
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json)
Hash identifier: ZF1wWKAufuNQhNuDQhsGGO6lnDqck6HQE7JJ2XbrJLs=
Subject key identifier: 0D:E5:A1:4B:C6:63:7C:FC:84:C1:73:06:57:3F:15:59:23:C4:BA:2F
Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
Manifest number: 036B
Signing time: Mon 27 Jul 2026 01:59:02 +0000
Manifest this update: Mon 27 Jul 2026 01:59:02 +0000
Manifest next update: Mon 03 Aug 2026 01:59:02 +0000
Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: ib1HTQJ1ysT/yEftdz8g54lAu8jqy5PZ8LxX5bh46E0=)
2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: R9jdVpy+qpEyzogbluazuQ5kKtc3aY56mxNQcSBuCZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Validity
Not Before: Jul 27 01:59:02 2026 GMT
Not After : Aug 3 01:59:02 2026 GMT
Subject: CN=6a66bb66-4462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:ab:fb:37:ca:8c:8b:20:05:34:c7:1f:50:
85:a3:91:dc:30:90:4a:e5:f5:e8:9d:01:b7:9f:4d:
d1:7b:57:57:00:78:12:59:2d:05:cb:c5:80:2a:da:
72:d8:47:1e:2a:03:9c:38:f6:ce:37:ce:c7:bb:ad:
ff:5b:70:1f:f8:37:f0:fb:7f:53:97:d0:92:c8:9d:
e6:c6:fc:e2:30:31:de:d2:c3:7c:5c:04:6f:4e:15:
c6:91:96:9b:72:87:b0:fa:ee:f9:7b:ee:a3:0f:fd:
62:79:7f:2d:a6:92:d9:b1:30:3f:14:b7:c3:59:31:
b2:82:92:2c:8c:39:d8:33:00:ec:8e:14:27:84:5a:
84:47:c6:72:02:92:4a:3c:8a:02:22:fe:43:46:af:
5e:3c:e1:f0:06:62:2c:d2:57:e7:47:a1:6b:86:85:
14:4a:25:a8:ec:5f:ba:00:ca:98:c9:8b:da:5b:de:
fc:06:19:94:db:f0:f0:eb:75:2b:91:76:9e:55:f6:
f6:9a:58:81:24:ca:0e:51:1f:c3:91:8b:91:b2:96:
18:57:5a:fb:d4:13:72:22:2f:86:cf:c4:3d:3a:df:
3e:ad:4e:3d:a5:31:36:23:20:5f:83:25:42:af:fe:
67:3b:97:5c:92:e4:1b:7d:fb:02:3b:85:46:e6:a9:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:A1:4B:C6:63:7C:FC:84:C1:73:06:57:3F:15:59:23:C4:BA:2F
X509v3 Authority Key Identifier:
keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:e4:53:b5:bf:15:90:80:93:86:98:ac:2b:46:0d:7b:f6:
a5:54:25:4e:b6:ca:3c:e8:e3:4a:4e:34:99:f5:8e:9a:1f:73:
2e:d9:aa:3a:e8:38:bb:1d:35:1e:5f:3b:c2:d4:1a:af:a1:47:
13:b4:49:b0:de:dc:0f:77:b2:5f:3a:32:02:de:8f:8d:31:21:
bb:d4:56:c7:34:cf:3c:c2:b2:70:be:f2:02:cd:88:f0:93:32:
1c:40:38:f4:f3:39:7d:94:c4:1b:15:cb:7b:97:b0:db:55:ec:
ac:82:f0:a4:f3:44:d0:da:38:f0:13:b6:d3:50:cb:d3:1e:29:
7c:f2:4f:94:7f:a6:34:20:ae:b4:96:3a:04:ef:11:17:96:6d:
44:77:ed:47:fb:05:3e:37:ff:cd:2a:98:c7:a9:45:09:18:1a:
43:9f:0c:1f:fa:9d:a9:c7:9e:48:d6:72:6d:59:e3:9d:d4:f7:
f0:a9:07:01:a6:2b:3d:42:ec:5f:29:8f:00:aa:95:35:c9:02:
5d:b3:7d:71:71:e9:fe:88:3d:64:69:2b:b7:67:2a:6a:48:2b:
34:96:93:e9:1f:6d:2e:f8:e0:13:3c:56:4e:5f:aa:e9:7e:31:
e8:c8:02:98:14:4c:8c:83:79:27:72:a7:39:41:e4:86:2a:0d:
fb:5b:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:44 2026 by rpki-client