
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: yDxehO13XnlNsB2QtPauGK5i3bdDTPe+nRXvh4eTh6o=
Subject key identifier: E3:44:1E:A7:67:FB:AB:68:15:C1:2D:EF:25:61:93:B7:1F:25:38:C5
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B3C
Signing time: Wed 22 Jul 2026 16:21:20 +0000
Manifest this update: Wed 22 Jul 2026 16:21:20 +0000
Manifest next update: Wed 29 Jul 2026 16:21:20 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: Iw/xIwzdZ5H710xPtPUY3tq9wb0+ou9VHzjn2xI/BPE=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6987 (0x1b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Jul 22 16:21:20 2026 GMT
Not After : Jul 29 16:21:20 2026 GMT
Subject: CN=6a60ee00-beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:20:5d:fa:a5:62:43:81:07:dc:63:20:c3:
4d:fc:1a:19:85:f3:28:df:8c:e0:3e:c9:60:ac:c2:
7b:3c:5c:af:0d:51:1b:e0:cc:07:ac:b7:dd:c7:47:
18:6a:15:ab:9b:52:9d:50:64:1b:15:f0:5d:7d:1c:
ea:54:e9:4a:35:c2:c8:8e:a4:3b:2c:a3:e6:e2:8c:
f3:b7:58:93:74:c3:dc:78:b5:b6:8b:ea:34:3a:8a:
15:4a:ea:10:71:7e:9f:0c:70:4a:fb:06:59:10:f9:
b0:b9:57:30:c5:52:e5:ef:b7:9f:92:a4:af:fe:4f:
3f:cf:0f:8b:b7:8a:06:c3:17:20:87:0a:09:69:cf:
b8:ec:e4:e5:aa:88:ed:49:7c:d4:79:db:f3:54:4c:
e7:62:a9:79:72:42:6a:2a:08:43:1d:d9:1a:89:9b:
09:51:6e:4c:b2:a5:b4:59:41:cc:5f:f7:26:a5:a3:
85:b3:c8:62:1c:40:d2:f1:60:cf:72:9e:ef:bb:1a:
dd:ed:5e:a1:75:e3:4d:f8:95:42:4c:e5:31:28:6b:
e2:c4:44:d2:19:e4:38:3c:a8:4d:03:27:b5:57:58:
9c:98:c5:1f:cb:26:54:e0:3e:7b:a6:1c:ec:04:c8:
7b:15:9e:91:69:c7:53:e5:da:c7:71:a6:de:12:22:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:1E:A7:67:FB:AB:68:15:C1:2D:EF:25:61:93:B7:1F:25:38:C5
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:e0:9f:57:50:4e:4c:a4:1c:2f:b4:63:12:13:4c:c3:93:
0f:62:56:3e:0c:02:b7:d4:7f:6b:3b:88:f6:f3:9e:68:df:ce:
d5:bc:05:ad:b3:d9:cd:83:ac:08:1e:a7:98:23:dc:0e:28:57:
53:ea:13:82:4b:27:5f:4f:a1:b9:ee:b8:78:b9:19:de:cc:00:
a2:a6:3a:9c:c2:18:87:db:bb:5b:6d:58:c3:37:c8:c3:55:84:
30:18:4b:78:de:87:33:c4:47:3c:cb:8f:c1:68:4a:2f:1c:4c:
49:cb:e7:e5:be:11:d3:e1:3c:26:ee:3e:3c:ea:0e:b3:a5:08:
3f:65:20:5f:fa:a7:f6:7c:b3:82:19:e1:4f:ba:ce:2d:f8:75:
a6:1e:22:68:76:1b:b5:0b:18:33:ab:46:1f:1b:1d:55:e3:52:
5b:0d:52:ce:98:1a:28:3f:92:d1:26:4a:13:6c:76:e4:a3:49:
ba:22:ee:00:bc:cd:30:22:6f:b8:b9:2a:bc:c5:b4:cf:74:44:
ec:d1:04:75:14:dd:a3:28:f9:03:05:96:26:05:6d:a9:42:2e:
d3:aa:cc:d9:51:e3:ec:07:be:cd:15:35:bc:4b:52:74:be:3a:
67:cb:de:85:f4:78:ec:17:55:40:98:c2:68:12:66:2e:26:48:
06:47:2c:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy
NjcwQzYyMTEwHhcNMjYwNzIyMTYyMTIwWhcNMjYwNzI5MTYyMTIwWjAYMRYwFAYD
VQQDEw02YTYwZWUwMC1iZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyyAgXfqlYkOBB9xjIMNN/BoZhfMo34zgPslgrMJ7PFyvDVEb4MwHrLfdx0cY
ahWrm1KdUGQbFfBdfRzqVOlKNcLIjqQ7LKPm4ozzt1iTdMPceLW2i+o0OooVSuoQ
cX6fDHBK+wZZEPmwuVcwxVLl77efkqSv/k8/zw+Lt4oGwxcghwoJac+47OTlqojt
SXzUedvzVEznYql5ckJqKghDHdkaiZsJUW5MsqW0WUHMX/cmpaOFs8hiHEDS8WDP
cp7vuxrd7V6hdeNN+JVCTOUxKGvixETSGeQ4PKhNAye1V1icmMUfyyZU4D57phzs
BMh7FZ6RacdT5drHcabeEiLOQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONEHqdn
+6toFcEt7yVhk7cfJTjFMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG
OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP
VUhBbS1mTDFUMHNtY01ZaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAATvgn1dQTkykHC+0YxITTMOTD2JWPgwCt9R/azuI9vOeaN/O1bwFrbPZzYOs
CB6nmCPcDihXU+oTgksnX0+hue64eLkZ3swAoqY6nMIYh9u7W21YwzfIw1WEMBhL
eN6HM8RHPMuPwWhKLxxMScvn5b4R0+E8Ju4+POoOs6UIP2UgX/qn9nyzghnhT7rO
Lfh1ph4iaHYbtQsYM6tGHxsdVeNSWw1SzpgaKD+S0SZKE2x25KNJuiLuALzNMCJv
uLkqvMW0z3RE7NEEdRTdoyj5AwWWJgVtqUIu06rM2VHj7Ae+zRU1vEtSdL46Z8ve
hfR47BdVQJjCaBJmLiZIBkcsHQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:53 2026 by rpki-client