
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json)
Hash identifier: ybaMaenR8Dwmi2qIznW84PApk922jttMYXCRKESz5x8=
Subject key identifier: 2C:09:D4:AF:8E:91:67:E4:00:78:59:C8:BE:9F:A1:A8:4F:73:59:1E
Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
Manifest number: 01D6
Signing time: Tue 28 Jul 2026 20:09:57 +0000
Manifest this update: Tue 28 Jul 2026 20:09:57 +0000
Manifest next update: Tue 04 Aug 2026 20:09:57 +0000
Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: HRHkshqV9iGLIoUmBAb6y4Kg1vhkUfeVBAflUn99pEs=)
2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: lwkdt0p18j+EGoMj/NlkIlwaZeWIUPoZjTEhgtn7WSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Validity
Not Before: Jul 28 20:09:57 2026 GMT
Not After : Aug 4 20:09:57 2026 GMT
Subject: CN=6a690c95-dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:e3:ca:df:c7:57:37:b0:87:5f:67:63:ad:
37:60:81:4c:70:fe:44:08:fd:c9:7a:cb:f7:99:8d:
bf:12:73:86:12:7d:d6:62:a8:33:40:15:d9:ea:e4:
8c:15:e2:81:99:5e:e1:15:9a:c3:4d:42:74:91:d8:
8a:b2:ee:cd:d7:d7:16:1f:38:53:29:30:93:a6:8b:
84:7d:31:38:f9:3f:bc:9b:1a:9c:c5:bf:e4:88:d4:
2d:b5:39:ce:d5:17:51:98:f4:c6:e1:ef:23:4a:1d:
f1:91:b0:b7:58:0c:fb:25:ad:68:b6:3f:72:7e:c1:
d9:19:43:e6:39:f5:03:7b:75:71:b4:b8:27:05:60:
1a:93:97:40:ca:e5:30:ff:18:d1:67:80:a5:3c:e1:
d7:43:35:58:73:cf:6d:20:bd:62:f7:b5:52:85:b8:
a8:06:cb:8c:90:3f:c6:a1:c9:6d:15:54:c5:c4:f3:
81:23:ce:16:08:09:97:2a:71:da:36:78:b1:ce:0d:
e2:29:66:ad:af:02:98:1c:04:a4:8c:8d:2b:d0:f7:
01:95:90:00:7d:28:2c:e0:f8:a9:c0:7b:50:33:44:
56:d7:21:ee:97:2b:27:2b:75:cc:ac:75:51:c9:cc:
e1:ab:dd:70:e7:d4:f1:e9:98:ba:e0:4e:70:70:ab:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:D4:AF:8E:91:67:E4:00:78:59:C8:BE:9F:A1:A8:4F:73:59:1E
X509v3 Authority Key Identifier:
keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:8d:00:82:ce:b3:a2:07:4d:84:29:de:0b:9e:09:55:d8:
5b:ae:33:d2:82:26:cf:39:2b:52:f6:99:eb:36:8b:da:5f:9c:
e8:d4:c2:fd:2e:ae:56:43:a8:52:e3:fa:8e:7c:f5:43:54:67:
7b:05:ab:bf:29:a0:ea:7c:5b:87:14:7d:b4:c1:2f:d9:74:76:
d9:67:c6:17:36:b9:d8:b3:7e:72:58:88:ba:9f:c7:16:ad:46:
7c:ea:9e:8d:77:a3:74:3e:e6:87:e6:01:ff:5a:12:0a:ed:05:
45:24:c8:90:a6:d6:01:b7:68:19:4d:c1:76:45:73:73:58:b5:
12:fd:98:c8:e8:9b:c5:ed:8b:a1:b5:e8:21:a1:a9:9e:7a:ec:
10:07:3a:1e:d3:37:5a:a4:8e:53:8b:19:77:4b:83:9b:fd:42:
bb:09:07:8b:26:7c:80:ed:eb:c1:b5:9d:f6:ee:b0:24:69:0c:
5a:d4:0b:04:2c:96:6e:7b:a1:1d:c8:98:f8:bc:fc:4f:d1:61:
46:9a:c4:be:23:96:96:5c:55:2a:10:71:46:9a:be:7b:98:c0:
72:71:9c:9b:90:77:e6:c3:3e:94:07:16:3d:6c:21:11:bf:fb:
84:02:1c:e2:b1:1a:ac:53:c0:c1:87:56:39:8b:d4:9c:f9:5b:
d7:74:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:41 2026 by rpki-client