
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier: 8U4pK1mDdzGTrhKwwDZYzlbTVRnIkga14VOyFjKoLhc=
Subject key identifier: BD:20:F6:90:9B:49:6A:AA:07:BC:50:9F:01:46:10:6C:5A:23:8A:13
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number: 02E6
Signing time: Mon 27 Jul 2026 02:25:42 +0000
Manifest this update: Mon 27 Jul 2026 02:25:41 +0000
Manifest next update: Mon 03 Aug 2026 02:25:41 +0000
Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 0Uh03dLYp17jXuzfuctW/AV2jOklLGQc/weSHHiAmSw=)
2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Jul 27 02:25:41 2026 GMT
Not After : Aug 3 02:25:41 2026 GMT
Subject: CN=6a66c1a5-0c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:c7:5d:6c:59:ea:dc:26:dc:9f:9a:6e:2f:
43:b3:49:a9:48:c5:ad:ab:25:7b:fb:f9:4d:52:5f:
80:bb:16:77:6b:59:64:82:dc:2d:fd:de:e9:9e:65:
22:de:03:06:13:ca:4a:45:20:01:bc:e2:3f:e0:97:
6d:17:ce:7b:b7:7b:c3:d1:51:30:ec:0d:b5:eb:6b:
d4:d0:ad:cf:bb:df:93:9d:ec:72:bf:dd:d4:e9:5e:
c3:32:26:4d:9b:01:04:8b:17:9f:be:4a:bd:b9:a2:
5a:f4:88:09:32:94:89:6d:a0:06:fe:d0:80:0b:e1:
b9:e3:a2:8b:a1:62:71:c3:20:72:a9:34:9f:70:9f:
46:bb:eb:0e:7c:d6:de:24:ab:c7:71:20:4d:df:a7:
60:99:21:fb:a3:2f:0f:bf:6f:0c:97:cf:e4:57:1f:
d4:eb:f8:09:c3:e7:ad:f7:b6:eb:10:da:9f:ee:d8:
24:94:c6:61:49:9e:9d:b1:12:0e:a5:95:1e:48:db:
bc:04:83:5a:cf:33:20:99:10:93:c3:2f:07:e1:31:
0d:a6:75:e0:b2:5e:f3:ca:fc:ba:92:e0:cd:5b:5f:
e4:ca:34:30:5d:3e:44:0f:52:02:6c:ad:d2:06:9b:
6b:6b:7c:bb:91:d8:bc:ce:07:b6:15:28:82:ae:86:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:F6:90:9B:49:6A:AA:07:BC:50:9F:01:46:10:6C:5A:23:8A:13
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ed:ab:ce:09:24:88:60:49:4e:b3:c0:1b:fa:96:00:6c:d3:
96:4c:3a:f8:f8:a6:99:e4:de:9b:76:89:74:95:05:c6:06:0f:
ea:47:69:41:68:11:fc:22:d2:80:d2:c9:9a:eb:c0:eb:55:38:
72:53:fa:ca:e7:7f:b0:0a:04:d8:88:cd:0b:4c:4e:4e:8a:37:
86:b2:2a:8b:f8:fb:c0:aa:a8:80:25:94:ac:5b:8f:a3:bf:77:
94:6e:f1:63:3b:96:3b:0f:41:c0:88:d0:8f:96:fb:94:5b:95:
5b:ad:60:55:cf:12:85:bf:85:d0:66:00:03:29:f8:6b:dc:3d:
74:65:47:89:f3:11:03:70:7e:44:f1:16:ff:dd:ab:bd:15:55:
6d:e9:b0:f7:65:38:7e:e9:95:c8:ac:de:6f:0e:dd:8f:08:06:
ac:24:64:c8:7c:da:3d:72:69:b5:10:3d:a3:f9:04:13:6e:6b:
f4:6e:2a:5a:b3:7c:13:19:bd:52:55:31:2f:c7:a1:ad:16:6b:
fb:86:61:1b:af:bf:78:6b:27:b6:bf:a6:64:11:cb:44:c3:6b:
c7:c9:0e:70:36:b6:66:8c:1b:7b:95:51:2c:cb:3f:7f:b0:17:
fb:e7:aa:fb:dc:78:c5:32:63:e4:7e:88:65:d0:83:51:03:34:
99:96:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:37 2026 by rpki-client