
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier: q6eAKVEq+BoWkMxn9QdA0wa+X+j7CHgyHPsQlXsUg4Y=
Subject key identifier: AD:23:6F:89:E6:BA:AF:C7:0F:A2:18:A5:45:89:7E:4B:80:83:32:DA
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number: 0180
Signing time: Mon 27 Jul 2026 06:24:24 +0000
Manifest this update: Mon 27 Jul 2026 06:24:23 +0000
Manifest next update: Mon 03 Aug 2026 06:24:23 +0000
Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: 9+mj3Z/PEtzjigjHQKMOzYEIO5h8w1IaONwei9oYHaU=)
2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: Luwtev83Zs6KUCyFMF7rPFNFdO+XLcijtYlkHDR9isU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Validity
Not Before: Jul 27 06:24:23 2026 GMT
Not After : Aug 3 06:24:23 2026 GMT
Subject: CN=6a66f998-d28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:9e:82:b7:d1:89:4e:9a:33:8c:57:c3:82:
66:ef:ba:d9:68:3c:4a:f8:44:9a:a9:29:ca:d1:7e:
45:47:de:b7:1e:a1:ec:9f:61:87:92:dc:5e:27:99:
aa:45:1f:dc:8f:41:20:bd:16:73:5e:8f:e5:de:83:
92:32:f8:b8:30:35:9e:11:41:d7:85:d8:ae:fb:ac:
b7:7b:2f:2e:66:33:13:56:31:31:8f:f9:7a:6b:a1:
dc:64:1a:f9:2b:b6:b5:03:1f:ef:8d:b4:27:e5:1e:
2b:95:db:42:bf:af:52:68:a6:50:84:15:ed:12:a8:
7a:48:41:69:45:a7:0f:d7:7e:3c:56:ef:60:98:d2:
e9:e0:30:cc:0b:06:89:8e:2b:53:f1:fc:80:d5:f6:
58:d7:db:e2:8f:8c:27:3b:5d:be:aa:b9:a4:d1:eb:
57:96:39:14:72:00:fc:7e:3b:73:4e:2f:dd:80:e3:
4b:ef:fe:74:03:36:7a:d3:e5:6b:4e:cf:81:ee:f6:
8c:b2:40:5c:6b:7a:0c:2b:5b:7f:1b:47:b9:3f:da:
2d:76:53:89:28:b6:71:1f:26:2d:14:60:04:52:c9:
ee:a5:5f:35:e8:11:c5:85:fd:46:29:63:87:84:4e:
7c:47:1b:07:15:b0:3d:59:cf:41:a2:87:96:14:1d:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:6F:89:E6:BA:AF:C7:0F:A2:18:A5:45:89:7E:4B:80:83:32:DA
X509v3 Authority Key Identifier:
keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:f7:a8:2c:57:b9:1d:a8:2a:7f:07:38:0f:37:7d:55:be:
d2:8c:2c:16:8a:a5:69:ec:e2:78:cf:3d:69:e2:d9:04:3c:0a:
7f:eb:80:0d:7d:8a:13:92:66:a8:f9:2b:f2:67:d6:50:22:30:
bc:7b:95:96:06:70:72:5a:c0:f8:08:ee:42:13:bc:81:e4:00:
71:34:e0:0f:f0:2e:f1:0e:bd:f8:99:33:ef:80:02:2f:97:64:
ee:e6:0e:5b:49:72:97:de:63:43:70:2f:a4:4e:5f:3f:16:d4:
37:7c:a6:3a:94:41:e9:15:df:62:a7:5d:28:af:4f:67:a5:9a:
ba:e3:73:a0:ae:1b:9e:c0:3f:3f:2a:b5:14:af:4c:8d:ff:f1:
99:7b:d9:a9:4a:5a:9a:ab:5e:aa:05:99:14:29:ac:43:95:6f:
5a:eb:fe:91:04:ef:0a:ee:74:2b:f9:35:48:b0:de:76:fc:3d:
02:50:49:30:f5:04:49:38:84:6f:cc:22:1f:17:e7:03:bb:a7:
6c:2f:f3:8a:26:db:09:06:65:4e:97:c8:14:0b:03:cf:38:8f:
6a:45:4c:49:96:19:5c:d3:58:50:ff:f1:bc:26:0f:38:2b:a6:
2b:02:bf:43:f8:88:e4:94:ea:4a:c8:bb:a6:74:36:b2:3a:cf:
b3:8d:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:48 2026 by rpki-client