
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier: hZzuMoR3SAv7XgUk5NBy1QthwYR80GP5fezaTOubCh0=
Subject key identifier: 4A:43:8B:80:AC:40:72:10:0A:FA:F3:09:3A:80:BC:02:0D:6B:CF:F9
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 0972
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number: 0965
Signing time: Wed 22 Jul 2026 20:33:19 +0000
Manifest this update: Wed 22 Jul 2026 20:33:19 +0000
Manifest next update: Wed 29 Jul 2026 20:33:19 +0000
Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: RToVUVvNmW6vaR6PGgefGiaeqNs7nPsdKDWewRw1K4c=)
2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418 (0x972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Jul 22 20:33:19 2026 GMT
Not After : Jul 29 20:33:19 2026 GMT
Subject: CN=6a61290f-9c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:ad:55:23:15:7b:51:32:48:06:73:1c:db:
90:24:e2:52:b0:1e:01:56:76:05:fe:97:86:6c:4f:
4b:8d:e1:06:67:f1:70:7b:56:fe:a9:44:76:04:8c:
82:69:b0:78:96:ae:33:a5:a1:19:66:59:53:2b:a8:
83:cd:89:96:01:ed:ce:6f:73:f9:68:64:18:55:12:
1c:04:7b:01:12:6d:b9:f0:ea:03:97:ec:9b:55:d7:
ab:5d:13:e0:6a:57:b6:c5:2e:83:59:26:f4:b2:a2:
65:75:4a:36:34:da:cd:b2:1c:1a:34:8e:39:46:10:
8b:91:63:6a:47:eb:bf:eb:f6:d8:d4:64:e9:dd:6d:
72:4b:6a:15:e4:ec:15:56:4c:af:09:75:1e:8a:e5:
1f:58:fd:24:ee:00:5c:50:b7:0c:be:87:a9:e2:92:
db:14:15:7d:c8:e3:95:b7:01:0e:59:cc:b3:8f:67:
c8:ec:d8:78:c0:e3:57:98:76:6c:c9:3f:7d:37:1e:
5e:71:97:49:bc:10:04:2f:93:c5:8e:9b:61:c6:3d:
97:d9:81:8e:cd:7a:0f:63:4f:be:d8:d1:55:01:8d:
aa:07:a5:c6:92:8e:81:e4:c4:7c:20:7f:20:c8:67:
ae:29:46:cf:e6:e9:e7:47:46:f5:6c:00:41:0d:3e:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:8B:80:AC:40:72:10:0A:FA:F3:09:3A:80:BC:02:0D:6B:CF:F9
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:64:f7:21:58:a4:73:c4:b1:c7:c0:b6:f2:b9:74:67:38:9e:
80:c9:dc:5f:c8:0b:85:8c:9d:d9:3c:8d:c1:37:2e:21:ad:74:
fb:70:6b:60:3e:0f:29:f4:a7:bf:a1:35:64:d2:f0:52:53:f4:
b0:41:4a:90:7f:61:53:43:0d:80:84:2f:9b:dc:20:59:5a:35:
e1:7d:31:37:1a:c1:f5:cb:ec:dc:f4:d7:c7:44:f3:77:5e:82:
08:55:ed:f9:54:db:86:37:09:ed:76:2d:7a:3e:6e:77:04:b0:
e1:b0:e0:cf:61:2a:8b:20:0f:1d:2c:4a:54:02:73:09:0e:df:
77:41:9c:a3:67:61:6c:16:33:ed:0a:49:1a:20:c6:df:08:bb:
92:f3:2d:b9:8f:4b:6d:0a:b2:f0:7a:e5:60:a5:b6:05:23:0e:
4e:72:7a:b7:e6:73:d5:21:65:28:0c:e8:21:cf:81:4f:84:03:
29:1c:b2:38:59:38:aa:67:d5:7f:c7:7d:26:f0:3d:9d:3e:ac:
28:f3:60:8b:e1:8c:43:b3:85:68:c3:18:f4:ec:5d:e3:99:1b:
55:0b:c7:2d:9b:db:c3:62:39:df:6c:82:d5:cc:3c:08:02:77:
50:4f:77:33:98:fd:df:13:d2:50:9f:21:f8:b8:81:34:9b:91:
61:19:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:35 2026 by rpki-client