
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json)
Hash identifier: PoP6N9KRZwO+qHcBnm3nkhf10SEdBNELjmYuo5DThWg=
Subject key identifier: 02:4A:AB:73:2E:B9:8D:51:B2:B5:E0:B0:1F:DE:DD:BF:52:E7:14:7D
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
Manifest number: 02B6
Signing time: Thu 23 Jul 2026 02:44:56 +0000
Manifest this update: Thu 23 Jul 2026 02:44:55 +0000
Manifest next update: Thu 30 Jul 2026 02:44:55 +0000
Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: der4cDCxuusDgmA1vpbRx/SInNa0vz3gvRQEajSuraM=)
2: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=)
3: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=)
4: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=)
5: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=)
6: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=)
7: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=)
8: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Validity
Not Before: Jul 23 02:44:55 2026 GMT
Not After : Jul 30 02:44:55 2026 GMT
Subject: CN=6a618028-9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:d3:0e:6b:80:52:95:63:28:9d:54:0b:15:
e5:91:93:ab:56:59:e8:b5:eb:27:1e:65:a2:ed:c0:
4b:b3:33:d2:f8:68:4a:97:11:84:3d:10:b1:41:8a:
72:fe:d4:4a:6a:7d:db:66:ac:aa:38:34:4f:21:a6:
21:e3:f3:3a:67:60:76:b9:93:61:67:2b:5b:01:12:
82:65:b3:08:97:85:1e:4d:eb:b1:74:4b:1a:08:5b:
ca:ae:f3:c3:5e:8f:e2:51:4e:69:77:d0:a4:1b:bc:
ed:ed:6c:64:5f:48:a8:33:3a:ec:d7:7b:ae:bb:7d:
de:0f:86:1d:0b:d7:6c:19:f9:43:dd:d4:f9:0f:ea:
ef:76:81:dd:a8:c2:06:9c:3c:23:94:b7:43:a0:d4:
36:2f:5c:c5:83:56:87:2b:d3:71:96:11:e3:32:e7:
57:55:16:90:24:2a:46:37:b8:65:52:48:31:9a:1d:
bd:35:af:db:bc:48:66:41:5c:1f:ce:e9:50:78:03:
0a:ae:b8:27:94:e4:c2:21:fa:2a:1a:38:e1:d3:bf:
e8:6c:44:dc:3d:40:f0:c3:54:e4:26:db:46:86:c2:
45:ab:a4:2d:52:7a:65:75:d4:39:a8:6c:ec:b7:97:
ff:4b:6a:90:59:d0:54:31:bc:41:2b:82:1e:93:f5:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:AB:73:2E:B9:8D:51:B2:B5:E0:B0:1F:DE:DD:BF:52:E7:14:7D
X509v3 Authority Key Identifier:
keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:97:db:dc:19:f5:71:13:25:e8:de:87:c5:90:87:61:91:01:
d5:c7:5d:40:94:a1:4a:d8:29:f1:80:72:8f:2d:73:97:fc:15:
9e:51:cc:53:bf:14:06:be:fa:4c:39:67:41:8b:9f:55:07:b2:
22:13:f8:15:12:25:e1:a5:a3:34:54:68:61:c3:04:40:e5:4a:
18:52:63:69:3c:f5:94:81:27:11:ac:9f:29:21:85:a2:fa:d9:
6d:5e:46:df:04:28:a4:b0:7a:e3:ab:67:3e:4b:fc:58:e1:a9:
2d:28:cc:0d:0d:60:88:2d:60:12:4d:ec:09:5b:4c:27:ad:62:
ba:39:07:20:aa:c3:cc:82:31:65:1a:05:a4:f3:b0:43:17:79:
3e:4d:37:4b:f3:7d:c5:68:6a:bc:06:78:3d:99:b6:13:d7:7a:
60:c5:8f:fb:03:c2:d1:a7:b2:1c:a9:d9:6d:3c:7f:d5:90:2e:
a2:01:fe:7c:f7:b5:37:8b:1b:f5:af:12:27:e7:f6:15:27:9e:
f0:8e:f0:a3:8d:0d:ab:f6:e9:c9:ab:5a:e5:1b:b9:dc:70:a1:
8a:11:0b:5c:d7:43:aa:e2:86:38:56:cd:6c:f5:13:0e:32:64:
6d:8f:75:76:89:54:bc:47:7b:b4:4f:16:0e:58:05:c5:dc:81:
34:9a:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:49 2026 by rpki-client