
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: E/l5Bz7Osue3zhlRwWo5qZ2ue/UwSI4Fa7Ty5cPjXZc=
Subject key identifier: D3:EE:0A:9D:1D:98:45:5F:C8:AC:88:A6:8A:DB:29:52:FF:3E:5E:EB
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B3F
Signing time: Tue 28 Jul 2026 16:21:32 +0000
Manifest this update: Tue 28 Jul 2026 16:21:31 +0000
Manifest next update: Tue 04 Aug 2026 16:21:31 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: 06kyPv8JeTiQf5eFvIVlp7cbtdXi7dhykTZNQR1qiFU=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6990 (0x1b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Jul 28 16:21:31 2026 GMT
Not After : Aug 4 16:21:31 2026 GMT
Subject: CN=6a68d70b-5994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:14:08:cc:c8:1f:75:c1:e4:bb:ea:f0:93:
eb:aa:da:fb:bc:1c:d7:55:28:2d:a6:8b:9c:7f:20:
e8:0e:b3:13:92:a7:d1:ef:3e:06:ea:32:e0:37:80:
d9:73:28:6c:3f:fe:56:d8:9b:f3:08:d4:24:d5:19:
71:0e:77:08:90:e4:bd:b7:f2:d4:f0:e0:b7:d7:94:
f8:bc:0e:73:50:d2:bd:b0:d2:9c:d6:58:37:71:69:
ba:33:7e:cb:74:ce:77:11:65:bd:a2:7c:1a:33:06:
ce:a6:39:17:04:0c:ec:41:e5:af:74:e9:4f:fd:5b:
52:d4:d6:ca:20:7f:b8:3e:f0:9d:70:cb:0e:f5:bf:
82:f5:8e:2f:b0:24:21:69:f1:00:4e:35:3b:d2:70:
5d:4a:fd:b4:dc:21:52:87:67:0d:e3:21:c8:fc:4d:
c2:b1:d3:45:f1:c3:8c:f2:41:a3:01:61:f6:8d:96:
f5:fc:ba:54:b5:1f:09:0c:5f:85:9d:6a:66:e7:f2:
2b:d3:8c:73:18:2e:57:1e:c0:f5:7c:c3:51:2a:16:
90:e5:ee:69:b0:a9:f1:a5:73:d0:07:37:33:37:be:
a1:5d:cd:d4:3a:1e:76:c7:e3:ca:e7:d1:d4:7b:78:
13:1d:0e:c6:74:ef:90:91:bc:ff:72:e2:ec:37:92:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:0A:9D:1D:98:45:5F:C8:AC:88:A6:8A:DB:29:52:FF:3E:5E:EB
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:17:06:50:99:9e:33:7a:09:6c:c7:c0:ee:fb:75:64:22:20:
cf:12:1d:b8:1d:71:6e:70:9c:78:e8:48:44:c8:45:b6:84:75:
e1:6f:2e:6e:e2:f3:94:fb:a7:e2:14:95:e3:39:13:cd:a4:fb:
8d:33:49:5d:69:0d:76:35:0c:7c:94:2c:1c:b4:59:f5:de:44:
e4:de:7e:a7:80:65:6a:9c:b3:ec:df:a4:c9:2c:bb:25:25:41:
21:95:f6:4b:55:b1:e2:24:31:1b:37:61:95:47:ad:f3:39:cb:
87:60:87:a8:ce:08:3a:48:8f:4a:4f:ef:ab:fe:98:7b:dd:74:
cf:0a:78:bb:e0:68:20:c3:cc:b8:1d:e1:d5:2a:79:60:94:15:
00:91:8b:a1:22:83:df:1e:02:c4:40:81:fe:11:b5:78:13:b9:
08:36:c7:b4:9c:2f:c4:16:88:e9:b7:57:dd:ae:66:78:e1:93:
67:d1:a1:f4:c2:3a:ec:ee:43:93:9c:a3:81:cb:50:33:2d:51:
3d:07:cc:68:98:bc:58:60:0a:08:53:c4:d1:42:d8:15:13:84:
e6:4b:73:ca:8e:8d:8c:86:e3:41:00:8c:bf:2f:7c:37:da:31:
02:26:88:ae:a3:42:08:0b:8f:77:da:32:3d:6d:31:44:9e:f8:
cc:19:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:19 2026 by rpki-client