
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
File: lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft (raw, json)
Hash identifier: t/EO8PNTxduwOxZuavzmrTiRAIV36JTJ3Lbkroq/yLQ=
Subject key identifier: 56:8C:E5:11:56:AF:FB:0A:BB:3F:6D:CC:BD:28:FD:02:15:57:43:DE
Authority key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
Certificate issuer: /CN=A91CDF78/serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
Manifest number: 29
Signing time: Thu 23 Jul 2026 10:49:52 +0000
Manifest this update: Thu 23 Jul 2026 10:49:51 +0000
Manifest next update: Thu 30 Jul 2026 10:49:51 +0000
Files and hashes: 1: lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl (hash: WAPTO9Hkpm6guNZx61FL+n9q7FE+S5AihrG3HPMt8Q0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl
rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
Validity
Not Before: Jul 23 10:49:51 2026 GMT
Not After : Jul 30 10:49:51 2026 GMT
Subject: CN=6a61f1d0-51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:a4:05:19:f8:d1:de:d1:3e:04:bb:d7:d1:
3c:11:4d:65:82:02:86:1f:7d:0d:e7:4a:4e:d8:9d:
72:9d:08:01:56:6e:6b:46:81:56:57:0d:7a:07:06:
8d:96:5f:7e:2b:6b:25:b3:9a:1a:4b:f4:ef:91:f2:
fd:2d:90:e9:31:f0:d4:4b:c5:0e:8b:fa:5d:d0:e5:
3f:d8:d3:71:09:e3:f2:1d:d3:50:94:01:6e:a0:3a:
0e:d2:eb:80:25:8f:31:da:5f:68:af:92:2f:ec:c3:
31:99:be:64:f8:28:0f:92:cf:8b:19:32:3a:0c:3c:
b6:27:86:1e:7b:ad:de:da:b9:d3:9c:72:07:7f:6e:
4d:70:bb:a1:da:87:17:b1:01:7c:fb:ff:e7:e0:13:
8d:ef:32:ef:41:af:40:99:8f:7d:1d:36:1b:50:ac:
18:03:96:f0:94:24:b9:26:b1:c3:d5:92:f2:55:99:
2d:0e:18:4e:2e:46:ab:82:ef:9c:8e:b4:e4:36:2d:
79:ae:05:61:42:84:05:ce:cf:e7:3e:2a:c3:35:9c:
73:38:a1:32:e0:a6:d8:9b:c5:70:c5:e5:3a:11:af:
8c:00:3e:73:8a:90:3b:76:bc:9c:e7:ab:da:3a:44:
db:9b:58:1f:c1:cc:70:5b:e2:3e:53:a4:8e:77:41:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:E5:11:56:AF:FB:0A:BB:3F:6D:CC:BD:28:FD:02:15:57:43:DE
X509v3 Authority Key Identifier:
keyid:94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:20:2d:22:9b:63:9d:70:64:d5:c5:2c:51:d3:76:ea:9a:04:
81:e2:14:c9:d3:27:51:4d:e9:b6:a9:11:fa:cd:ae:b1:cc:99:
a0:f4:a4:ba:4e:f3:5d:93:8a:b2:66:2d:7b:3f:c9:d9:07:16:
91:68:a6:19:94:05:0d:57:a6:8a:15:c5:7e:b3:9b:94:41:ef:
26:4a:b9:61:1a:cd:d0:90:61:dc:01:83:ce:1e:05:d9:df:bf:
bf:bc:8b:e2:27:77:8c:f4:b2:6d:67:a0:59:6a:bd:52:d5:ed:
e6:e7:2d:0f:65:0a:f4:bf:1c:57:14:40:6c:05:fc:ca:7b:eb:
b9:30:a0:29:4b:d2:9f:b9:11:df:21:f6:60:ff:ee:b3:07:db:
ed:65:04:da:01:6a:b7:b7:22:78:8a:8a:68:f0:2d:1b:ec:a7:
29:78:17:24:c2:6a:01:18:50:b3:03:94:23:ed:33:b1:88:45:
14:fc:56:09:35:5b:1b:6d:70:bb:1b:c1:37:a9:24:c5:1f:de:
df:6b:08:4e:b4:d0:bd:44:e3:8f:b8:7c:1f:26:6d:b1:3b:b3:
d6:d1:59:ae:94:07:58:47:5a:65:3c:d3:1d:8f:a6:21:7a:a0:
d1:4f:3e:f1:1c:2c:34:28:e4:9f:04:c5:fd:4b:4f:b6:56:8f:
c3:b6:bc:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
REY3ODExMC8GA1UEBRMoOTQ4RThDMTFENzRCQUNGMTZDQkY4MkNENDAzNjk0RTBE
QjdFOTRGMjAeFw0yNjA3MjMxMDQ5NTFaFw0yNjA3MzAxMDQ5NTFaMBgxFjAUBgNV
BAMTDTZhNjFmMWQwLTUxZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCja6QFGfjR3tE+BLvX0TwRTWWCAoYffQ3nSk7YnXKdCAFWbmtGgVZXDXoHBo2W
X34rayWzmhpL9O+R8v0tkOkx8NRLxQ6L+l3Q5T/Y03EJ4/Id01CUAW6gOg7S64Al
jzHaX2ivki/swzGZvmT4KA+Sz4sZMjoMPLYnhh57rd7audOccgd/bk1wu6Hahxex
AXz7/+fgE43vMu9Br0CZj30dNhtQrBgDlvCUJLkmscPVkvJVmS0OGE4uRquC75yO
tOQ2LXmuBWFChAXOz+c+KsM1nHM4oTLgptibxXDF5ToRr4wAPnOKkDt2vJznq9o6
RNubWB/BzHBb4j5TpI53QesXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVozlEVav
+wq7P23MvSj9AhVXQ94wHwYDVR0jBBgwFoAUlI6MEddLrPFsv4LNQDaU4Nt+lPIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0ZBQkRGMjlFNDdD
NjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBGc3Y0TE5RRGFVNE50LWxQ
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEk2TUVkZExyUEZzdjRMTlFEYVU0TnQtbFBJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
Rjc4L0ZBQkRGMjlFNDdDNjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBG
c3Y0TE5RRGFVNE50LWxQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQABIC0im2OdcGTVxSxR03bqmgSB4hTJ0ydRTem2qRH6za6xzJmg9KS6TvNdk4qy
Zi17P8nZBxaRaKYZlAUNV6aKFcV+s5uUQe8mSrlhGs3QkGHcAYPOHgXZ37+/vIvi
J3eM9LJtZ6BZar1S1e3m5y0PZQr0vxxXFEBsBfzKe+u5MKApS9KfuRHfIfZg/+6z
B9vtZQTaAWq3tyJ4iopo8C0b7KcpeBckwmoBGFCzA5Qj7TOxiEUU/FYJNVsbbXC7
G8E3qSTFH97fawhOtNC9ROOPuHwfJm2xO7PW0VmulAdYR1plPNMdj6YheqDRTz7x
HCw0KOSfBMX9S0+2Vo/Dtrza
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:29 2026 by rpki-client