
$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
File: dqSXJWH75So6Zwt4JFETuDvo2AY.mft (raw, json)
Hash identifier: w1x4/yo+Xu2Ka+Dl52UlVKvLE+xuTj67QRae8YSxWz4=
Subject key identifier: 82:38:31:DC:5F:44:B4:C9:74:F9:F3:5D:DC:E6:B4:27:F0:18:7A:CC
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Certificate issuer: /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
Manifest number: 2C
Signing time: Thu 23 Jul 2026 10:48:47 +0000
Manifest this update: Thu 23 Jul 2026 10:48:47 +0000
Manifest next update: Thu 30 Jul 2026 10:48:47 +0000
Files and hashes: 1: dqSXJWH75So6Zwt4JFETuDvo2AY.crl (hash: lr0Vk+xGwjg6g1X5ulvA+7w2ciX13zpryCRRvg8gWcI=)
2: CAB4E520455111F1948CBD49A9833773.roa (hash: YgzxIambRazcLPo5M/vTIgat079etY7a7Ji9ovX3ixs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Validity
Not Before: Jul 23 10:48:47 2026 GMT
Not After : Jul 30 10:48:47 2026 GMT
Subject: CN=6a61f18f-9944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:c5:e3:3a:c0:39:c6:78:98:c3:ad:d3:b0:
1c:7d:79:73:67:03:1d:f6:39:c5:73:25:de:ec:12:
96:6f:5c:07:e1:cb:be:60:ae:e1:a1:a9:97:17:87:
4c:76:0f:21:8d:d5:36:e1:4e:8b:32:76:50:12:f5:
17:32:c8:a2:97:89:ed:b9:fb:ef:3d:c4:52:2d:93:
c6:18:f6:ff:32:b0:0f:58:60:98:3c:64:45:7e:07:
7a:09:f4:cc:1a:f3:b7:76:f3:35:f3:dd:74:1a:88:
f9:5f:fe:5d:cf:46:f5:0f:21:8b:cf:78:96:72:e1:
2c:76:30:7e:e0:44:fc:79:b0:4b:69:e9:a2:81:5b:
5d:b0:c8:fc:aa:36:cd:32:29:77:79:2d:b4:45:8c:
68:0a:39:dd:8e:ef:94:4a:3b:c0:19:f9:b2:99:ab:
92:7b:7d:35:68:91:47:df:48:23:4e:d2:b8:bf:a6:
bb:65:d3:64:89:5b:95:c9:79:1d:65:41:ac:30:e8:
14:bb:f2:e6:3c:10:57:1e:4e:d7:43:cc:71:73:5f:
d3:ef:11:44:c2:b0:13:ae:d6:3b:b9:46:6e:13:8a:
fa:21:41:24:09:16:3e:de:86:13:cf:d7:3b:fa:37:
44:b9:e4:cf:d5:e3:c2:82:05:ca:89:74:05:67:f4:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:31:DC:5F:44:B4:C9:74:F9:F3:5D:DC:E6:B4:27:F0:18:7A:CC
X509v3 Authority Key Identifier:
keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c0:c2:11:05:5f:50:70:36:3b:b7:71:33:61:fd:0f:68:62:
75:04:23:43:b2:72:8f:c5:1a:11:ea:7f:42:bc:60:ed:c1:18:
88:8a:54:78:6f:78:57:e3:47:bc:dc:98:fa:df:74:de:f6:c5:
05:21:01:fc:7b:72:9d:f1:5f:a3:9e:32:55:df:84:c6:95:22:
47:af:ff:ad:73:95:6c:7a:98:11:a2:f1:40:6c:a7:f9:e4:f4:
4c:22:24:dc:21:81:01:f5:7c:ea:9d:44:07:56:06:3f:01:de:
c0:87:3e:18:6a:80:f5:bb:8f:c8:0f:54:09:5c:ba:d0:04:a1:
8b:ee:14:49:70:22:ee:fa:97:b7:b4:5f:f5:27:c3:1b:d0:9a:
82:35:d5:ab:cd:f2:50:d3:45:ae:a5:60:0e:3f:85:cc:12:3a:
e5:55:fa:07:e6:00:75:50:02:77:7d:71:a7:5a:68:1f:69:30:
e2:b9:74:6a:ee:20:c9:0a:cf:bd:28:6c:af:cc:e5:15:b7:31:
70:d5:6c:b4:19:41:49:db:15:dc:c8:7a:e7:63:7b:39:a1:85:
6d:67:36:e0:31:25:8c:69:43:35:95:d2:3f:da:d6:f5:0e:82:
fe:f3:9f:b0:61:ad:eb:d6:1f:6b:42:74:a2:fa:71:b4:f3:2d:
7f:7b:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:24 2026 by rpki-client