
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: lHDsP56XqhjvVOCkFEO2Pg/W9vx/iQ1GYwVEG/Czt+M=
Subject key identifier: 81:D2:F1:4C:4A:92:B2:96:B8:CF:F4:66:A5:61:7D:D0:E5:9F:85:D3
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 02DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 02D4
Signing time: Thu 23 Jul 2026 02:14:59 +0000
Manifest this update: Thu 23 Jul 2026 02:14:58 +0000
Manifest next update: Thu 30 Jul 2026 02:14:58 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: bzKTk3Vh3uvUsASmieQUGL3XMNGGtbCUiserpA9r59A=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Jul 23 02:14:58 2026 GMT
Not After : Jul 30 02:14:58 2026 GMT
Subject: CN=6a617922-37d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:e9:0b:18:fe:cc:e0:d9:12:2c:29:0f:4b:
0e:7a:44:1f:53:97:ea:31:5b:62:e1:4e:67:e8:45:
59:d4:ca:fc:ea:20:4c:50:76:78:25:c0:8f:8c:98:
88:ba:8b:fd:58:bb:b0:bb:27:57:f1:5d:ee:3b:e1:
31:4a:3a:0a:93:18:4f:71:ea:ce:8a:59:de:b8:a3:
9d:af:19:a5:55:1d:a7:d1:32:a4:69:c2:7a:91:38:
ab:a6:3e:55:e9:e3:31:e3:68:3b:bd:bf:20:bb:4e:
8d:09:a3:2d:4d:9d:98:14:1e:d3:03:64:cb:52:7c:
a7:3f:76:24:a0:be:30:dd:9f:9e:7d:6f:d5:79:6f:
2c:04:08:d1:77:f1:83:3b:1f:95:1c:b7:3f:c0:de:
74:5f:01:5f:e7:4f:3e:97:4d:f8:71:9b:d9:94:05:
88:d8:c3:cd:ba:9f:dc:34:fe:e9:6c:c6:b8:45:45:
5f:7e:d1:2a:fb:93:4e:59:d2:ae:46:cf:bf:34:48:
1d:ad:f3:23:79:fc:c3:0d:fb:7c:4d:b0:0a:e6:a3:
fd:2b:09:70:5f:ff:14:b0:0e:20:5b:c2:18:57:5b:
eb:19:41:99:69:3f:4a:da:4d:32:ae:5a:e2:00:bf:
c2:32:30:aa:04:d7:17:ff:fb:80:8e:fd:b5:d8:c0:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:F1:4C:4A:92:B2:96:B8:CF:F4:66:A5:61:7D:D0:E5:9F:85:D3
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:0c:cc:dd:02:a8:dc:5d:f5:38:05:6e:a7:c1:12:73:2e:
04:71:3f:de:ab:53:3e:5f:46:0b:27:d3:7c:f0:7c:9d:cc:77:
36:ab:6e:19:44:18:78:3a:24:d5:0c:56:cd:3f:ad:f1:10:03:
cc:48:42:a2:f2:dc:d0:59:d4:7b:4c:1d:3e:65:1e:6f:6f:52:
99:f1:f7:19:35:3a:a2:65:32:c4:ec:fe:f2:4e:49:2b:f8:03:
02:c5:6f:76:07:0c:d6:ac:3d:c4:a1:0f:ca:6c:2d:19:f3:96:
4a:50:5f:21:c4:e6:0b:a1:cf:3b:70:c1:0d:2f:e1:c1:71:e0:
ec:44:33:31:61:26:63:56:2e:59:17:38:b5:0b:0a:31:cb:b4:
5c:d7:b5:fb:60:71:f8:07:0f:02:fa:24:99:dd:e2:28:9f:99:
7a:04:6f:ff:9c:3c:29:e1:8f:19:4a:43:8a:54:34:d7:7f:08:
08:3c:cd:3b:bd:f9:11:64:c1:c7:87:15:39:c9:b9:9f:0c:43:
bb:bb:36:73:1b:b4:75:96:2a:7d:52:e6:79:41:87:a0:2a:cc:
6b:e4:dd:7e:04:ad:53:0b:99:de:8a:10:63:d7:16:cc:51:4b:
d8:85:da:c2:43:59:43:0d:3c:bf:ac:18:99:64:46:5c:f2:d6:
22:0a:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:54 2026 by rpki-client