
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json)
Hash identifier: OpR7YKos+uILQHhubgwpvIZvVHXk/0NVwMFu4v3Zx6E=
Subject key identifier: 1B:96:80:06:F8:8E:B7:EB:F6:F7:E2:40:A9:11:96:7C:4A:54:A9:B4
Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
Manifest number: 023A
Signing time: Mon 27 Jul 2026 04:11:12 +0000
Manifest this update: Mon 27 Jul 2026 04:11:11 +0000
Manifest next update: Mon 03 Aug 2026 04:11:11 +0000
Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: a0C5mIeZtkL3e990Ypp8EqHmDAMgTUuWGfiMF+x2/68=)
2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: F4bqm9WQs1g0ZI6Eys/rDBe4XBqJ0gtCIN4AXwG1g8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637
Validity
Not Before: Jul 27 04:11:11 2026 GMT
Not After : Aug 3 04:11:11 2026 GMT
Subject: CN=6a66da60-bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:d5:47:49:b3:95:19:f6:13:3f:53:24:2f:
0c:ef:64:48:56:7d:71:34:dd:87:f6:57:da:b3:b6:
78:b7:dc:e7:b3:af:e7:f1:f6:18:e8:82:17:24:89:
62:da:de:1e:73:3d:ec:cf:6b:49:e4:2e:2b:3e:d0:
a9:03:6f:12:c4:c0:9d:90:4d:31:a0:66:ad:19:51:
48:2b:f4:e0:d2:8e:62:38:3b:ef:0e:11:62:d7:2f:
b4:d2:5a:1b:16:ce:53:01:33:c1:cd:dc:6c:aa:59:
f4:1e:7e:85:dc:54:63:58:50:9f:bd:56:10:39:f3:
87:5b:63:8d:14:fb:d5:d1:b7:22:ee:31:61:00:49:
8a:9a:d6:73:d1:a1:f9:c5:66:a6:40:4b:b2:32:84:
5b:43:a0:d1:83:0e:1f:d5:21:e9:f3:98:62:5b:f2:
2e:72:3b:ca:2d:78:e4:3e:54:df:ae:fa:20:bf:80:
0a:38:a5:25:8e:4e:dc:3a:9f:e9:02:f6:22:60:c5:
e6:af:e5:1a:e8:ec:b7:1a:80:02:0c:de:fa:5b:4d:
f1:01:1e:c9:87:30:99:2b:0a:64:d7:99:cb:92:98:
d9:32:53:16:3d:90:dd:76:76:1f:3a:37:bf:67:0f:
b4:d0:fa:f2:49:53:9b:f6:a6:41:d9:9f:9c:85:1b:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:80:06:F8:8E:B7:EB:F6:F7:E2:40:A9:11:96:7C:4A:54:A9:B4
X509v3 Authority Key Identifier:
keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c1:98:9a:2d:c8:88:a5:9e:ef:2a:39:86:a4:ad:ab:86:8b:
1d:26:e7:55:fc:43:f8:82:f6:71:8c:52:20:23:63:59:0b:55:
d4:b2:0c:31:e7:30:be:07:26:a9:4c:d1:cb:16:da:00:7f:2e:
4c:8c:a0:b4:ca:74:bb:3f:32:2c:a1:fd:8c:c8:f8:78:e8:34:
7c:c7:bf:bf:12:b7:79:c6:92:56:f3:fb:d3:34:99:c1:d9:68:
06:c3:fb:b4:ee:81:e2:33:bf:51:4a:fa:5c:54:ca:6b:9f:84:
27:e4:4d:bd:fe:0c:ba:14:84:31:e9:d4:0d:75:bd:c8:2b:88:
05:98:b8:d1:cc:0f:1d:21:ce:b3:0e:e5:0d:cd:c9:c9:5e:1b:
46:5c:aa:79:1d:3f:8c:63:7b:e3:38:da:68:b6:90:ce:91:47:
fc:48:68:a6:1d:3c:59:90:4c:0f:15:2e:f8:ac:5e:1e:f6:2f:
04:e2:0a:70:1f:e0:28:87:e8:99:d8:3c:b2:d0:11:6e:4f:a6:
f1:6b:3e:7f:e1:5d:1c:5c:9e:40:79:15:a8:bd:83:0c:9d:46:
68:60:1d:83:07:08:98:31:67:75:62:4a:5c:55:e7:e4:5b:88:
b8:0e:84:6f:b9:f0:63:ec:b3:29:dc:11:e5:14:7c:20:cf:13:
79:67:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:26 2026 by rpki-client