
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: 2iPlKNgPUtzAkQLzMq7+btZH/+9vPQB3+Yq2akyfkZE=
Subject key identifier: BD:C6:6B:4A:A1:68:6E:F7:52:39:0C:32:D4:D1:89:0A:6A:49:EC:02
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1C1D
Signing time: Wed 22 Jul 2026 16:18:11 +0000
Manifest this update: Wed 22 Jul 2026 16:18:10 +0000
Manifest next update: Wed 29 Jul 2026 16:18:10 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: Y2dOKZZIdrblSEU7VeohbMIliSJG64lriP0GVgCDa0M=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7209 (0x1c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: Jul 22 16:18:10 2026 GMT
Not After : Jul 29 16:18:10 2026 GMT
Subject: CN=6a60ed42-47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:cf:d0:82:0e:c9:e8:38:48:f4:e7:2b:91:
59:b9:ac:32:28:55:e2:68:96:3b:aa:d9:be:22:d0:
bf:2a:42:20:5d:60:d8:ef:81:85:35:f4:80:2e:fd:
35:35:ca:ac:89:7d:06:66:f1:83:dd:f9:ec:55:d6:
9c:ee:16:10:57:1c:c0:bd:78:82:44:f4:9b:9e:e5:
08:1c:09:c9:32:2c:14:0f:99:2b:2e:87:de:22:23:
d5:96:3c:63:ad:b6:4f:52:dc:77:18:24:86:b6:98:
00:57:43:ce:23:68:ac:91:f4:3a:da:ba:4f:1f:46:
23:c1:17:ef:a4:a0:58:11:f8:4e:b1:17:16:26:94:
68:a1:a1:bf:d0:b7:1d:d7:10:37:41:ec:b2:23:b8:
ec:34:1b:34:a2:d7:fe:b0:fe:ec:44:21:91:d2:e8:
43:bd:ac:fe:d6:81:4f:be:c0:97:ff:82:8d:55:c5:
71:ac:e2:fc:69:c2:9c:7e:4f:60:f5:83:5e:0f:2c:
79:72:b5:2e:eb:0f:d2:06:cb:b6:42:80:e5:cb:2e:
ad:cb:5f:05:cf:ff:32:4e:c9:1b:bc:c4:a5:78:1b:
53:d5:15:6f:af:f6:8f:bf:0c:b6:11:fe:f9:84:b8:
b3:d7:bc:cb:b9:a9:a2:d6:10:28:b0:07:63:6d:5b:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C6:6B:4A:A1:68:6E:F7:52:39:0C:32:D4:D1:89:0A:6A:49:EC:02
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:ce:a0:4b:12:14:3b:d9:95:6d:0e:e9:ee:ba:6a:92:a8:
e3:e0:4b:3c:2e:bd:e4:5f:de:36:f5:34:88:8a:ca:25:4e:33:
04:40:b9:fc:2b:ad:f0:8f:ff:da:b7:9f:e3:97:83:a2:e0:d1:
91:5a:c0:fb:8a:d9:ce:ac:a7:fd:a4:9f:69:05:73:f4:2c:fc:
61:0d:1f:7a:f5:2b:52:df:32:fe:6a:a9:de:f4:f9:69:77:95:
e5:72:2e:0b:18:20:22:a6:e7:82:c3:e7:07:66:89:e9:91:18:
12:61:1e:8b:87:8a:7b:a3:60:51:d3:5f:61:96:ae:36:4a:f9:
ad:32:ae:19:1e:35:00:48:57:75:c6:7b:da:5a:5e:a1:8a:31:
c9:9f:53:83:cc:0a:01:f4:05:3b:3f:40:9a:7d:ac:17:01:8c:
06:45:e3:d5:57:a5:a1:ba:85:9c:70:4f:82:88:d8:6f:e0:cb:
3c:2b:a7:fa:db:cb:bf:d6:ac:f5:a1:22:06:77:07:d8:52:2a:
4c:11:69:0d:3e:72:7d:10:8c:1f:29:17:ca:d0:78:02:7f:8a:
a9:0f:23:da:9c:52:62:87:e5:08:e1:9b:0f:fa:61:5a:fc:aa:
ff:16:42:5c:ab:3c:e0:06:ea:ed:6d:be:03:43:d1:ad:8e:ee:
aa:7f:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:09 2026 by rpki-client