
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json)
Hash identifier: 7zJrvyJyphXoPkEsBqWSLgACXWKt9dTp0Lh/z+UV9cY=
Subject key identifier: DD:F0:8C:81:B5:D2:2E:4B:CF:75:E3:32:5F:5E:2B:2F:93:8F:BA:51
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial: 0772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
Manifest number: 074B
Signing time: Sun 04 Oct 2026 22:04:54 +0000
Manifest this update: Sun 04 Oct 2026 22:04:53 +0000
Manifest next update: Sun 11 Oct 2026 22:04:53 +0000
Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: shFWMXMOwPzpCFPzxj4SI+m+iMEKm3eakErKjMlibHo=)
2: 68308CB6676A11F1A123F6DC8C47A888.roa (hash: rjnw9xhN4TOAHf+pOL+H3jcUSMEv/tbgJ/sLHrbBTj8=)
3: EEAAACE61BD311F1B0DCA9E21A3D8C67.roa (hash: EU9LbE/4rvb2T+HaPvE7PyoFd2uQJNQLGVcUmAgd3Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Validity
Not Before: Oct 4 22:04:53 2026 GMT
Not After : Oct 11 22:04:53 2026 GMT
Subject: CN=6ac2cd86-db48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:d6:89:04:fe:19:d6:9b:ce:d7:6b:d2:c7:
7a:7f:d8:da:a4:a4:7f:4f:46:0d:8d:0a:bd:3c:e1:
92:de:e3:af:7b:dc:94:30:53:a8:e4:dc:93:63:ca:
b4:3d:53:32:59:ea:d8:13:60:89:67:50:77:02:c4:
46:23:78:27:33:9d:ea:58:14:22:66:a5:a2:c6:96:
02:6b:77:2f:d1:9e:b5:ff:b3:29:d8:65:01:bb:38:
a9:b0:c6:3f:55:62:46:5c:76:db:e4:f1:e8:35:91:
f2:8a:60:aa:03:ae:71:82:d1:ba:9b:59:23:43:48:
b1:12:94:2f:8a:ea:18:e7:91:3e:80:8d:ec:9e:d3:
0a:a4:a5:54:5f:85:ec:ed:42:d2:8f:be:49:af:b7:
50:07:0c:87:a5:10:a5:c6:50:3f:f1:53:f3:40:aa:
c7:de:86:2b:31:2e:e3:73:44:8e:11:2e:ee:67:20:
12:99:8a:8d:c9:95:63:7d:30:0b:67:27:c7:a0:73:
9e:96:94:5d:22:b3:78:9e:49:98:19:1e:88:70:52:
3c:0a:da:86:d0:d3:44:1b:28:66:6b:ef:36:8f:39:
6e:6f:93:7c:e3:d9:83:05:07:cd:27:82:ff:44:20:
25:10:ba:f8:3b:10:9b:3b:30:93:fe:9a:f1:23:10:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:8C:81:B5:D2:2E:4B:CF:75:E3:32:5F:5E:2B:2F:93:8F:BA:51
X509v3 Authority Key Identifier:
keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:02:5e:fe:bd:9a:fa:89:ea:40:0c:83:99:ca:3f:ce:0b:72:
32:0e:1b:ac:f6:8a:dc:cb:5d:29:8d:25:0c:a8:22:af:1e:f0:
bd:84:1b:d2:37:cc:b3:b4:cd:37:e2:46:83:8c:cf:7e:96:b5:
da:f3:c0:f9:4f:10:26:13:d5:c5:8a:37:eb:eb:2f:ca:19:08:
11:14:cf:99:4d:2a:d1:a0:ee:b1:a1:09:3e:63:e6:50:32:7d:
4f:a0:f4:3a:e1:00:0d:36:5f:ed:eb:bd:77:fe:d1:53:db:51:
17:78:81:8d:52:a9:9e:44:c3:81:c8:78:0f:f6:32:56:c9:bd:
aa:e8:a6:3c:6e:9f:cd:79:9c:d4:40:11:63:c3:ae:09:e0:25:
42:57:28:28:d9:1c:e0:01:c5:cb:49:c5:e2:6a:7e:5f:b2:91:
1e:86:86:4d:c9:fa:52:b4:41:fa:d6:4d:41:95:e7:0c:d5:90:
03:ef:42:03:b2:60:4f:72:ec:1b:24:6e:33:96:be:78:52:8c:
ae:d5:dd:8d:46:73:18:1d:a5:c8:63:da:65:66:a1:83:a4:12:
5e:a0:12:06:d9:a3:e4:0f:cb:8a:a9:d7:a9:ac:74:93:8c:6f:
53:0c:2c:78:86:cb:63:38:6e:fd:c6:6a:34:ed:d0:a0:81:c2:
a7:6b:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:51:59 2026 by rpki-client