
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: O9uzarj7QTrN562G8DmLfKFNZTZqFjPYHCaGgZ1Upa0=
Subject key identifier: EA:F7:DB:57:5B:03:BE:C2:86:2C:0E:9D:82:65:E4:42:E2:63:90:DC
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 04E9
Signing time: Thu 23 Jul 2026 00:35:09 +0000
Manifest this update: Thu 23 Jul 2026 00:35:08 +0000
Manifest next update: Thu 30 Jul 2026 00:35:08 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: Ow+XMyBL8W7VQHBB+jEkqpz/rBJzbwMoyfTUrEPdza4=)
2: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
3: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
4: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
5: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
6: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Jul 23 00:35:08 2026 GMT
Not After : Jul 30 00:35:08 2026 GMT
Subject: CN=6a6161bd-6ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:e9:dd:f0:40:04:b0:67:1d:b9:b5:41:28:
8a:f0:d1:53:a7:43:be:e5:ad:92:f3:1d:d5:b4:9c:
8b:eb:80:20:ce:ba:58:44:7a:42:37:3e:cb:04:84:
ba:17:2c:bc:e7:c4:2c:66:55:5b:d3:a2:98:f4:f4:
23:d7:4b:d5:5d:29:75:8b:bc:c3:21:12:8a:41:95:
2e:76:db:94:00:76:ae:a0:c6:44:76:58:42:59:6e:
7f:2e:55:12:e1:f9:fa:c7:b6:36:ef:be:06:b5:0e:
1b:56:f3:20:4e:75:6e:05:1f:04:e0:9d:b7:f1:e2:
44:79:fe:ed:17:65:41:30:43:50:2d:24:17:d4:cd:
e3:a7:b2:46:92:6a:48:1b:43:15:86:56:11:3a:77:
e6:19:6b:e7:ee:16:c8:85:33:23:ce:59:58:ab:73:
e8:b4:eb:36:e4:d1:6e:c1:d0:5e:e9:5b:50:4a:05:
3e:be:43:76:c5:40:2e:f6:ba:12:40:3d:5c:eb:02:
73:96:2e:f2:28:4b:c2:22:bd:28:32:23:84:8d:89:
03:a5:6a:71:73:48:99:0e:64:f7:77:75:1f:2f:7f:
fd:73:69:e8:3c:4c:48:32:18:9b:ff:82:66:40:5a:
7b:14:a1:24:af:68:f7:22:e8:1a:5f:05:81:5d:37:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:DB:57:5B:03:BE:C2:86:2C:0E:9D:82:65:E4:42:E2:63:90:DC
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:58:24:19:bf:6a:3e:ab:bb:5a:a1:e6:12:10:62:09:71:2b:
48:f8:2a:d0:72:01:99:f1:f7:07:de:9d:d8:0f:c6:68:42:ab:
80:15:84:45:b8:40:6a:78:f2:f0:c1:f7:80:e5:fd:c5:a5:ae:
3e:df:3e:a4:1e:d6:9a:93:7e:19:1d:ed:4b:d2:1d:e3:c7:80:
26:a1:0d:64:19:1a:11:6e:20:4c:33:af:bf:2a:43:a0:85:94:
24:53:d5:24:0f:c8:c3:59:1b:a0:3d:6f:0f:16:12:64:00:c1:
cc:68:bf:48:4a:0b:ab:6c:56:3a:89:86:cc:dc:af:a1:f6:9d:
63:ca:e7:0e:b9:ac:b3:a7:c4:bc:8c:21:ff:fc:55:24:7c:5c:
21:cf:8f:0d:75:78:f5:b1:3e:21:74:ab:6c:e2:04:84:9a:7d:
8e:a3:3a:80:fa:bd:26:a8:19:b5:8d:1c:ec:f1:d3:da:cb:d3:
17:22:ab:07:41:da:fe:43:7f:8c:ce:93:2f:94:ea:7d:7d:66:
9d:dc:3f:ac:99:e8:66:f9:98:24:8f:28:4c:51:93:aa:44:bb:
e4:a9:87:07:34:98:7a:8c:7a:e4:01:2a:ab:2d:aa:ad:42:d1:
f2:2d:23:b5:57:e9:ff:43:0d:0b:e1:f8:a5:b1:84:fa:96:89:
dd:0b:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:55:51 2026 by rpki-client