
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: kk77+UQrUC5zEhPzaxs6hQKA5fa+g5lgHKaDdhEgmfg=
Subject key identifier: D8:94:C7:CE:1C:D0:02:B3:3D:9A:48:36:89:C4:20:BD:E5:E6:62:FA
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: B1
Signing time: Mon 27 Jul 2026 09:14:00 +0000
Manifest this update: Mon 27 Jul 2026 09:13:59 +0000
Manifest next update: Mon 03 Aug 2026 09:13:59 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: VjwxfeYTQvFdbzRprF5hDABr4qCWQxZQdwRUnTA0OW8=)
2: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
3: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: Jul 27 09:13:59 2026 GMT
Not After : Aug 3 09:13:59 2026 GMT
Subject: CN=6a672158-6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:d2:f7:72:a9:9c:f8:96:5a:46:f3:2f:f9:
88:8f:cd:e6:72:e2:79:42:d5:7d:be:d4:4c:b5:2b:
e6:4e:3f:7f:35:3c:7d:13:09:e7:0a:85:6b:3d:9f:
ae:c2:87:be:64:ae:fb:f4:03:dc:81:18:33:d2:ae:
c6:c3:cb:6c:e9:71:38:2c:f1:12:10:c2:82:07:a0:
c0:91:f5:2a:fb:e8:57:e7:11:85:52:28:22:c9:9b:
e9:0b:2c:7a:76:7f:e7:28:54:42:c0:d9:a7:1c:96:
e8:6a:57:b2:bc:7b:5f:8c:46:33:d5:94:33:d3:87:
1f:54:b0:62:62:99:a7:2c:f7:87:68:81:52:9c:7a:
8f:a8:4f:ba:33:2d:c9:2e:a7:6c:4a:0e:2c:70:dd:
90:0d:d0:1d:08:e7:4a:6c:9b:46:b0:4e:72:d4:80:
c1:31:1b:8e:24:05:2d:1a:91:01:7f:29:37:51:1e:
9e:f8:1a:78:5f:26:ca:d2:06:ba:69:07:a6:6d:01:
66:e4:d0:cd:f9:e1:e8:7f:4d:fa:f1:f0:60:b4:96:
f6:63:f9:7a:27:6b:82:12:62:58:12:96:a1:70:06:
04:0b:93:40:92:25:c6:b1:ac:30:d9:70:20:3e:ed:
91:2b:5a:a3:36:5b:1e:0c:ba:88:e0:e7:8b:e8:ec:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:C7:CE:1C:D0:02:B3:3D:9A:48:36:89:C4:20:BD:E5:E6:62:FA
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:b2:de:05:3c:72:05:a4:e2:83:58:01:fd:44:ed:48:90:
a2:2b:56:31:47:29:53:41:20:62:ae:a8:44:b3:b7:e6:c2:4e:
7b:03:b4:1e:8e:ef:fc:47:9e:72:44:02:e8:72:88:90:88:61:
a0:d6:f9:e7:21:5f:d6:f9:03:78:8f:8d:46:fa:14:11:0a:9e:
cd:d3:68:4f:db:87:fd:9c:dd:6d:7e:b4:2a:09:63:c2:b6:1c:
0d:a0:56:3d:3e:f2:e0:25:d4:09:61:67:ed:aa:1f:53:44:da:
77:a0:0b:e7:5e:20:84:60:a0:e8:13:a6:a1:16:e5:0d:f2:e2:
55:9c:71:79:57:75:c0:ca:cb:dc:d5:82:79:f1:3f:92:5e:b4:
14:32:e1:19:08:df:f0:d5:c1:8c:70:c1:b7:e4:e6:f3:72:a5:
2f:6a:a9:5a:2f:c5:ab:6b:d3:19:e0:03:c6:14:a2:0a:0e:16:
5c:55:57:66:13:24:1f:23:27:fa:63:db:59:12:54:24:f3:e3:
8b:c0:2f:bb:88:4a:7f:65:c5:40:23:4f:85:a5:3a:b5:6d:69:
42:fa:82:86:a1:93:40:65:5b:11:04:2a:4a:84:6b:19:1d:57:
cb:fa:13:81:89:79:89:c5:56:31:a8:b2:ba:2f:ac:c0:82:46:
77:69:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:16 2026 by rpki-client