
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json)
Hash identifier: bksEKEx8oG6GvF6fRb+9xugRloww7spJ++qBX/pWxtE=
Subject key identifier: F8:A9:6B:16:9C:FB:E9:B1:EB:DC:D4:2C:72:51:0B:C5:DC:1D:25:7F
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial: 1E0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
Manifest number: 1DF8
Signing time: Wed 22 Jul 2026 16:10:18 +0000
Manifest this update: Wed 22 Jul 2026 16:10:17 +0000
Manifest next update: Wed 29 Jul 2026 16:10:17 +0000
Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: oJG2NciWIhGt6Xo7YgNOgTm52NbrlOsNSHeLhoy5dqM=)
2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: rD0K63hEtFRbmUFMwp16mvboZk+CtCmdJfPRvsaFveU=)
3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: y589PiSSMhNrGOrnncCafxxVdSHTLvTbZSYrRDFCPDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7693 (0x1e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Validity
Not Before: Jul 22 16:10:17 2026 GMT
Not After : Jul 29 16:10:17 2026 GMT
Subject: CN=6a60eb6a-3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:c9:fa:36:ce:18:f9:98:5e:50:6f:75:39:
62:11:9f:c8:42:d9:43:3a:d7:ba:5a:9e:29:23:47:
f0:47:31:06:3e:85:5f:7c:d7:24:4e:1f:c2:36:46:
98:34:17:9d:b0:0f:26:dc:01:b4:57:dd:55:78:d9:
c3:6d:09:7c:43:1b:fe:4f:89:9b:ed:c2:78:ad:41:
bd:c1:25:3a:b2:98:b0:92:a7:82:be:3b:1f:25:6e:
a3:fb:c9:51:15:32:45:90:72:a9:a8:83:c2:8c:cf:
33:92:7a:b2:3e:9f:84:4f:01:14:63:37:54:15:ed:
be:55:68:c6:df:0c:fc:c6:13:2e:11:a7:66:e4:7d:
ab:7d:d6:76:d2:7d:94:08:5f:11:7e:9e:8b:12:e0:
56:25:f3:35:1f:0b:eb:86:6e:ee:ce:45:b6:78:16:
86:28:d1:44:a4:f7:c4:c8:6d:e7:11:38:80:eb:f5:
99:50:ad:38:17:df:0a:f3:8d:5d:98:8d:53:ff:20:
40:16:93:72:89:88:25:57:b2:30:48:28:4c:cd:ee:
24:16:70:a4:30:67:b0:07:7f:25:57:75:a2:6a:00:
46:fb:fd:b6:8d:69:c6:0b:0a:3f:60:90:46:22:0f:
37:62:a4:e4:fb:12:0e:5e:a0:25:7d:2e:51:cb:e4:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:6B:16:9C:FB:E9:B1:EB:DC:D4:2C:72:51:0B:C5:DC:1D:25:7F
X509v3 Authority Key Identifier:
keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ee:1d:38:2b:02:c6:cb:49:c4:93:e3:7d:66:7b:14:2e:05:
96:c2:52:08:d7:bb:05:d1:27:8a:53:48:9a:c9:4a:12:a4:53:
57:17:1c:39:ef:d8:95:24:a6:50:90:f3:2b:2e:71:5e:e9:62:
d0:ab:6c:10:92:0e:d7:38:3b:6e:4a:b0:93:ad:ab:c6:79:a2:
d3:8d:e6:f3:64:67:f2:06:4a:20:0d:24:ca:c3:85:6c:56:49:
70:7e:5f:b8:25:fc:c5:f7:e6:81:6e:04:45:a8:b4:ce:de:20:
2b:7c:f4:60:91:8e:13:a5:06:2b:9f:4d:81:e9:37:d2:b7:a1:
12:77:22:06:35:2c:09:29:e0:34:1b:a4:ca:28:cc:e4:2a:5d:
04:90:17:f1:27:eb:3f:ba:d9:ce:84:ae:23:35:e0:8b:97:f6:
6c:0e:9a:02:ee:cc:0c:dc:9c:90:02:71:98:28:8a:02:10:ed:
11:20:c9:26:32:72:d2:14:04:ab:c7:f7:48:15:5f:a4:20:14:
ab:e4:ee:b7:71:80:50:a1:ee:0e:97:9f:d2:01:42:cf:5f:dc:
9d:30:3b:40:b0:fa:b6:db:52:3c:6c:e5:2d:21:7c:94:fa:3f:
02:82:75:bb:fa:49:37:dd:b6:f0:61:7a:e2:86:8c:77:91:4c:
77:23:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:05 2026 by rpki-client