
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: BYOhn0jNQtW4e4hkn3F2BchJUVEMNz+EXdpEIKGUFRc=
Subject key identifier: F5:22:E7:4A:7A:68:39:89:83:34:6F:D4:A8:C9:5E:4B:37:AA:AD:D2
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0D75
Signing time: Tue 28 Jul 2026 18:08:27 +0000
Manifest this update: Tue 28 Jul 2026 18:08:26 +0000
Manifest next update: Tue 04 Aug 2026 18:08:26 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: pjZNqgDbB9slBTPY2G5xW/zcuAlGVHUtUg8dVR7FbZI=)
2: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Pvc5GDrJlGSuNYbRyBpLm6q2hwwEqbNDXIDKhGgHHek=)
3: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: bMVnErmgRlLugY09+B5/egD11gP2CX9LPToXy6tEisU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Jul 28 18:08:26 2026 GMT
Not After : Aug 4 18:08:26 2026 GMT
Subject: CN=6a68f01b-fdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:0e:52:72:a1:ff:f4:6d:0f:bf:bf:41:fc:
40:44:4f:bb:06:d1:f2:69:d9:0a:45:71:ef:1b:f9:
22:d8:ea:9e:1e:4f:d4:9b:e5:62:ea:f8:e1:bc:2d:
c4:a4:c9:23:6f:01:6c:d1:1e:36:e4:31:1a:44:33:
bf:bd:cf:cf:7f:3b:9b:1e:3a:90:ee:b3:3d:16:89:
71:0e:b9:32:ce:a2:fa:82:2d:0d:cd:a8:6f:5d:1d:
d5:cc:a5:f1:c2:fa:2d:ef:f9:ee:cc:36:0f:ae:c8:
e3:67:fa:93:68:e4:f0:b7:b0:7c:fd:a1:cf:d0:c5:
dd:0c:54:6f:52:65:81:a3:8c:f6:0d:c9:59:c4:58:
f5:a7:b0:42:f9:70:39:15:de:20:8e:ed:26:89:e1:
41:b1:47:bf:13:1d:13:51:9b:8d:60:46:34:9f:85:
76:20:e9:7e:dd:b4:8e:d8:ef:86:ce:77:3e:3b:ce:
47:e0:9e:44:69:b5:e5:30:1d:19:e5:51:54:ac:c2:
40:ba:8f:59:79:07:8a:d4:14:0f:5c:68:ad:84:ce:
70:21:f5:48:cf:9d:46:11:7c:a1:66:f2:84:43:bb:
e5:9b:39:51:6b:4e:d8:f6:5b:bc:ae:a9:62:dd:86:
7e:56:e2:dc:a0:20:14:cc:34:e5:ab:ee:e5:2d:51:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:E7:4A:7A:68:39:89:83:34:6F:D4:A8:C9:5E:4B:37:AA:AD:D2
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:9b:12:98:5c:77:a7:52:db:24:2c:44:b4:22:fc:61:c7:
f3:9a:5e:33:58:df:8a:d5:b4:a5:9a:d5:da:d7:ae:43:92:3b:
69:9a:e9:cc:99:8e:ae:33:9d:8b:eb:3d:05:32:fd:a3:53:6d:
0a:57:d8:96:5b:e4:84:91:fd:f5:9c:72:b9:a6:7e:a9:87:93:
0f:75:0e:a4:64:a1:ad:99:02:63:a7:d5:bb:e1:63:3e:d7:fd:
af:f1:52:f8:a9:11:67:e4:fc:e3:f1:89:2c:ab:d1:4a:9a:73:
2c:a6:61:1c:68:80:df:3f:78:e1:90:ea:3b:68:0b:67:66:7e:
77:98:d5:91:31:76:29:2a:95:a3:2a:5c:b0:39:53:99:c9:86:
bc:66:9b:f1:2e:f5:31:74:4d:3e:e8:7c:40:cf:97:7c:a6:45:
ad:13:d8:f0:9e:13:ca:79:77:27:46:b8:00:26:18:89:76:ea:
3a:68:14:c2:e5:f8:fb:8d:1a:ba:71:86:63:db:63:31:4c:6f:
94:62:83:1a:9e:a3:f1:45:60:ed:75:47:dd:91:09:0d:b2:02:
ea:32:35:4d:98:a8:06:a3:87:58:d0:29:d3:b1:c2:83:07:9b:
b3:50:65:e2:95:ce:b1:00:85:87:9a:7c:f1:ce:00:b4:d8:5e:
ba:27:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:48 2026 by rpki-client