
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json)
Hash identifier: 9bvyOg26PeCCgTTf8KK7jNhohbvF84xySQ1+4Zg0lEU=
Subject key identifier: C6:62:68:85:1E:26:74:66:A9:0D:C7:62:34:EC:3D:20:95:B2:A1:38
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 10AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
Manifest number: 1014
Signing time: Tue 12 May 2026 17:32:36 +0000
Manifest this update: Tue 12 May 2026 17:32:36 +0000
Manifest next update: Tue 19 May 2026 17:32:36 +0000
Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: 6xFNVoanes+UKItxhq6Z9+zvAHOTlZMfcvqA06ISXKo=)
2: 2EFFC95471DC11F0B648E61EC4F9AE02.roa (hash: 1hrK2Bwewpt3jrZg8tzld9vT7Z8nHw5euqbUeqhmK6U=)
3: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: X4ujn6m6b/UzOkSsv1BM/hAI4e2I7YefOVrCDDZ2L0g=)
4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: HkpHyo2iHcK4D2nlMSOniFKi4H/SALi3eltvq0xZSgo=)
5: B2AB6010721811F09FD98A22C4F9AE02.roa (hash: oM2ZWP4gaa1Ec28NI0HOJLuGJz8huwbOd9sIWlD3wks=)
6: 2F787ACA71DC11F0B648E61EC4F9AE02.roa (hash: Sd3bOmBjQUjJSEaaagRS6KbmxYRr1S/mpgHzlYj8vVc=)
7: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: ufh38KxhdsuLy9IaI1dEAdKwH+h8MTF+UaFxLZhtCHo=)
8: B35E5B46334111EF9770A542C4F9AE02.roa (hash: MGyDF0SymFTGhXVC01aY5fhE89sLhtH+JybTpcTPMuU=)
9: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: HBSapd8EnRXWCh7KQah04ZzDJueHHz91PfvdNwADOIQ=)
10: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: OWu1YAjMPxdpWq7sK40yFmTZBw771CrDLDYch9c7srQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4267 (0x10ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: May 12 17:32:36 2026 GMT
Not After : May 19 17:32:36 2026 GMT
Subject: CN=6a036434-f2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:7f:7f:c6:29:0c:55:ef:47:b4:60:fa:5c:
63:3d:f5:3f:3f:11:6c:74:d2:e7:94:e4:48:32:7f:
8a:be:fe:ea:61:26:50:88:3c:47:95:ac:10:83:7e:
a3:8b:29:60:4d:7d:fe:ed:67:17:20:3f:6f:e7:84:
dd:ed:81:4b:a3:90:f1:c3:f6:c3:82:3c:ac:3f:1f:
16:ab:73:ea:61:09:0a:2d:5c:0a:c2:46:37:61:7f:
5c:94:90:14:dd:f8:57:92:e1:0e:84:78:19:d2:3d:
60:a4:73:4e:3b:9c:bb:65:36:a2:b7:64:b7:6a:53:
ba:e7:d4:99:5f:fd:7b:95:e0:7b:9a:04:0b:15:38:
1b:d5:fb:ef:53:ca:f7:f1:9c:d7:fb:be:db:06:ba:
4a:d0:05:e1:81:cd:57:9c:7e:f2:f7:34:4a:92:69:
ae:48:86:1c:ea:7d:87:d1:c6:54:cc:ef:71:85:01:
25:99:c2:ed:3a:d8:b3:80:df:ac:a5:2c:c5:2e:d4:
98:db:61:bf:38:ba:d0:6a:34:6e:89:6f:4a:90:b0:
5a:90:2d:e9:9e:65:5a:74:7a:82:f4:23:a2:5d:c3:
79:41:3d:b0:67:97:9e:0a:cb:07:98:a6:75:f4:d1:
c3:03:62:ba:56:be:31:ed:05:2f:ef:de:cb:a4:37:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:68:85:1E:26:74:66:A9:0D:C7:62:34:EC:3D:20:95:B2:A1:38
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:67:57:0a:4d:7d:7f:ca:bb:e8:3b:57:68:e1:6f:e4:25:
a3:15:fa:04:1c:99:5e:fd:e3:2e:9e:e7:2d:d2:6d:1d:dc:e7:
43:7a:08:be:f5:3f:08:66:68:a0:a1:39:30:b1:b6:29:d5:bb:
d3:25:d8:f0:ac:08:7f:f7:74:ac:a7:b9:fb:fa:b4:93:4f:30:
83:b7:52:e3:05:cf:99:ed:82:5f:3a:7c:d9:0d:4c:5f:a2:69:
57:4c:0b:6d:b1:4e:35:6b:e9:fd:9a:4c:32:2f:15:8d:0d:f0:
70:75:e0:20:da:65:c1:dc:bf:74:47:23:4b:6b:c2:cd:e4:4e:
65:f6:a1:92:12:c3:98:af:ed:33:82:f7:62:80:99:2c:ee:59:
67:6a:b2:f3:02:ea:7d:69:7c:2f:06:01:d5:1e:5c:96:c9:6a:
2b:61:a0:d2:81:05:d8:69:00:64:c9:d4:c0:48:b1:e8:71:36:
ac:67:e6:41:1e:f7:d2:37:77:a7:0e:9e:e9:ae:18:db:17:af:
00:64:56:62:c3:65:1c:21:af:3e:de:d7:1e:7a:4c:46:c9:48:
ee:78:44:20:88:24:19:08:ad:00:60:9e:cd:0f:cf:7d:7d:1d:
ab:1e:a8:9b:3b:61:bf:dc:92:22:9c:61:42:5c:e8:5f:c0:b4:
2f:39:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:35 2026 by rpki-client