
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: mT7+bW9+46mrPaHScRM7CSZkwoFkGqMOE1LTO2cTdiY=
Subject key identifier: 87:C2:71:78:4C:25:C6:B8:FB:4C:2B:4C:EB:A1:18:55:53:F1:92:47
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0AA6
Signing time: Thu 23 Jul 2026 11:02:54 +0000
Manifest this update: Thu 23 Jul 2026 11:02:53 +0000
Manifest next update: Thu 30 Jul 2026 11:02:53 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: akjQpaWCTbY8QT2ABIPKe+TYikhSWIU0RxvRLPR2DpQ=)
2: 0A5A5A8C868611F1834D6ADF67A30FBC.roa (hash: EnnfgpQNdSPaqBnvSKsk/cfhTzDdzQOYchOp4FDnxR8=)
3: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: Vj7o88kIi1gzoKZrYduw49KYBvPlvY9XiAyKSejHJoM=)
4: 2ACA766C751511F18829B6FC70A30FBC.roa (hash: fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=)
5: D61FACAC7F2511F193FF4ECD8AA30FBC.roa (hash: Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=)
6: D520BC1A7F2511F193FF4ECD8AA30FBC.roa (hash: cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Jul 23 11:02:53 2026 GMT
Not After : Jul 30 11:02:53 2026 GMT
Subject: CN=6a61f4de-605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:3b:72:e3:e0:f8:e0:fc:39:ff:cd:4a:fd:
91:d0:ad:0d:9d:29:77:11:81:dc:76:af:f2:e1:d4:
c0:cd:fb:de:0e:21:84:2c:c5:05:67:40:80:bc:40:
6b:95:11:3b:20:5e:f6:83:29:6d:f9:29:1f:44:f7:
5a:f0:8c:2a:62:e6:b7:c0:46:37:10:95:93:7c:19:
d3:9f:d6:b2:7f:94:30:d4:a4:da:1e:3c:56:d3:1c:
bd:ee:aa:f5:a0:f9:81:09:8c:7b:95:a6:76:31:86:
a3:ac:4f:04:ab:e7:a4:05:85:4c:36:2e:5f:e5:c1:
ca:7c:d3:2c:ab:3c:f2:95:1b:0a:e0:bd:16:59:71:
39:d5:d7:77:9a:bb:57:02:9d:98:f4:a2:a7:e6:c6:
97:82:14:bd:07:34:5b:42:6f:4e:57:78:d4:c0:cd:
6a:67:a9:6e:ab:98:9c:3e:bf:54:80:65:2c:33:82:
a2:cb:e2:e1:9b:6c:a6:7d:3e:8a:3e:7b:bd:6b:3b:
ff:85:a7:20:6a:16:e1:8d:db:42:4b:de:1e:fb:f2:
25:7c:57:d6:64:68:db:55:5a:14:6f:ec:18:9c:5c:
af:8e:5a:31:e7:af:fa:95:ac:38:33:69:84:51:51:
a3:35:8a:ee:88:98:f3:18:1f:fb:02:95:df:9e:2f:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:71:78:4C:25:C6:B8:FB:4C:2B:4C:EB:A1:18:55:53:F1:92:47
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:fe:c1:84:41:7f:c3:4b:db:c4:5c:ac:07:e6:88:47:b8:
96:f6:7d:9e:be:10:b5:e9:a4:0b:69:48:cc:3f:70:00:d8:3f:
93:e2:bd:9b:d0:77:4b:09:a0:ee:b2:22:25:f2:6c:2a:43:66:
0f:63:a8:b0:25:85:9f:e7:18:c6:5b:4c:c5:96:56:2f:18:24:
b9:d4:e6:68:fe:de:07:96:f6:3f:c0:48:e4:e3:3a:cc:f8:3c:
ef:6b:e7:38:ba:21:37:49:b8:4b:88:d4:f5:c3:8b:75:4c:17:
22:59:2a:cf:9c:05:4c:d6:df:59:60:18:09:52:d9:0c:cb:44:
62:81:9b:2a:89:50:1e:1f:58:66:3d:76:dd:83:a5:ca:01:c1:
d9:45:0d:4e:3f:f8:ba:91:4c:95:4e:63:5f:9d:29:ea:86:d6:
e0:17:cd:4e:ea:60:b9:04:6a:d9:f8:2a:f4:19:59:d1:97:fe:
41:e7:9d:67:8e:82:67:09:ab:0d:eb:bf:1d:71:07:6d:3c:f2:
5e:d2:1e:47:25:fc:10:57:2c:42:17:db:24:09:1e:cc:8a:5f:
42:21:ae:92:fa:73:59:91:9e:ac:8f:ac:c8:8e:07:f3:d2:00:
c8:95:9b:df:cc:f4:4e:e1:29:ba:d3:98:5c:85:39:35:14:26:
d6:62:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:02 2026 by rpki-client