
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
File: fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft (raw, json)
Hash identifier: zgimyxsy/xFQPNhfze9j6r1CdFK9tfJBEOl2KQT29dI=
Subject key identifier: D3:15:3F:48:3A:7E:59:A5:7D:9A:C0:8F:9F:E1:B4:DF:31:99:C4:FD
Authority key identifier: 7C:5E:55:B6:AC:CE:54:26:90:4D:16:3C:2F:04:5C:26:9A:14:A8:FC
Certificate issuer: /CN=A91FB95D/serialNumber=7C5E55B6ACCE5426904D163C2F045C269A14A8FC
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
Manifest number: 20
Signing time: Mon 27 Jul 2026 11:15:43 +0000
Manifest this update: Mon 27 Jul 2026 11:15:43 +0000
Manifest next update: Mon 03 Aug 2026 11:15:43 +0000
Files and hashes: 1: fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl (hash: 7pU4HCFxjyTRjXrmsBPut6zCat1YQ5eq0HNWou/u4+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl
rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB95D, serialNumber=7C5E55B6ACCE5426904D163C2F045C269A14A8FC
Validity
Not Before: Jul 27 11:15:43 2026 GMT
Not After : Aug 3 11:15:43 2026 GMT
Subject: CN=6a673ddf-f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:2a:d1:cd:3f:2a:0b:cf:a0:fb:1f:e3:6b:
38:de:ea:a2:ac:ce:6d:16:33:50:3f:7b:90:80:57:
05:d2:f7:17:0e:26:6f:bf:04:26:01:cf:da:ab:aa:
36:a5:ff:d3:3c:7a:7d:af:ac:4b:40:c2:f5:c4:ee:
4b:06:60:13:60:f6:4b:58:d5:81:f7:39:2c:8f:8f:
4d:52:96:20:b1:8a:60:e9:31:47:9c:03:02:13:a4:
60:c6:5e:04:aa:44:6e:aa:ac:e8:fe:8b:f3:aa:ec:
c1:aa:57:c9:ae:a5:02:01:b1:d2:3f:8b:74:4a:b1:
40:31:6d:cf:ee:0c:1b:48:75:af:a7:d8:7b:06:56:
05:e3:e8:ed:e7:bb:3b:4e:b0:2f:89:35:f4:6d:a8:
03:3f:fd:48:6f:08:02:e5:94:f9:30:81:f3:36:b7:
b9:c5:bc:31:ca:3d:b6:3f:3e:c3:84:bd:ed:63:4c:
fa:d2:46:bf:30:08:ae:26:77:a0:be:67:7e:d1:04:
0a:cb:5b:b5:51:44:58:7c:38:7d:73:73:6a:64:c1:
f2:cf:6c:f0:37:53:f9:54:b0:ef:29:d6:5b:07:72:
05:b0:64:a1:c2:60:e6:23:b4:6d:fb:88:3e:22:aa:
95:9e:ce:ff:e3:97:3a:42:97:53:03:5c:b2:2b:6c:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:3F:48:3A:7E:59:A5:7D:9A:C0:8F:9F:E1:B4:DF:31:99:C4:FD
X509v3 Authority Key Identifier:
keyid:7C:5E:55:B6:AC:CE:54:26:90:4D:16:3C:2F:04:5C:26:9A:14:A8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF5VtqzOVCaQTRY8LwRcJpoUqPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/94E350C057EA11F1B6A8C17A93833773/fF5VtqzOVCaQTRY8LwRcJpoUqPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:d5:7d:28:bd:04:8d:dd:71:f4:9d:06:02:26:1c:20:4e:
b1:2c:0e:a6:91:9b:42:9b:63:29:46:31:96:fb:29:7d:a0:9f:
d6:09:c4:da:c5:0e:95:f7:93:09:11:e9:60:f9:a5:81:1d:20:
59:54:a9:8e:98:7b:92:c0:09:c7:1d:81:f3:32:9a:67:01:0d:
ac:36:41:c0:41:57:22:91:c0:b3:91:da:42:6b:92:9c:d8:3c:
ad:46:ec:f9:aa:21:57:2e:86:8d:49:9d:6d:ee:2f:10:93:74:
22:52:5a:34:21:2a:5f:46:f9:66:18:ac:4a:d6:fa:06:22:90:
f8:f5:c7:65:40:c1:04:b4:e7:2a:9c:d2:1d:2b:33:e6:42:18:
22:fb:e5:a4:b4:24:8b:80:a6:c0:33:36:95:a4:b3:29:ef:73:
2a:2b:73:94:97:88:e2:87:2a:5e:49:9d:61:e1:f6:9f:b7:c8:
cd:c9:00:c9:40:97:8b:88:15:ae:09:4e:f1:20:ee:50:66:5d:
a7:bf:fb:1e:e2:27:3e:cd:ab:82:13:d4:58:e5:8f:87:77:9d:
a4:14:06:e3:43:d8:28:cc:a1:27:bf:0b:d6:b6:8c:5e:af:37:
2e:69:77:55:bc:ae:28:7c:78:e8:08:95:b5:a0:6e:43:6a:60:
3e:78:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:33:14 2026 by rpki-client