
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: LUISKwOlGLk5f8sWUMtlPh+NaZe8ElmkMURmtNCpcEM=
Subject key identifier: 6B:06:0A:87:FC:F9:B2:D9:7A:8E:03:B0:1A:83:1E:97:47:E0:9E:F6
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 14E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1477
Signing time: Wed 22 Jul 2026 16:58:55 +0000
Manifest this update: Wed 22 Jul 2026 16:58:54 +0000
Manifest next update: Wed 29 Jul 2026 16:58:54 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: +y4MLrO0AbdZh4CA5ppKATuPBaYRYHKtdQZO7iAB1Ds=)
2: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
3: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
4: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
5: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
6: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
7: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
8: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
9: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Jul 22 16:58:54 2026 GMT
Not After : Jul 29 16:58:54 2026 GMT
Subject: CN=6a60f6cf-a122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:51:2e:df:02:93:e9:64:ae:45:cf:f7:d9:
1b:c3:37:96:8a:64:17:81:19:1f:e9:31:8a:da:43:
6e:c4:91:23:70:82:7c:96:91:50:b4:21:7d:64:7a:
dc:87:7e:7f:53:c3:9d:1e:8f:90:49:7e:cf:39:22:
dd:04:f6:e7:1c:f7:b1:03:e4:3a:e6:e9:c4:a1:52:
20:4e:a5:d6:18:b4:cc:19:15:5c:8f:f6:19:fb:29:
31:6b:69:43:e5:ea:71:bf:fc:f8:81:9c:e1:91:72:
29:d7:ba:e6:c1:f8:84:cf:79:ef:94:ea:84:71:b3:
1d:55:7a:fe:28:3a:7b:5d:f4:80:a3:fa:2d:74:83:
5a:f4:3a:ac:74:7c:ce:bc:fa:8a:f4:b1:dc:49:e8:
f2:88:37:29:cf:54:6e:7f:7b:c2:63:0e:e8:75:38:
60:72:5e:d7:3a:f2:58:02:c5:91:76:88:fe:73:e6:
07:88:51:86:59:83:5a:92:ab:27:fe:38:c8:bb:49:
27:bd:1b:07:2d:af:62:8a:31:69:fa:43:4d:45:ec:
64:a9:5e:e6:f1:d7:bd:4a:97:f7:48:23:e3:fc:ac:
1a:73:3f:cd:26:75:22:f1:7f:a9:a1:93:28:ee:94:
07:3c:31:d4:f6:62:2c:ba:ae:b7:39:78:00:28:66:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:0A:87:FC:F9:B2:D9:7A:8E:03:B0:1A:83:1E:97:47:E0:9E:F6
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:e7:b7:cf:43:11:47:db:32:88:a4:cd:72:fa:7f:a1:fb:
61:05:ac:1b:bd:f0:21:03:94:9a:de:1b:ce:67:44:3f:68:7a:
3e:2e:f9:f0:61:8d:cf:a5:d0:2c:64:fd:02:20:ed:83:08:0c:
0b:45:98:93:2b:21:71:3a:f5:6c:fb:0d:5c:6d:f0:ea:b0:20:
9c:29:d8:9d:1e:86:d6:da:2a:fa:7e:9a:03:7f:e0:5e:d0:23:
18:ae:cf:87:b1:5c:30:96:08:3c:3b:5d:41:8f:4e:f8:af:0e:
d3:f8:27:52:1f:1d:e0:50:b2:a6:1f:e8:e2:30:0e:bf:7e:78:
8b:c8:d6:fc:39:63:a7:e9:af:ab:fe:8e:ee:c5:63:be:70:85:
74:41:14:60:ee:bc:90:8a:20:c0:df:40:32:08:2a:f7:80:15:
52:0e:97:fd:9e:07:9d:57:9c:70:b9:e4:40:2f:95:5b:69:6e:
bc:02:c8:38:10:2b:ce:69:7c:a0:36:e2:74:db:94:f2:7d:2d:
e0:33:c0:12:01:67:b2:f5:95:bd:ec:6c:79:20:01:3b:a8:4b:
32:74:ac:e0:29:26:7c:d3:45:dc:a5:8e:88:4f:01:71:c5:b3:
3f:81:15:fb:f2:a7:bf:d8:22:1a:69:34:fa:68:c5:64:3b:0e:
08:a5:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:50 2026 by rpki-client