
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier: hIXxiKettg7llQZvxM5A58qxUphug6GDK3jBjXKgGMQ=
Subject key identifier: 6A:5B:9F:4C:9A:01:9E:3A:A8:BB:5E:35:90:FB:1F:72:A6:12:E0:AF
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial: 1095
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number: 106A
Signing time: Tue 28 Jul 2026 17:29:34 +0000
Manifest this update: Tue 28 Jul 2026 17:29:34 +0000
Manifest next update: Tue 04 Aug 2026 17:29:34 +0000
Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: 8P897ez7UBbrwNbSs031ozyilEXZyN9ffFdcYLtYd6s=)
2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: URL1ReTticLSrWgLn6MiNA2clbnttkHn48DN8d9RREQ=)
3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ=)
4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: v5H4fJJFXDpxvnkvndLnuywB0eTLMDeUHDuPRNGLC1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Validity
Not Before: Jul 28 17:29:34 2026 GMT
Not After : Aug 4 17:29:34 2026 GMT
Subject: CN=6a68e6fe-4788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:20:dd:13:b1:57:81:16:b9:c7:29:c9:e7:
45:2b:fe:f8:cf:82:b2:31:e8:01:ae:df:80:3e:e5:
62:f4:c6:93:8f:c1:4f:54:5c:f8:d3:95:62:ae:1e:
98:4b:ce:3d:4e:10:03:3d:15:81:b1:3f:61:4f:7a:
20:67:3e:3f:ac:cf:d5:05:44:4d:6d:54:9c:e6:37:
9d:f7:05:b9:54:23:2d:ef:a3:f0:2c:70:94:4e:cb:
a3:71:07:af:81:b3:6a:ae:bb:94:60:a9:08:7d:93:
82:c8:e3:a7:cf:06:24:9b:f4:63:b5:7d:65:3f:02:
a0:b3:4a:74:ca:bc:3f:41:94:ad:a5:d3:26:44:ad:
8d:c5:4d:8f:59:22:97:46:7e:a8:ac:e7:54:9e:0e:
83:6c:03:5a:27:02:cd:68:3b:c4:45:61:85:28:b2:
d1:16:6b:46:a9:0b:7b:54:46:c7:7d:8b:d0:4e:49:
28:0c:65:54:ec:83:c8:c2:ad:d5:38:ee:76:5a:71:
a8:ca:38:c5:d3:f3:ef:f5:89:0a:b3:f1:ed:8a:bb:
e9:6f:90:6c:40:83:6b:9e:83:11:c5:73:10:31:e3:
f9:d8:e9:eb:75:9d:d8:da:0a:47:dd:53:5a:d5:91:
b3:1a:98:9b:7a:66:76:1b:bb:1c:44:b2:f3:58:b2:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:9F:4C:9A:01:9E:3A:A8:BB:5E:35:90:FB:1F:72:A6:12:E0:AF
X509v3 Authority Key Identifier:
keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:3c:1a:81:37:da:9d:ce:bc:58:b2:bf:14:f0:33:e0:32:
ac:03:40:c7:e4:4e:ef:27:63:5a:55:be:77:37:6c:73:4e:fb:
de:08:08:c0:61:e5:00:bf:41:09:58:c3:81:96:bd:04:e9:43:
04:58:08:57:4d:c7:87:5a:bb:f5:69:88:48:29:dd:bd:d8:7a:
c7:6f:a1:16:a8:ca:78:2a:fa:74:9c:a5:dc:0c:10:5c:13:e4:
9a:65:6d:f2:a1:9d:44:5f:37:e2:cf:fb:81:90:70:2c:77:f5:
6e:cf:92:f9:41:ed:cb:2e:29:8d:9b:a5:00:ee:30:3f:42:6d:
d4:f0:42:88:84:9f:40:89:e5:50:54:97:ec:4d:9c:2d:7d:65:
cb:7e:73:61:7d:ea:36:38:7e:49:fc:f2:20:f0:51:b9:fc:8f:
cf:2d:e7:6e:51:1a:98:5d:8a:53:bf:e1:ca:12:36:8b:3f:07:
5a:cc:96:2c:f9:6e:65:45:2e:ff:27:71:68:30:c8:b2:74:54:
59:fb:cd:37:94:1b:85:d2:dc:91:b9:f5:87:92:52:bd:05:cf:
39:05:14:0e:3a:b3:37:6d:ec:1b:f0:71:4a:2e:25:6b:7d:a7:
f6:a5:bb:be:8f:ad:04:07:42:0b:d5:70:28:40:9a:54:1d:04:
8c:83:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:27:16 2026 by rpki-client