
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier: vdr06fwrMEZMxF7HJ4Eeh5xeyPIZ3xra7zwl3STK/24=
Subject key identifier: AE:74:D6:09:C3:C0:EB:63:4E:45:0D:98:5A:D1:71:F4:EF:AC:7F:07
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial: 038B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number: 0384
Signing time: Mon 27 Jul 2026 01:52:59 +0000
Manifest this update: Mon 27 Jul 2026 01:52:59 +0000
Manifest next update: Mon 03 Aug 2026 01:52:59 +0000
Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: xLiwkkSS+CNTr6scnPp9Djs0h+xXK3K4PayAhhkv0O4=)
2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Validity
Not Before: Jul 27 01:52:59 2026 GMT
Not After : Aug 3 01:52:59 2026 GMT
Subject: CN=6a66b9fb-462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:db:25:cf:f8:e2:ea:7e:2b:79:b7:6f:7f:
03:8e:3a:e8:2c:22:30:22:cc:bc:d3:0e:2c:d6:34:
16:34:ca:d4:e5:9d:eb:c7:6e:6b:11:2d:db:12:06:
1a:4c:20:99:a8:85:db:ec:4f:97:1d:1b:44:75:c7:
71:56:d1:e7:b4:c0:68:28:fe:2e:82:d2:f0:4d:cc:
b3:44:18:31:d0:b4:b6:1a:7e:6a:66:06:09:f3:93:
b6:e8:cf:77:af:b7:91:ac:3e:5b:fd:3c:39:60:bd:
09:12:f5:2a:13:86:30:db:03:98:97:86:df:01:2b:
99:cf:b3:b6:c0:e9:8f:ff:86:65:cc:44:1b:53:87:
c0:d4:af:50:4b:45:f3:ad:23:86:4d:ac:dd:d7:52:
11:8e:7e:da:7f:b8:57:04:c0:d6:d8:b5:04:fd:ac:
44:82:35:23:ed:76:10:6f:f0:59:c6:da:8c:9f:4c:
21:4f:b6:d7:62:62:d0:ce:67:c9:87:ae:c7:53:43:
f2:e6:10:90:dd:ff:39:f3:3d:64:1d:e1:d5:47:32:
55:97:ab:15:4a:a4:56:50:d5:8f:57:2f:a0:29:b2:
a0:7a:8e:9a:4e:d6:71:2a:1d:a4:06:a7:48:67:d4:
b1:39:b3:98:f2:ec:b6:a5:04:dd:f4:9b:5f:da:ba:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:D6:09:C3:C0:EB:63:4E:45:0D:98:5A:D1:71:F4:EF:AC:7F:07
X509v3 Authority Key Identifier:
keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:2f:7b:ec:53:ac:f8:ae:ec:58:5b:b5:52:51:2f:7e:50:29:
f0:9d:d2:cc:77:80:6f:e9:6c:56:41:dd:e4:5d:aa:eb:86:a1:
3a:fb:23:f8:14:99:a2:01:ac:50:d6:ae:3c:d1:83:96:d6:9b:
e7:12:53:34:83:38:78:3d:4e:46:27:58:14:44:97:e8:bc:42:
c1:c2:6d:aa:84:96:0c:22:8f:3d:18:16:7b:77:6b:fd:53:f6:
28:0e:07:fd:f0:39:d3:a0:3f:87:51:38:a5:a5:00:ba:e9:0a:
c9:1c:63:31:c9:7e:31:58:d4:d3:ac:9e:73:5f:f8:91:77:c8:
b7:cb:9c:f6:bf:7c:58:a4:d8:33:99:bc:e2:2e:79:17:89:fc:
18:8c:94:65:46:32:cd:ea:5c:5d:78:d8:33:68:70:3a:a7:ed:
a5:5a:e1:a7:e9:3b:c1:b2:b6:a3:80:dd:be:6f:87:b0:6a:ed:
09:bf:9d:ca:52:28:90:ec:3b:f4:c7:1f:11:98:c3:b8:c8:4d:
da:85:b4:5d:73:86:40:64:0d:31:f2:de:25:eb:28:66:ca:f1:
6f:af:d9:c0:da:50:0b:3f:78:ff:a8:8e:3c:f3:9a:7a:31:98:
d9:da:ca:fc:01:18:ec:9c:83:4d:1e:35:0a:75:6c:5d:b6:cd:
39:a8:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:26 2026 by rpki-client