
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: Ycy4562kHfr2ZLAc2vobFJj2l7/a7gnXyNROkRfs8Us=
Subject key identifier: A9:28:88:72:9E:00:24:29:64:EA:A2:4D:F2:FC:A4:40:93:8C:FE:AA
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 141D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 1402
Signing time: Wed 22 Jul 2026 17:02:29 +0000
Manifest this update: Wed 22 Jul 2026 17:02:28 +0000
Manifest next update: Wed 29 Jul 2026 17:02:28 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: Xl3ouxT7SzQtwk1xoJueYmGuiO+0XFPhQcSReCOPM1I=)
2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Jul 22 17:02:28 2026 GMT
Not After : Jul 29 17:02:28 2026 GMT
Subject: CN=6a60f7a5-84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:87:56:3d:e6:c3:99:0b:bb:56:11:cd:38:
60:06:cc:d8:ee:59:c6:e6:98:bf:dd:24:af:d4:54:
22:04:d2:1b:86:ad:8a:b8:1c:e6:47:10:24:8a:05:
7d:90:cc:5b:06:29:29:d3:ac:33:fc:ba:31:56:3c:
29:2c:82:d9:f7:7a:a8:a7:6e:4b:49:d1:02:b6:95:
e2:ef:a9:0d:20:4e:1a:c7:40:7e:6a:eb:a9:83:00:
a6:c8:84:e6:4d:d4:0b:49:71:09:9d:bf:e7:e0:dc:
f0:25:2d:d5:c1:c8:a1:d0:f0:1b:cc:11:3c:35:ef:
8c:74:51:93:47:e2:fd:15:56:19:39:4e:4d:f4:1f:
90:e1:d3:d2:10:fa:47:7f:3d:23:b6:ed:d2:33:75:
2c:89:91:0f:2d:d5:9e:40:f4:b2:b6:76:75:b1:ea:
a3:61:f1:26:f5:52:85:24:c7:3a:0c:05:43:22:3c:
6c:7c:fd:68:60:cd:70:f8:40:97:71:f8:fe:a9:b7:
b8:2c:e0:2b:58:d4:9b:5d:ae:37:1f:e7:c6:ea:37:
d9:9d:c7:80:80:c2:0a:0e:48:31:1e:58:c5:05:24:
3b:96:67:12:73:18:38:eb:15:e4:6b:f7:cc:da:7c:
6c:ac:a0:de:58:55:c3:ff:27:51:3e:b2:d6:6f:3c:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:88:72:9E:00:24:29:64:EA:A2:4D:F2:FC:A4:40:93:8C:FE:AA
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:2a:db:51:8d:07:76:8d:07:97:b3:40:c2:32:70:f4:77:
a9:e4:14:ed:c0:97:1a:7b:14:40:23:ae:75:9e:7a:d9:81:71:
3b:a3:55:0c:7a:9f:80:60:a8:11:13:be:ae:87:19:89:c0:75:
c2:b1:60:5d:9b:a1:e3:7c:c5:cc:38:5e:ea:d5:7c:c6:82:ea:
f8:56:07:99:09:87:b4:5e:cb:82:9f:10:58:8e:81:1c:99:9d:
ae:21:df:79:58:3b:c4:57:04:b3:4a:89:f7:f0:a3:d4:83:be:
96:7e:86:14:70:bf:05:1c:96:d8:07:5d:30:4d:42:be:6a:32:
fc:85:70:be:a2:d8:6e:d8:be:1a:e0:ec:66:dd:e9:02:c9:1d:
42:59:71:4c:25:82:b6:c5:be:1e:f1:d9:17:1d:81:bb:3c:b9:
8d:b2:6e:af:24:9b:a1:92:a2:37:a3:35:aa:77:a5:ff:78:b1:
f8:cd:f9:8d:20:4c:2a:6b:09:10:ab:40:c2:d7:b9:85:bc:59:
56:37:3d:c8:97:cf:47:5e:8e:30:fb:e3:88:03:53:2e:7d:91:
f9:b0:3f:a8:2d:9e:e4:9d:c3:fa:7a:9b:52:e1:34:e5:08:62:
e1:72:f6:4d:69:d9:21:82:09:92:32:79:a1:4f:a8:ea:e2:38:
56:9f:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:08 2026 by rpki-client