
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: XXg3Lq8PBXH3ImI41XXGc0Mj4wRKpi4WjN2yEa26hTU=
Subject key identifier: 4D:3F:45:38:2C:50:92:6E:9D:ED:5D:E0:4A:4A:59:53:4B:8E:C1:3B
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 07BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 07B1
Signing time: Tue 28 Jul 2026 21:55:48 +0000
Manifest this update: Tue 28 Jul 2026 21:55:47 +0000
Manifest next update: Tue 04 Aug 2026 21:55:47 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: mEC6ad7Kal4cWIi8FMrx9OBPThuq7gFVLL6EcnpsfSw=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Jul 28 21:55:47 2026 GMT
Not After : Aug 4 21:55:47 2026 GMT
Subject: CN=6a692563-dd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:3b:bd:1d:e9:97:70:fa:1b:66:dc:7c:6a:
47:73:14:63:52:96:c4:07:e3:fc:aa:c5:bf:9c:76:
be:15:c6:92:71:32:86:b4:74:04:3f:52:5a:ac:12:
bc:44:b8:ca:c5:46:b8:8c:06:6a:4d:a9:ce:35:1c:
14:00:b5:12:79:a9:c3:0a:65:e9:7b:3b:5d:66:6e:
4c:8c:ef:30:07:83:8d:11:7c:04:a8:98:ae:6f:4a:
5e:c6:12:df:07:22:27:77:96:e8:24:3d:fd:e1:5a:
03:3a:01:09:34:1a:35:d5:aa:e3:8a:55:77:b0:dd:
e0:fd:dc:d4:71:eb:65:57:02:2b:b3:44:03:4c:39:
f3:14:7a:b2:f1:37:f1:39:28:fc:17:6b:18:7e:6f:
9c:40:fd:ba:50:4f:79:2f:c6:ff:0f:c3:ae:ea:ff:
2c:46:7a:1e:bf:09:ec:cd:52:30:47:e0:05:e2:a2:
a1:10:59:d9:e9:26:b7:99:31:cb:6f:18:ba:c5:31:
07:00:a8:c6:bb:fe:da:69:09:d8:48:a1:76:4b:cb:
37:bf:fb:ec:01:4d:6d:a3:cc:c6:fa:02:bc:d0:2f:
63:fa:80:b7:ad:75:08:ef:97:b8:66:6b:46:0d:7c:
16:02:15:4d:9f:0f:7f:08:82:df:d2:6b:ba:69:b1:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:45:38:2C:50:92:6E:9D:ED:5D:E0:4A:4A:59:53:4B:8E:C1:3B
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:48:fb:dd:7d:04:93:00:ae:c6:37:d3:04:cb:a0:b4:b7:
2a:f1:5c:ef:1f:d7:c7:51:05:d7:14:59:fd:9e:d6:92:7c:3f:
a4:c3:e3:b9:e4:d1:3b:1f:6f:b7:c5:64:5d:09:8b:c8:75:42:
7e:cb:46:40:0f:53:95:6d:00:67:b8:2d:d0:3b:15:b9:e7:bf:
e5:6d:59:cf:b0:91:01:f2:be:a6:94:96:1d:5b:bc:3b:70:7c:
7a:5b:9d:fd:d8:ef:aa:cf:cf:40:65:77:4b:ba:30:cd:7e:c7:
d5:f9:39:89:35:f2:d7:b4:6f:60:21:90:c2:b7:e6:02:c3:0d:
bb:8c:90:c8:78:9d:73:50:10:b2:6d:51:c7:61:b8:a0:54:42:
6f:46:3e:9e:32:b4:cf:f1:d9:fd:37:c8:a6:bf:d5:d4:ee:de:
44:0a:35:9b:c0:06:29:d1:e5:eb:96:b4:af:2a:95:36:bf:43:
89:3e:46:53:3b:da:31:f9:89:04:1e:4c:ee:c6:d6:51:57:35:
ae:9e:c0:26:e4:7c:20:56:89:13:fe:d7:8a:76:3b:53:8a:81:
6a:4f:1c:4f:03:5a:e0:91:94:69:19:5e:d5:67:3c:37:e7:06:
d9:00:e7:65:ec:00:77:4f:86:4a:1e:b8:47:18:58:22:dc:b0:
12:29:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:37 2026 by rpki-client