
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier: Vma508wxYqsiIG+bPg1q3b3oAiRMh/1vpnbmdRbgz+4=
Subject key identifier: BB:BE:E1:AC:32:0A:A4:37:C9:CE:41:B4:7E:A2:F0:0D:83:97:22:ED
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number: 019C
Signing time: Wed 29 Jul 2026 05:30:33 +0000
Manifest this update: Wed 29 Jul 2026 05:30:32 +0000
Manifest next update: Wed 05 Aug 2026 05:30:32 +0000
Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: OsIarpTFg1YPWKO2QEg8yFMk3UwLcZ/TADh01jykHC4=)
2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=)
3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: Jul 29 05:30:32 2026 GMT
Not After : Aug 5 05:30:32 2026 GMT
Subject: CN=6a698ff8-2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:fe:b0:3c:3d:cc:cf:a5:7d:2e:70:14:90:
69:ef:5d:b7:ea:a0:d9:2c:9e:60:39:44:60:11:d5:
f6:a0:db:4a:a1:3b:0f:05:da:7b:9a:cf:18:90:1a:
dd:83:4b:96:f3:7a:82:b3:02:aa:71:b1:df:7a:ec:
06:7d:53:c8:b3:13:22:9c:0e:76:9f:1b:1b:1c:70:
ca:54:fa:77:48:47:1c:cf:60:ff:ee:59:6a:ab:15:
dc:63:ae:0e:ab:34:a6:37:40:a7:3c:4b:be:fb:b4:
62:97:45:3c:3b:41:73:f8:5e:af:6b:b4:39:97:2d:
af:a4:dc:88:40:6e:fa:84:39:7e:12:fb:85:82:f8:
36:6e:13:ed:1e:70:3b:f8:cc:15:ed:fd:8f:49:32:
07:7e:23:99:9a:87:0a:a1:4e:66:85:db:8d:b2:44:
a9:75:78:e7:19:45:62:3b:33:27:be:64:96:c9:3c:
c7:99:9f:ef:09:91:98:be:10:c1:91:ee:a2:fc:22:
ae:1a:17:52:66:38:ed:83:e3:15:4a:00:61:c8:eb:
b7:1c:1a:56:37:6e:5d:6e:e3:d2:cd:8c:ee:1c:fd:
f1:2b:3c:90:05:88:02:68:e0:67:98:81:4c:bd:84:
c5:2b:0a:98:5c:b6:76:dc:3d:e8:e9:fc:24:ca:94:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:E1:AC:32:0A:A4:37:C9:CE:41:B4:7E:A2:F0:0D:83:97:22:ED
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:05:1b:ac:de:62:68:24:3d:35:b6:10:60:ca:3d:8f:03:66:
5e:da:c8:3f:74:c9:24:41:5a:bf:71:40:73:ec:e7:57:ec:8d:
fb:21:1e:04:9d:98:5f:d4:ba:65:4c:d6:94:48:6a:2e:2a:5b:
2a:92:22:c3:d2:b4:94:16:86:28:6a:7a:24:44:8a:bc:dd:5f:
65:6f:a0:2b:65:15:d4:1f:37:e2:4b:96:2c:7f:8c:da:c6:3b:
2e:4f:a4:7f:7f:30:25:fb:ec:f0:e6:76:30:3e:a9:7b:37:fd:
f7:61:6b:50:00:44:98:40:ba:b9:2d:ab:84:cd:3b:d9:84:b5:
13:e7:69:77:9e:19:a6:b8:04:de:1f:67:40:ec:fb:96:63:1e:
00:4e:d4:03:ae:8b:69:49:b1:88:60:ec:44:43:67:2a:f4:06:
6c:a8:11:08:6f:87:15:d1:7a:d0:de:32:e7:1e:82:40:85:c7:
aa:1c:9e:56:87:ee:97:b3:00:4a:d6:a8:1a:62:18:24:e9:07:
78:b0:1a:c8:9e:55:a3:a8:90:44:16:72:86:ce:30:44:f2:d3:
5f:94:dc:d1:bd:dd:0c:70:7f:4f:37:fe:64:c5:ad:ca:5d:ca:
6c:cf:52:58:06:39:e5:28:f9:73:08:10:cc:af:c9:3d:d0:41:
83:87:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:49 2026 by rpki-client