
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: GFLWArc7g2sYZKJhiIkXyZEuWaYG+3sXP1ErjbEPmNE=
Subject key identifier: 80:C9:AE:C0:60:A1:65:7B:A4:FB:19:51:A3:4C:1E:73:05:17:8E:2E
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0D25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0D19
Signing time: Tue 28 Jul 2026 18:24:36 +0000
Manifest this update: Tue 28 Jul 2026 18:24:36 +0000
Manifest next update: Tue 04 Aug 2026 18:24:36 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: TMJVWeqcMPHP25q97oV9cFexLstkyJUaNeStsJks50I=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: b1VtTeZ3i3+p56WxtkqO9+Z/XK8otu366dEwvuMxQIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: Jul 28 18:24:36 2026 GMT
Not After : Aug 4 18:24:36 2026 GMT
Subject: CN=6a68f3e4-293c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:62:89:5d:a2:98:a8:45:63:2f:e5:75:81:
ef:b4:2d:0b:b6:65:71:a9:fa:88:1c:61:d7:1f:fc:
f2:9b:2f:ca:e8:b0:8e:cf:78:85:09:60:5f:4c:a6:
b2:5b:ce:83:4d:50:19:d3:ca:96:b5:34:9a:06:00:
1e:b6:89:35:48:51:7f:91:0d:44:2d:6b:db:af:54:
28:ef:9b:b7:ea:20:bc:ed:6f:82:90:12:af:6e:3a:
30:17:b1:f2:68:92:f1:e7:81:db:8d:85:65:4f:ff:
2d:13:92:c4:6b:83:d6:17:fc:4d:3e:6b:17:43:5c:
39:b3:32:d7:10:85:f3:7c:e5:6c:a3:64:3b:96:5c:
0a:4e:a1:12:49:d6:e8:58:cc:c1:36:b5:87:43:00:
a5:b3:56:7c:bc:c7:99:ef:be:85:4f:91:a1:cd:f4:
46:6e:96:ac:9f:e7:b3:06:46:26:93:d9:85:53:35:
ea:f4:38:87:e9:21:64:0c:86:dc:87:68:78:30:66:
5d:48:ea:89:a8:59:2a:ad:11:23:7a:88:c6:1e:74:
23:77:cb:ea:b0:19:15:c2:77:3a:0b:fe:f7:e6:c4:
bc:e4:63:aa:5d:11:ac:2a:67:22:83:16:e4:71:00:
fa:1f:08:bd:6f:5f:0d:fa:7f:55:b8:d9:04:3a:d2:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:AE:C0:60:A1:65:7B:A4:FB:19:51:A3:4C:1E:73:05:17:8E:2E
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:be:5c:99:70:a9:3f:0c:f4:a0:93:36:53:24:dc:43:ec:
91:2e:80:42:08:03:68:8e:71:89:ac:55:fc:4d:a8:dd:09:a8:
82:83:20:12:00:34:99:15:f6:c2:4d:81:54:8b:43:9b:45:69:
84:ce:8b:56:ed:eb:a0:5f:33:a5:ca:9f:fd:df:7d:c8:83:24:
b9:ce:60:dc:c8:ec:c3:04:55:74:5a:89:e5:5a:ae:41:92:ba:
d4:cc:e1:0e:38:70:49:d2:55:c8:3e:e4:38:bc:90:02:48:18:
97:60:d6:76:8b:2c:95:ef:89:b7:7c:96:e7:0c:4b:eb:de:2c:
d8:56:66:3f:76:be:69:45:2d:b5:e1:78:29:98:be:2c:4a:56:
48:9f:ec:28:a1:c5:cd:91:79:d7:e8:ee:44:c3:64:69:8f:ac:
4e:cc:f3:2a:be:62:c5:86:cf:51:ae:a3:fa:46:b0:e9:57:8f:
91:28:01:23:49:d9:8f:04:47:55:6e:d4:3b:8a:55:17:91:eb:
c1:9d:88:61:91:65:67:73:b0:d6:9a:45:3e:37:dd:9c:5f:16:
3d:3f:de:c4:41:71:80:44:84:2a:cb:ff:a7:ab:25:da:4b:89:
34:eb:e9:18:c5:e4:3f:01:c1:e0:7e:44:cb:78:38:ce:c6:aa:
5c:1d:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:10 2026 by rpki-client