
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json)
Hash identifier: ce/u3dsBTtakZ+hFU3IlrQfniBe6AJ3Fygi6m8o1d3I=
Subject key identifier: 01:72:E8:B1:34:F8:B2:DF:6F:B0:64:CC:55:E9:29:3B:E7:6D:A7:28
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
Manifest number: E1
Signing time: Mon 27 Jul 2026 08:36:46 +0000
Manifest this update: Mon 27 Jul 2026 08:36:45 +0000
Manifest next update: Mon 03 Aug 2026 08:36:45 +0000
Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: A24cZ/PQabC4cxzf5gomeoE0tZZKPyHBxMMpyFfAU1A=)
2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: FmGUR6A6isQJ9L9hlLM0YUZF7F/y7z9ZOrSFMldkQ/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Validity
Not Before: Jul 27 08:36:45 2026 GMT
Not After : Aug 3 08:36:45 2026 GMT
Subject: CN=6a67189e-41b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:58:09:32:c3:c0:68:b3:e0:db:ea:11:99:
e7:bf:30:09:72:5b:06:f8:19:fb:a6:6d:66:d1:64:
c6:03:c4:56:5c:06:76:dd:1c:be:41:5f:47:f4:42:
ed:58:66:25:a5:a6:ec:29:40:49:2c:d5:ab:7f:22:
5e:71:d5:04:bb:62:c8:c5:9e:a8:1c:7c:7b:84:e5:
f3:59:3d:26:72:23:1a:97:56:1a:32:55:80:c7:22:
02:34:ab:35:c4:cd:61:9f:30:aa:cb:cc:e5:62:17:
f4:11:f5:92:d1:52:93:5f:6b:08:fc:ab:06:6c:d8:
5c:dd:d4:7b:34:cf:a3:ed:92:46:b7:b9:04:b5:ca:
ba:4d:49:ac:89:f0:de:0f:b8:28:28:64:5b:7a:b9:
b2:5f:38:d8:ff:80:b8:2d:a8:9b:f7:cd:b9:fb:09:
b7:e2:aa:c2:b4:d9:fd:8f:45:31:ae:2d:53:14:4f:
68:5d:2c:c7:f0:7a:a7:70:3a:fe:f1:41:62:20:8f:
ca:6e:bb:79:da:28:64:65:fb:4b:34:eb:fb:f3:51:
4e:65:0c:dd:78:b4:3e:75:bd:47:0f:a8:20:6c:1a:
33:4c:a3:d1:d6:a9:88:ba:d5:38:3b:ea:67:86:4a:
40:e8:96:63:5f:96:c1:36:15:e7:ae:30:df:32:83:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:E8:B1:34:F8:B2:DF:6F:B0:64:CC:55:E9:29:3B:E7:6D:A7:28
X509v3 Authority Key Identifier:
keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:40:74:ad:02:c5:e8:f5:e5:59:f4:b2:23:11:0d:0e:58:
65:56:97:2e:1e:99:5f:49:66:20:82:74:dc:0f:78:30:9f:d3:
45:70:a0:1b:28:5c:31:4e:92:8c:d8:87:c2:ef:14:98:58:38:
d4:32:51:25:93:a7:86:a4:6c:a4:30:63:55:c0:74:47:a0:31:
20:84:a9:28:64:10:5e:92:5a:8c:da:c2:2d:f2:1b:a9:a5:31:
95:f7:d9:e6:53:70:3e:db:60:8d:8b:df:cf:d4:ee:97:3a:72:
03:fa:62:3e:72:2e:78:85:81:b2:ab:6c:8a:42:16:24:be:26:
15:b8:4c:52:c6:e6:30:05:16:fa:10:ad:e8:0a:30:ff:f7:7e:
00:01:a9:a1:7f:0e:8c:31:7c:a2:9f:72:d6:c5:69:4b:41:86:
48:e7:13:22:74:3e:97:32:38:a9:8a:9c:78:b9:70:12:7d:35:
71:65:b9:7f:5b:c0:a4:05:22:20:b9:a2:dc:8e:a5:10:a5:70:
ea:e2:cc:bc:6b:b2:31:c6:97:7b:d3:b2:9d:45:11:95:9d:00:
f2:68:5a:a9:6f:e2:b5:db:44:ef:18:5c:5c:d1:58:0e:d3:09:
cb:db:ff:b8:01:83:02:9d:1d:0d:97:2d:fb:3c:84:cc:28:1d:
5a:49:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:10 2026 by rpki-client