
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: K6K6JZkaU7bH5oASwyWj1WKF2g1/GP7rUW+6SU8ToS4=
Subject key identifier: 41:32:23:93:D7:DF:42:0C:D6:7C:E9:71:AB:EF:21:B3:1F:62:C8:94
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: D2
Signing time: Mon 27 Jul 2026 08:54:00 +0000
Manifest this update: Mon 27 Jul 2026 08:53:59 +0000
Manifest next update: Mon 03 Aug 2026 08:53:59 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: Dsrno9iyYOWB5Ns0tA6u3PSPtjwa+FMcOz5/CCwd+Jk=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Jul 27 08:53:59 2026 GMT
Not After : Aug 3 08:53:59 2026 GMT
Subject: CN=6a671ca8-886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:da:80:4a:b5:38:27:4e:6c:27:94:6b:9f:
12:e9:72:db:60:c0:8f:fe:b3:e4:74:b5:b4:78:7c:
c7:a5:6a:ca:33:e7:6f:3f:8f:a2:c0:80:bd:a1:58:
57:c2:d0:b7:59:65:24:d5:ac:b3:b2:01:4a:8f:a1:
85:7c:d6:19:1b:98:1d:87:eb:2d:d0:86:28:72:b6:
fb:82:59:08:a9:a3:68:27:b1:56:24:25:19:86:54:
fc:ad:bb:11:03:6b:82:22:56:ea:44:b0:be:9f:05:
07:ed:86:5e:09:38:c6:65:46:05:a8:04:04:54:da:
60:3a:f0:7e:2e:de:33:5b:d1:57:60:0d:01:3d:d2:
38:06:a6:db:dc:98:21:0f:75:25:5b:1f:fa:55:64:
27:f0:52:4a:01:05:c0:05:b2:9e:fe:65:08:77:10:
ca:64:8f:01:23:f8:67:0f:2d:0e:93:bc:c2:56:b6:
35:0a:54:3b:48:de:78:52:b0:35:70:e6:07:00:61:
d8:a8:cf:41:6f:8b:69:1f:02:92:09:5f:67:50:96:
e1:1d:c8:54:df:78:7b:9f:59:60:b5:f8:0b:64:86:
59:b8:7f:cd:9d:58:4c:ab:d7:f9:76:85:3a:20:2a:
26:6d:9a:af:19:af:e4:0c:ab:e3:b1:45:3a:8e:30:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:23:93:D7:DF:42:0C:D6:7C:E9:71:AB:EF:21:B3:1F:62:C8:94
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:37:a9:af:13:42:8d:20:c3:ad:f9:90:1c:c8:7e:9b:33:87:
74:36:e5:0c:ea:20:33:2d:55:ba:52:3d:04:8e:7d:0c:02:1b:
8c:db:9e:69:31:e7:22:df:e4:5e:bf:d6:6d:0c:ff:60:93:bc:
33:1a:a8:10:87:9b:3c:6c:ee:ad:a7:65:b2:1f:f7:3e:e3:0d:
5d:f2:eb:c7:77:1c:08:cf:f8:ef:bf:b7:8a:f8:9a:13:7b:e0:
3c:1b:79:98:ea:84:17:cc:77:a4:74:b5:4e:5f:3d:5a:df:39:
a7:87:06:b8:64:b3:27:d0:4d:e5:16:7c:71:38:ad:2d:f6:0d:
ec:f2:9f:65:ed:5b:30:b8:d2:43:f3:9c:4d:af:28:d2:31:c6:
37:d7:a5:f7:85:97:bf:09:79:cd:0c:bf:49:59:44:a7:cd:5b:
03:90:cf:98:0a:c4:7c:fd:5b:2c:fe:3e:18:a8:eb:7a:33:f3:
a0:f5:c4:44:f7:ba:ad:de:35:2e:43:99:2f:71:51:71:e4:a6:
34:1a:4f:ec:55:1b:a2:53:01:16:e3:13:d6:ed:ac:6c:4c:ca:
2f:be:d7:a3:eb:32:8b:c9:1c:ce:f7:6e:1c:8a:00:43:cc:a7:
e0:39:8f:25:4c:50:0c:ce:14:17:35:34:e3:e9:aa:c9:3e:76:
c8:b1:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:23 2026 by rpki-client