
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json)
Hash identifier: 8CVZZLaBztEeXYA3TXPwuXNt3+d01g2t6ccCxDwSENo=
Subject key identifier: 99:B8:89:75:8B:F0:AA:A9:CC:28:C8:6A:4A:F8:CD:B1:6E:43:2F:3D
Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
Manifest number: D8
Signing time: Mon 27 Jul 2026 08:48:28 +0000
Manifest this update: Mon 27 Jul 2026 08:48:28 +0000
Manifest next update: Mon 03 Aug 2026 08:48:28 +0000
Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: JDPAPw+UZ3yVEZNQfMFUNcWAL7VjgsXoY1DQiWvjrr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75
Validity
Not Before: Jul 27 08:48:28 2026 GMT
Not After : Aug 3 08:48:28 2026 GMT
Subject: CN=6a671b5c-2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:ee:da:e3:0f:ac:15:1c:48:e9:82:56:2b:
0c:1d:a7:f1:39:ab:df:79:52:b2:38:c3:54:c0:2a:
b2:4e:48:d9:cf:86:ad:18:3c:e1:59:79:04:4a:35:
6f:44:02:18:96:a6:51:b5:a1:9c:5c:3e:c0:13:80:
61:f1:de:67:49:66:ee:d5:b2:25:02:92:fd:7b:49:
06:c7:0c:f7:d0:7b:ad:c7:b9:94:97:41:24:a6:bd:
38:48:8e:ab:cd:93:f9:46:92:ca:69:cf:05:04:50:
4f:97:f4:38:2d:50:fa:0a:10:91:f2:7a:e1:24:e9:
7b:4a:a7:a2:16:a4:2e:9b:51:5f:f2:37:87:eb:ae:
1e:db:50:56:32:c4:76:cf:be:90:12:d8:c2:9d:25:
e9:a6:e2:80:a0:a2:c2:24:78:91:fb:2e:a3:46:e9:
c1:30:cf:e6:4f:10:af:8c:40:35:e5:c8:20:c2:58:
50:9c:85:9f:07:3c:a8:10:a9:9b:72:b3:ac:b6:97:
a8:91:97:c4:4a:c5:80:45:32:18:94:f6:e8:d5:d9:
77:9d:0a:c3:e7:70:a4:5b:2d:56:9e:e1:8e:49:28:
23:cb:ef:2b:6f:be:9d:8d:a2:53:4b:9c:87:c6:20:
a7:6d:d5:b0:84:e5:95:81:6c:b3:3f:43:a7:80:23:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:89:75:8B:F0:AA:A9:CC:28:C8:6A:4A:F8:CD:B1:6E:43:2F:3D
X509v3 Authority Key Identifier:
keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:61:b2:e2:f0:78:f7:09:cc:f5:83:b4:7c:b2:e4:62:6e:62:
2b:f9:95:d1:b6:7f:69:86:35:85:ea:ca:43:3f:71:85:2d:9b:
9b:af:d5:9f:c6:5e:e1:fc:03:74:b7:0c:65:7f:32:27:aa:bc:
53:01:7a:9e:82:f6:d5:51:63:bb:00:06:6e:ab:62:14:1d:a1:
6c:18:79:de:09:1d:af:c6:ee:2b:fb:52:6b:53:0f:24:91:a0:
3e:de:80:54:17:55:07:34:56:8e:04:5c:c0:29:52:24:2a:cb:
6c:df:ac:ed:0a:17:fd:d7:2a:09:77:44:79:23:3d:33:61:07:
bb:b1:22:cd:0a:b5:10:c0:d4:4a:dc:c7:db:72:bc:8a:89:bc:
3d:a6:23:08:28:74:9c:d4:65:2c:41:ad:d3:38:6e:d8:77:c8:
7f:d7:2b:00:dd:1b:42:99:ee:bb:a8:7e:97:fa:d5:26:9e:c5:
07:b6:eb:53:59:a4:e9:0f:90:e7:e9:80:67:9b:b5:4f:d1:9b:
c8:a2:5b:ad:ad:ce:54:12:97:f9:d7:7c:17:ae:38:53:3c:52:
ac:d2:4d:2f:9c:35:8b:c7:a5:e4:69:f0:d6:de:4a:bd:91:46:
14:58:95:d1:0d:bd:9c:d8:1f:a8:be:99:85:b6:92:9c:a0:f5:
d2:23:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:52 2026 by rpki-client