
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json)
Hash identifier: leYSsI1Y0LHC9GkZEwF7rc6ALKYURfOWqmQaWbMfJ4A=
Subject key identifier: 5F:1F:CC:D9:47:15:BE:2C:45:62:00:96:21:58:F7:A4:D0:5F:AF:2A
Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
Manifest number: 89
Signing time: Thu 23 Jul 2026 09:36:05 +0000
Manifest this update: Thu 23 Jul 2026 09:36:05 +0000
Manifest next update: Thu 30 Jul 2026 09:36:05 +0000
Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: OA0gC7C1RzE67NmGmNy07J39kn4YaSRyRjnkKJnapKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A
Validity
Not Before: Jul 23 09:36:05 2026 GMT
Not After : Jul 30 09:36:05 2026 GMT
Subject: CN=6a61e085-007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:b4:48:9c:8e:78:65:5b:e1:a8:c4:92:ae:
33:52:7f:76:97:1f:53:44:a6:2d:ca:d7:2b:e3:02:
c8:50:cc:2a:52:1e:e4:5d:46:23:f4:86:cc:26:87:
41:a4:dd:a0:83:27:8d:ad:63:0d:12:5c:83:41:5e:
38:0a:9d:0b:10:05:34:d8:85:f1:51:11:99:76:b4:
06:c6:29:aa:b7:9d:3f:c0:db:88:81:d6:91:5a:b6:
27:c6:02:a9:08:22:27:14:66:98:08:07:71:c1:32:
c1:cd:bf:1b:97:e8:50:ba:10:2f:6d:52:42:33:35:
d6:77:2f:6c:e0:ef:8d:8f:57:f6:7f:96:a7:e7:c7:
86:0d:8f:6c:50:2c:47:ea:80:e8:04:f7:fe:cd:c6:
8c:89:d5:ee:40:c6:29:93:94:7c:49:6e:ed:2f:ee:
eb:2b:bf:b3:b2:f2:8e:fd:eb:4f:05:2a:77:ab:e1:
c3:22:e8:bd:2a:3b:7e:c0:d5:06:c8:b0:a9:a1:b7:
25:e8:ea:e9:b1:d9:63:87:c4:96:8c:c9:0f:5c:93:
4a:1d:46:95:d2:fe:aa:cf:89:67:e4:02:18:86:55:
60:d5:b3:4f:eb:37:3b:df:a3:bf:ff:69:54:cb:5a:
40:72:e7:64:94:7e:f4:f4:34:21:0d:46:60:6b:71:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1F:CC:D9:47:15:BE:2C:45:62:00:96:21:58:F7:A4:D0:5F:AF:2A
X509v3 Authority Key Identifier:
keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b6:80:27:43:ce:ae:0f:31:f3:4d:82:93:a9:87:a4:86:db:
1b:3e:84:6d:ad:3a:40:a0:96:8d:ac:f7:2a:57:a8:9e:7e:7a:
f0:0f:0e:48:34:d2:51:7c:f0:19:36:fe:83:a2:35:10:9d:01:
7c:a3:df:29:d7:69:eb:77:c3:e0:7f:8d:53:24:7a:1b:ea:8f:
42:22:19:8c:78:90:c8:e7:62:5b:88:58:cb:c2:c9:4a:1f:72:
53:7c:52:e0:f4:e7:03:28:d5:17:13:5a:a1:ac:7e:99:bd:12:
5f:f9:a4:d1:f1:88:bb:d0:82:bc:3b:3c:67:27:74:1a:f0:63:
1b:f9:7f:81:cb:c1:92:d9:ec:0e:5f:f2:90:b8:c1:15:8b:8c:
97:d2:39:e5:90:33:e0:a0:79:da:93:ed:35:05:79:6d:42:af:
80:b3:ce:89:62:9b:f0:ef:d0:e2:3f:58:8b:86:b2:f8:01:6d:
73:c6:2f:95:cd:66:8f:79:56:bf:dc:59:5a:ee:43:c9:27:da:
49:ae:50:63:a0:ef:09:07:71:8f:f4:b0:28:0d:ad:e4:80:31:
f3:bb:36:bc:f5:64:f3:7a:cc:9d:45:da:f0:59:26:f4:9a:9e:
03:22:33:8a:c1:43:28:46:6c:2e:78:b6:22:36:b5:6b:c7:b1:
01:af:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:10 2026 by rpki-client