
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier: R1xuFLvtl9ImLjKHbI4llvwFlpBkepqwEN7GLvQcOoo=
Subject key identifier: 19:7B:8B:73:4A:07:62:1D:82:0E:34:21:DA:A3:8F:14:90:32:FB:4A
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial: 096F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number: 095D
Signing time: Wed 22 Jul 2026 20:35:04 +0000
Manifest this update: Wed 22 Jul 2026 20:35:04 +0000
Manifest next update: Wed 29 Jul 2026 20:35:04 +0000
Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: elszXTzJXT5QFZWjc6vlq5myKOVN6nb3YJXVEiCUfK0=)
2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=)
3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415 (0x96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Validity
Not Before: Jul 22 20:35:04 2026 GMT
Not After : Jul 29 20:35:04 2026 GMT
Subject: CN=6a612978-77c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:17:96:7c:f2:1c:60:46:12:22:a1:8c:9c:
3c:1e:86:b6:04:1c:46:34:ee:50:0c:4c:98:d7:a3:
a3:ac:3a:4c:cd:ae:0a:9f:42:08:67:7a:b8:f3:c4:
60:56:2f:de:f0:e9:5e:6f:fd:ea:0d:44:1e:35:7b:
49:f2:66:9b:98:52:c5:91:d1:f1:a0:95:42:9f:05:
54:13:20:08:16:0e:8d:83:28:26:1b:bc:05:9f:b4:
14:ad:94:d9:f7:f1:d0:ad:33:ee:94:25:d1:65:d4:
36:40:22:7b:92:5d:d0:44:ab:5a:c1:06:a3:5d:10:
18:9e:3b:d6:97:b4:1d:59:9e:02:b5:f9:0e:c1:ea:
a1:6a:4e:04:b8:7d:42:0b:58:76:db:be:66:25:e6:
6e:6a:19:0f:91:61:36:71:ed:68:23:d9:b1:11:b4:
c5:9c:d1:01:d7:06:5f:75:54:4a:74:22:9e:ad:31:
df:c5:a3:b9:c2:be:07:86:80:10:56:6c:aa:45:e7:
a7:a0:8f:0d:93:cd:d2:8f:f9:3a:be:71:90:37:7d:
ba:8b:2b:c7:35:56:a2:5c:b5:eb:ef:63:bf:99:47:
e1:01:1b:22:21:38:b7:32:8b:ea:41:36:6c:f7:3a:
02:59:dc:36:26:b4:31:c8:90:84:ba:1d:4d:78:1c:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:8B:73:4A:07:62:1D:82:0E:34:21:DA:A3:8F:14:90:32:FB:4A
X509v3 Authority Key Identifier:
keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:f3:7c:a3:50:d7:b4:59:cb:b3:d9:3f:42:e8:d1:7e:e4:f5:
2a:52:2d:71:39:29:70:7d:15:d8:33:50:35:65:e9:ff:b0:15:
74:b8:ff:78:e3:1b:07:e2:3d:4f:a9:a1:d9:03:1b:20:90:a0:
42:f8:39:67:90:d3:c7:8f:84:09:9f:dd:39:38:8a:b6:d4:ef:
03:bd:04:0c:4b:81:2b:66:8d:c8:9b:9a:05:b2:f0:1c:0b:ac:
03:93:3d:7e:b0:39:20:20:56:65:ce:9e:68:b3:f3:1f:80:09:
ee:de:df:be:21:67:90:42:01:83:f7:a0:e8:8c:c6:89:02:2a:
42:53:15:85:0f:d2:ab:50:fe:dc:d4:ca:7c:46:e8:aa:89:af:
1c:31:b8:14:fb:ad:d7:0a:27:d0:d7:b7:e2:3c:c4:81:0f:99:
77:5e:f0:43:da:6f:fc:9c:59:06:90:e5:08:c5:c0:4f:01:79:
c1:1e:8e:83:15:de:a1:53:8a:ff:0a:59:64:c0:31:d8:99:a5:
5c:00:dc:01:e3:7f:f6:3b:6d:56:82:2b:37:a1:c7:26:b1:5e:
06:ba:a7:f2:44:7a:16:11:cb:df:bd:9e:79:fd:c4:28:f2:11:
96:cb:f0:fd:ca:2a:9c:d2:79:3d:0d:43:14:f2:28:1e:00:08:
33:53:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:53 2026 by rpki-client