
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json)
Hash identifier: otW9nH+CneXtsYRE7D1s9ANAuX5Ky2FKBdpZHIjfWTo=
Subject key identifier: 26:1B:D5:C7:7A:1E:59:EE:F5:E9:F7:0E:ED:A1:D9:9A:A1:FC:B3:DC
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 10D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
Manifest number: 103B
Signing time: Tue 28 Jul 2026 17:35:59 +0000
Manifest this update: Tue 28 Jul 2026 17:35:59 +0000
Manifest next update: Tue 04 Aug 2026 17:35:59 +0000
Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: NTDwBnwmvPhbpkhr2xjQSPgBqwh7mBFpzISdwYyDzi8=)
2: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: ufh38KxhdsuLy9IaI1dEAdKwH+h8MTF+UaFxLZhtCHo=)
3: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: 1hrK2Bwewpt3jrZg8tzld9vT7Z8nHw5euqbUeqhmK6U=)
4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: HkpHyo2iHcK4D2nlMSOniFKi4H/SALi3eltvq0xZSgo=)
5: B35E5B46334111EF9770A542C4F9AE02.roa (hash: MGyDF0SymFTGhXVC01aY5fhE89sLhtH+JybTpcTPMuU=)
6: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: OWu1YAjMPxdpWq7sK40yFmTZBw771CrDLDYch9c7srQ=)
7: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: oM2ZWP4gaa1Ec28NI0HOJLuGJz8huwbOd9sIWlD3wks=)
8: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: X4ujn6m6b/UzOkSsv1BM/hAI4e2I7YefOVrCDDZ2L0g=)
9: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: HBSapd8EnRXWCh7KQah04ZzDJueHHz91PfvdNwADOIQ=)
10: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: Sd3bOmBjQUjJSEaaagRS6KbmxYRr1S/mpgHzlYj8vVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4306 (0x10d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Jul 28 17:35:59 2026 GMT
Not After : Aug 4 17:35:59 2026 GMT
Subject: CN=6a68e87f-aa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:4c:ff:35:8f:5a:06:5d:2c:d0:ba:ec:20:
46:92:74:29:7b:89:3d:91:ca:8f:5e:1d:11:bd:ac:
87:8b:97:42:62:90:0d:52:7e:d7:79:05:92:4d:d2:
2e:bb:a0:be:77:6e:a4:b8:9e:9f:85:7c:6b:9e:0f:
a0:61:b4:84:7c:82:ff:73:74:a0:be:5a:5c:a0:99:
82:24:28:9f:63:cc:b2:24:cf:ca:75:2b:3c:22:4d:
e4:93:18:bf:a1:a0:a5:9a:68:8c:2c:a4:b1:ae:03:
4f:2c:83:fe:a1:a0:08:29:eb:f4:fc:4d:55:fa:b6:
0f:3d:44:3b:86:56:14:f1:a6:40:64:c8:13:5a:27:
5f:e8:1d:57:ec:b3:5c:47:b6:d5:7a:9e:f0:45:03:
d0:d5:9e:8c:70:a6:3c:86:ce:54:ad:ac:49:f7:d4:
cd:7b:fe:b9:20:a9:c5:a8:50:29:60:38:ef:b3:b1:
5c:b8:7f:8a:c9:9d:e6:c7:83:38:3a:9f:f8:26:76:
42:d2:0d:aa:36:b7:d0:3a:44:8e:bb:1a:ac:53:84:
a9:83:9f:c7:f0:2e:19:a7:02:77:e6:b7:b2:f3:d5:
4e:49:90:99:62:9a:d5:ef:1c:91:06:65:52:ba:f5:
a5:a2:53:1f:01:9e:47:7f:cb:bf:29:c4:3f:e9:fc:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1B:D5:C7:7A:1E:59:EE:F5:E9:F7:0E:ED:A1:D9:9A:A1:FC:B3:DC
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:83:3c:f6:ea:2d:72:c5:34:58:4d:30:c6:b0:4b:92:49:cb:
91:0c:18:50:46:57:1c:5f:51:e3:db:54:ae:2a:b3:cf:ed:79:
7a:ff:6a:48:7f:3e:0b:fc:78:cf:e8:00:9c:fb:38:f6:e2:ca:
53:13:48:8b:fd:30:59:a3:4e:93:d2:cc:92:da:56:a5:f7:b1:
5f:7a:cb:93:7d:4a:09:c6:97:bc:a9:bf:49:0d:03:4e:e5:50:
ed:8d:09:16:aa:00:6a:1a:b5:d4:01:26:f3:0a:4d:6b:72:f2:
20:25:ba:f5:f1:39:c5:68:10:44:6d:b3:5f:71:f2:1a:72:8a:
b5:db:ef:d6:88:04:4f:e7:33:11:67:70:cb:bc:39:50:f9:a3:
70:46:79:84:5f:ea:ae:59:86:ca:a6:b6:41:72:ca:3b:0b:70:
a3:93:64:68:56:79:03:60:8b:f6:31:d4:57:ab:31:4b:37:27:
98:ac:e3:58:45:70:af:85:c8:11:bd:00:79:fd:15:d9:d9:fa:
93:aa:62:b5:59:bf:d0:c6:be:e8:70:61:0c:c2:1b:b1:4c:2f:
96:ef:69:b7:f2:02:90:be:82:82:11:de:25:c8:43:c8:b3:7a:
41:cd:c7:cc:26:a2:ce:53:a5:fb:34:dd:09:1d:c9:7b:67:63:
06:8e:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:41 2026 by rpki-client