
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json)
Hash identifier: zH8/d0fKy8yjWgRgBJ0gg18pG9GPT4SldiJuPx/HRdk=
Subject key identifier: BB:98:F0:54:1E:03:92:BB:DE:AD:A9:98:0F:2C:FB:4C:D3:84:01:A4
Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
Manifest number: 6C
Signing time: Thu 23 Jul 2026 09:53:43 +0000
Manifest this update: Thu 23 Jul 2026 09:53:43 +0000
Manifest next update: Thu 30 Jul 2026 09:53:43 +0000
Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: 3IFditcyc+vnA5lnNn66Zc6qRbhrjSiFJUvgSC4uDjo=)
2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Validity
Not Before: Jul 23 09:53:43 2026 GMT
Not After : Jul 30 09:53:43 2026 GMT
Subject: CN=6a61e4a7-f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:d3:51:07:27:3c:a2:3a:44:70:a5:c1:33:
26:c3:1d:14:d2:04:a3:e7:9e:2d:f0:3d:18:3d:75:
f7:17:d8:10:dd:03:12:4a:59:ad:c6:68:40:aa:ad:
ad:f5:f2:e0:78:14:17:34:ee:a1:55:3c:c8:8b:72:
58:c9:81:b9:fd:e4:04:2c:42:69:a7:19:19:7b:d9:
91:ac:d1:74:d4:81:3c:fa:2d:0c:3b:d6:7d:d4:85:
3d:fc:06:99:37:67:6d:b8:df:e1:eb:42:15:0c:40:
01:38:ef:ef:67:f2:9c:40:8f:7d:da:fc:8d:77:36:
3b:ad:20:e2:5c:1d:e8:b4:ca:61:99:c4:58:41:23:
46:e6:06:f4:fd:f6:e4:b2:3f:e1:4a:45:ff:a0:a1:
db:6d:43:d4:83:2a:e6:33:89:3f:8a:d9:a1:c5:02:
eb:cb:30:a3:cf:41:82:13:64:74:b5:2b:fd:3e:ab:
4f:20:f7:76:d4:6f:05:bc:71:04:41:b4:18:62:39:
22:19:85:e9:e8:43:5c:ea:bd:39:15:4c:cc:4b:bc:
4f:54:58:50:df:a3:72:68:05:99:e3:d5:74:d3:41:
29:e5:3c:96:97:62:87:1c:22:36:84:80:08:76:13:
0f:03:85:41:e4:31:1c:fb:09:61:3c:bb:62:14:40:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:F0:54:1E:03:92:BB:DE:AD:A9:98:0F:2C:FB:4C:D3:84:01:A4
X509v3 Authority Key Identifier:
keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:58:3d:ae:20:59:67:e3:4d:aa:ac:70:19:18:55:b3:1f:
7d:fe:32:7c:e5:4c:a3:39:ea:e0:28:98:5f:6b:a0:0a:25:d0:
ed:ea:91:4a:be:35:37:ed:d9:a4:d8:c8:af:e7:1f:d2:e8:d1:
7b:ae:6a:37:41:58:36:9f:27:f3:5a:2a:b5:1e:17:90:8c:53:
4a:e4:4c:e2:7c:a4:14:61:59:43:26:ae:73:07:bc:90:3a:7f:
09:17:c6:7c:d3:28:81:ca:67:78:a0:69:6e:6d:28:b3:2d:c1:
3c:ad:d3:0a:0e:a4:e4:a4:d8:e2:a9:94:fd:cd:f3:de:9e:72:
f0:b3:0f:49:eb:43:ce:ae:aa:3d:34:10:c2:13:86:e5:8d:2e:
92:cf:cd:b8:6e:7b:f3:78:55:30:f4:7d:f5:fd:27:3b:1c:81:
37:8c:8a:d8:a2:76:15:79:cc:5f:53:92:db:81:db:76:0d:d0:
b4:a2:ca:40:78:e6:6f:21:2b:31:17:8a:51:af:61:5f:4f:06:
9b:ca:c8:29:9c:84:de:3a:38:db:c0:a9:c1:80:ad:ab:7c:fe:
39:04:2d:7e:57:16:65:6f:f3:89:01:04:4a:d6:09:ce:8e:5a:
08:84:1c:b2:76:20:b1:5d:d6:b8:c9:9c:67:bf:99:70:a2:ed:
5b:7b:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:08:34 2026 by rpki-client