
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json)
Hash identifier: s4QrJYHTPLR0Nr+rC7Q7zlg6bDzYzXrOPmd4tJQEBLI=
Subject key identifier: D6:6D:FC:80:03:6C:AA:A6:16:DC:3A:44:F7:53:FA:D0:89:AE:03:7B
Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
Manifest number: 0CD2
Signing time: Wed 22 Jul 2026 18:47:28 +0000
Manifest this update: Wed 22 Jul 2026 18:47:27 +0000
Manifest next update: Wed 29 Jul 2026 18:47:27 +0000
Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: 9B9MSNtDvQXzykNSpggKsb+MfMrL5kXWocss+nTFVmQ=)
2: 988741FEDB8111F0B008B5AB60D3641D.roa (hash: rh5kanvG5QXPAMOrNiNLJLVHnbyU12f7aHXUzCF2hMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Validity
Not Before: Jul 22 18:47:27 2026 GMT
Not After : Jul 29 18:47:27 2026 GMT
Subject: CN=6a611040-13a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:23:98:f5:66:eb:1e:b4:1b:1f:17:17:78:
bb:e1:bc:b1:a9:53:38:1c:b3:92:9e:f0:15:36:6a:
4d:96:43:eb:f5:d4:50:22:a5:3e:0e:5b:e0:4b:d9:
7a:8b:70:65:88:51:e0:bd:2d:54:15:12:ba:60:22:
ac:15:35:da:c5:88:37:58:4e:2e:4a:76:df:73:b0:
20:96:41:98:07:1f:29:87:9e:e6:93:66:40:45:1b:
1d:c2:bb:c4:1d:33:e4:d8:5c:32:da:07:8a:24:90:
7a:f2:30:8f:35:0b:14:9b:3d:cd:65:08:10:6a:fe:
b0:1a:e0:e1:ef:fc:66:5b:f5:bb:18:fe:12:2f:9f:
85:98:f4:57:ba:26:86:6a:07:cc:6a:c2:db:a0:44:
c2:b1:1e:6e:5c:a8:74:26:dc:ec:1b:88:cc:e3:1c:
1d:ad:0a:d2:12:b9:e7:7f:47:9c:9f:96:fb:60:dc:
e1:69:d4:fe:e0:18:46:e5:15:44:1a:1c:49:42:3e:
c5:87:a4:91:cf:3e:ef:af:40:e9:26:10:c5:14:b3:
8a:b5:25:e4:71:58:9c:db:09:ea:3e:31:7f:b0:b3:
9f:54:e7:d7:5c:52:e0:9d:60:7f:96:db:68:b6:72:
29:89:3f:fc:52:43:14:46:2d:55:44:5e:85:2d:0c:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:FC:80:03:6C:AA:A6:16:DC:3A:44:F7:53:FA:D0:89:AE:03:7B
X509v3 Authority Key Identifier:
keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:91:fd:4a:8b:1a:26:dd:85:57:b3:1b:7b:38:9c:86:c3:69:
92:0f:b0:21:0e:18:68:16:3a:a0:8a:17:dd:ad:61:b3:d1:1f:
35:4b:4e:4e:27:81:82:04:d8:68:5f:14:3f:c0:5c:37:c0:5e:
88:12:3e:c5:04:84:f4:e5:36:fc:11:3b:8e:99:69:01:96:45:
8f:6c:15:2b:6e:50:c1:91:5d:97:6c:d5:1a:f9:6a:5c:8e:f8:
2d:8e:f6:2b:cd:88:13:7b:5a:09:7b:98:bd:8d:4e:ef:9f:7d:
55:e2:ff:54:7f:4f:a1:6a:ed:5d:1a:b9:92:31:7f:5b:4c:4c:
b6:24:78:3c:f0:df:6b:37:7f:59:09:20:07:a0:5c:eb:6a:7c:
8a:b2:9a:56:91:57:f9:1e:f1:b6:59:7c:02:79:70:ce:3f:11:
2b:6f:b2:7b:64:a9:0e:8a:3d:18:69:52:56:b5:2e:50:2c:1a:
d3:30:6f:98:4d:72:ae:0b:87:87:2b:85:f0:ef:71:3b:4e:4b:
4e:76:c4:61:53:be:5a:aa:d2:ab:2c:cc:58:a0:6a:ed:68:e3:
3e:51:17:04:40:f0:cc:4b:8f:5e:31:29:83:9c:cf:4b:ca:f7:
6f:a4:6e:d9:e7:97:3d:3f:a9:5e:5d:af:cf:0c:04:8c:bc:50:
5e:7c:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client