
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: c4zxg48m79ki9fLRcxKYkNVnnNAg3YWIVwimyDfyRMM=
Subject key identifier: DD:C9:F9:DB:20:EB:70:DD:3A:A6:5D:97:BA:86:BE:23:7A:CA:45:86
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 016C
Signing time: Mon 27 Jul 2026 06:40:31 +0000
Manifest this update: Mon 27 Jul 2026 06:40:31 +0000
Manifest next update: Mon 03 Aug 2026 06:40:31 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: yzqH7SX6wITGnvJA3V9vNmSroZfwIguyHKXn0KYWiLo=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: 99UGo5KWvnN+gHhR9yWsZo5dAMlhKMO/SbxWG6qrgCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Jul 27 06:40:31 2026 GMT
Not After : Aug 3 06:40:31 2026 GMT
Subject: CN=6a66fd5f-ecb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:d7:ca:62:bb:a9:77:50:62:1d:4f:99:0d:
34:87:14:61:97:05:da:cd:9e:af:0a:dc:d8:3b:28:
6f:91:de:41:f3:16:ba:7e:c1:25:55:6c:f8:e3:6c:
69:e4:58:72:5c:20:32:87:30:82:d1:49:8a:25:04:
fa:4e:2b:c1:47:1e:df:8b:fc:1a:1e:d8:30:0c:a0:
27:42:72:33:ac:70:44:8f:51:07:ca:77:bb:3b:fd:
09:b4:aa:56:76:1f:1e:c3:9b:f6:5d:bf:cd:9f:a4:
85:2f:00:27:da:f8:ee:32:0a:b3:16:39:d8:1b:bf:
2b:6f:85:06:ce:a9:2b:e8:7b:28:83:bc:59:07:14:
a7:df:1b:ed:24:ef:bd:b8:e6:8b:ef:9e:d7:1c:89:
5c:67:01:79:f9:11:f6:59:29:d4:72:76:63:2c:c1:
0f:01:7c:c3:3f:b7:59:bf:98:44:1b:50:24:fc:45:
2b:95:2a:00:b8:04:22:60:c0:c9:bb:d0:41:23:ee:
1f:d0:3a:98:64:87:3c:64:73:55:96:01:2c:72:7a:
b7:39:b1:7d:b5:32:62:d2:ee:90:a7:1f:62:c6:1b:
e6:9c:f4:2c:3e:2a:d5:e6:0b:4c:96:65:a5:12:2b:
19:0c:59:d7:a6:00:e7:24:0a:c3:29:87:6e:08:4c:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:F9:DB:20:EB:70:DD:3A:A6:5D:97:BA:86:BE:23:7A:CA:45:86
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:da:55:2b:b2:af:7a:19:2b:69:31:3f:3f:47:a8:d5:8e:
82:2e:e8:dc:76:49:91:00:e5:77:ea:8d:8c:86:9f:06:4a:48:
b9:a9:9c:12:a4:fc:00:e1:aa:81:e3:c0:51:6a:90:3e:95:53:
ac:57:8c:c2:04:1a:b7:a4:51:91:e9:7e:c6:6e:79:98:24:48:
52:4c:e9:93:ec:eb:c6:49:f6:ff:32:12:94:87:1f:23:33:9b:
b7:af:3c:a1:34:73:e2:7e:22:1b:4d:f7:ff:e6:d8:7b:a2:3e:
6a:58:c7:19:aa:ee:9f:5c:8d:93:60:82:40:4d:f8:44:6d:5e:
3d:d9:86:a7:3f:4d:3c:93:51:ec:a3:de:de:ff:41:62:79:dd:
1d:e2:23:be:b9:68:4e:56:e3:6d:39:ad:c1:57:19:55:f0:c2:
8b:85:50:70:bf:9b:b8:83:ae:ad:52:87:9a:5f:a9:4a:c0:4e:
5a:1b:33:c7:55:51:fc:f8:2e:6c:bd:e8:0d:bb:34:fa:78:63:
a5:83:af:73:11:4a:2e:15:01:30:80:60:4b:36:f1:24:da:89:
b0:45:6b:3e:38:e5:15:92:93:04:f9:99:41:3d:cc:ca:49:46:
59:92:8b:83:dc:ba:f0:9d:f8:1b:b4:62:73:fa:db:18:4b:1a:
1e:e1:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:22:51 2026 by rpki-client