
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json)
Hash identifier: 5Sc6Np01tvaTs0pPmpSr8quCwx0m/GGQz8dn/RdGIwM=
Subject key identifier: A0:1B:04:45:DC:0E:A2:EC:56:45:AA:6C:23:63:23:83:FF:F3:8E:78
Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Certificate serial: 0D48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
Manifest number: 0D30
Signing time: Tue 28 Jul 2026 18:16:18 +0000
Manifest this update: Tue 28 Jul 2026 18:16:17 +0000
Manifest next update: Tue 04 Aug 2026 18:16:17 +0000
Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: h0INJzF4x3LPLd+BUuRnfsAK6LhKkUHqr8OQAL64PlY=)
2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks=)
3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Validity
Not Before: Jul 28 18:16:17 2026 GMT
Not After : Aug 4 18:16:17 2026 GMT
Subject: CN=6a68f1f2-aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:bc:aa:fa:10:2a:46:a6:e1:64:44:7b:6f:
c0:07:e1:99:59:e4:20:b0:ee:4d:24:8d:58:67:b8:
f6:db:94:f0:4d:d8:25:01:97:ec:71:34:94:77:61:
82:15:fc:6d:61:60:f2:ea:6e:2e:b0:5a:96:f8:43:
ca:b3:d4:0a:d0:0f:73:60:26:b6:4f:f5:44:69:f4:
fc:21:ec:45:3c:fd:20:1b:e9:c4:55:17:43:ae:34:
49:b9:83:d8:07:90:16:83:84:a0:d2:86:97:b6:29:
4d:b3:26:01:4e:ba:c1:95:fa:b3:0a:ca:a9:80:8f:
fc:d0:c7:2b:45:35:22:fa:6d:65:1f:dd:bb:0e:4f:
db:88:28:d2:69:6e:c3:19:3f:b2:c0:1b:a7:99:93:
59:17:80:41:e7:cb:19:45:15:0b:b3:ef:67:46:85:
cd:80:88:45:53:6b:3e:6e:91:ae:ab:ee:a4:57:e8:
d4:34:83:04:9a:0b:c8:d1:ce:0f:8e:2d:22:56:8c:
81:92:be:07:1e:93:03:0b:d2:3c:79:74:c5:97:15:
6a:8b:67:7f:32:b5:e7:33:2a:eb:f5:9f:12:84:a8:
dd:c5:e0:0b:1c:30:5c:18:12:7f:cd:41:c0:eb:84:
c5:7a:57:a5:75:4b:89:f4:0d:04:54:8e:76:2e:3a:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:04:45:DC:0E:A2:EC:56:45:AA:6C:23:63:23:83:FF:F3:8E:78
X509v3 Authority Key Identifier:
keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:9b:c6:66:3f:aa:9f:27:bb:01:97:48:57:4f:04:02:2a:
4e:4e:87:a8:3f:f7:64:c1:f5:d9:a2:fa:dc:4a:a6:07:71:82:
8b:24:56:7b:c7:bc:0a:63:61:22:3c:23:8e:4c:4f:1c:9c:6d:
63:33:be:04:1f:a4:4a:a7:fe:5c:91:74:c0:12:5b:61:ca:48:
6a:82:c4:58:0c:d8:e5:b5:12:7a:e4:8a:42:4a:3c:f8:a2:61:
89:18:51:38:12:c9:28:9a:05:d6:0e:46:f1:8a:c9:70:21:89:
fd:32:2e:69:f1:ea:d2:13:4f:3f:34:8e:81:ec:75:2e:7d:d7:
16:53:47:ec:df:1f:3b:72:4f:87:59:be:aa:6d:89:fb:24:ab:
5d:ef:5b:0e:63:62:ca:78:d4:31:29:fe:60:2e:4f:ab:7c:f4:
be:b4:8d:69:a3:79:48:a7:d4:ee:66:53:04:0b:03:d2:00:f5:
cc:15:f0:2b:dc:c7:48:2c:d8:72:ba:80:f3:2f:cc:66:5c:17:
e5:8f:31:b7:c1:02:b0:38:0c:e0:b6:74:ce:22:73:bf:7c:fc:
d1:1e:79:21:af:75:82:3d:6c:12:d6:af:cf:40:bd:40:8a:a8:
69:85:fb:8d:af:97:34:93:cb:49:38:02:41:32:e5:09:6f:fa:
d5:67:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:06 2026 by rpki-client