
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File: ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier: sCcXBuuXudP0PRqh7zulpr04N3r2UVrDl3fN5wD6TBA=
Subject key identifier: 55:E1:C6:45:D2:AD:E1:0F:B4:2B:79:EA:8E:B9:4F:3D:74:C2:F6:99
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number: 01FE
Signing time: Thu 23 Jul 2026 04:33:32 +0000
Manifest this update: Thu 23 Jul 2026 04:33:32 +0000
Manifest next update: Thu 30 Jul 2026 04:33:32 +0000
Files and hashes: 1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: Vw7dEuOSG2LjSOKlEu5NbRr0IzxFuQg5ncyUmnrW3Hw=)
2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: 21MbeL2c4YLwBExJY7PKPByiCkIBI9z7opJchOT4zUE=)
3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: evBEm2b+wO5EWpkoyV0JMMubzQxUV9WEBqLzlOLXTBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Validity
Not Before: Jul 23 04:33:32 2026 GMT
Not After : Jul 30 04:33:32 2026 GMT
Subject: CN=6a61999c-6332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:2d:23:c5:61:fa:b1:90:ff:4f:15:d4:30:
d2:4b:eb:43:e2:e1:9b:79:5c:7d:51:37:37:69:1d:
fe:96:ee:37:37:85:84:6e:64:fc:a8:e8:ff:97:32:
57:f4:c9:f2:57:d2:1a:8a:95:2a:91:70:78:e4:a8:
77:2d:71:dd:b7:81:06:77:1b:8c:bb:e6:a4:20:d2:
75:b2:4b:17:90:0b:73:eb:11:4e:79:22:f8:6e:9e:
a3:02:41:06:3d:bd:c0:dc:dc:3f:fc:d4:c0:e8:42:
22:42:32:86:79:2d:ff:12:44:37:23:5c:82:eb:a7:
42:40:8b:a5:a7:7f:21:af:6d:af:20:e0:69:92:28:
cd:0a:f0:9c:98:a2:4e:b2:da:6d:e7:20:2c:6e:70:
5c:f6:9a:90:e3:0d:4a:8c:41:cd:5e:ca:56:ca:48:
31:f9:40:ed:59:00:60:e1:55:ee:b1:d2:e7:ea:c9:
15:8e:2b:9f:c6:93:7e:a6:74:33:1e:c0:50:63:8f:
82:40:ed:b6:1f:b7:18:de:05:3c:f3:05:6a:fd:50:
04:1f:bc:0c:d2:83:ec:24:f1:80:ec:74:b5:b9:af:
24:cf:17:29:63:de:8a:68:96:89:2e:78:e0:06:24:
c1:d0:2a:0b:0b:d4:8c:c2:19:a1:93:80:0c:d2:64:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:C6:45:D2:AD:E1:0F:B4:2B:79:EA:8E:B9:4F:3D:74:C2:F6:99
X509v3 Authority Key Identifier:
keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:05:df:38:df:7d:55:60:9b:0b:cc:47:44:e0:36:a0:b8:
40:89:9e:42:0f:3d:d1:9d:8a:12:7d:01:65:c3:15:d9:97:d0:
e9:9c:59:b2:43:c2:3f:93:b6:86:08:ca:6e:3c:f8:67:0a:91:
53:2b:77:46:4b:1d:f2:aa:33:5f:22:b3:b1:00:84:65:41:c9:
77:44:86:dc:09:c9:aa:85:b9:61:74:8f:80:63:f4:0a:b9:0e:
d2:91:1b:14:92:49:76:b1:4a:ba:20:41:53:72:31:87:a4:a0:
2e:c2:6e:f5:c6:78:85:88:77:00:ad:cd:54:71:2e:c4:4c:35:
3c:3a:43:2a:45:76:a2:5b:1d:e0:eb:36:d0:40:bc:fd:49:33:
c6:03:f2:46:fe:03:90:74:db:07:c1:cd:15:ab:78:3d:b2:dd:
f1:ac:64:7c:b8:6f:1f:f1:a7:aa:43:e7:f1:40:e0:be:5a:06:
c6:25:da:df:c4:8d:06:73:87:c9:18:f0:18:8c:f7:9f:3d:3f:
e5:97:ac:13:9e:11:0a:5e:16:cc:0d:c7:2f:64:cb:be:1a:79:
b7:7b:49:79:c6:98:9e:fa:f2:73:1d:b8:22:cb:91:66:17:80:
2e:e0:01:e8:b8:46:eb:d4:e7:8e:17:a5:f6:54:57:9e:ad:8c:
5e:36:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:42 2026 by rpki-client