb:01:
16:b9:aa:62:8d:d6:5b:3b:04:51:32:6e:4f:28:71:
3f:7e:3c:84:97:6f:33:09:fc:a2:52:d5:56:0c:77:
3f:8a:10:69:2f:cc:41:c3:76:44:1b:a4:29:f9:7b:
78:03:71:2d:e3:1f:8d:56:49:a6:98:c8:82:3e:8f:
d6:74:4a:29:36:48:5c:7d:fe:5a:e8:f9:12:02:ff:
89:f5:7d:6c:b0:c5:77:70:48:8a:37:7d:f1:24:a7:
6e:c6:96:03:cc:61:fc:06:cf:9d:24:c2:7c:c5:ac:
2c:90:27:1f:c9:2c:40:f9:ec:38:d1:98:5e:fb:01:
26:27:4a:6a:e9:f4:26:14:d1:87:40:f8:74:02:54:
06:96:bb:66:e3:9c:cb:16:dd:d5:b3:06:52:9f:c9:
78:64:55:3b:01:1b:b4:0d:41:74:99:c6:52:f0:98:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:1B:F3:01:D7:32:94:8C:FE:97:45:60:C6:5D:83:8D:41:7B:BE
X509v3 Authority Key Identifier:
keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9f:4b:aa:bf:4a:63:52:10:3e:1a:5b:5e:51:f0:8a:da:9c:
06:82:f4:19:70:91:51:b7:db:36:ed:b5:10:0a:97:05:17:01:
00:f0:39:1e:ae:00:ca:ed:45:88:4a:20:e3:3d:be:a7:5d:ff:
21:ca:80:32:b1:7c:8c:dc:5e:2b:2b:f8:ec:be:d2:bb:72:d3:
c4:ea:20:a9:c5:87:85:58:b4:bc:8f:b7:f1:a2:25:ac:8c:e5:
d3:7c:38:b0:6b:f1:5d:36:c7:fd:1c:70:75:42:0f:a0:da:d8:
00:cd:a5:ef:8d:d3:99:14:b5:3e:9e:4e:b3:43:55:ff:c6:ce:
3b:f6:78:27:8a:56:4e:f7:4c:22:02:6e:29:48:2d:d2:7a:14:
02:07:c8:e7:88:b8:43:fb:29:b0:3a:d5:b9:e4:8b:b4:5d:70:
ad:50:3f:73:81:86:21:36:e7:73:68:ae:d4:c1:62:2c:91:4b:
98:91:fd:42:80:c4:36:28:f8:8b:da:aa:a5:5e:15:df:9c:8b:
1e:cc:b5:83:8e:27:2e:c0:79:e0:fc:69:d4:66:40:28:fd:10:
40:b6:94:74:fc:50:b6:fb:02:2d:56:26:e9:2b:8b:51:d5:09:
a1:a1:dc:cf:1e:f8:9b:06:74:12:42:9e:bc:56:1c:d9:00:d9:
8a:90:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:56 2026 by rpki-client