
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier: 5uFO9Lvje2izBeVV2PBDYCLhpGsgNGyHplJQBbsWQ/Q=
Subject key identifier: 2D:87:01:88:D9:11:1B:D6:F5:E4:6C:A8:E1:79:88:8C:3C:76:55:D5
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial: 0BDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number: 0BCD
Signing time: Wed 22 Jul 2026 19:20:59 +0000
Manifest this update: Wed 22 Jul 2026 19:20:58 +0000
Manifest next update: Wed 29 Jul 2026 19:20:58 +0000
Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: Q5zD7jQ1gNz19kRovRCR27PNDTghVV0Ptx48Wi/O1OY=)
2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3037 (0xbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Validity
Not Before: Jul 22 19:20:58 2026 GMT
Not After : Jul 29 19:20:58 2026 GMT
Subject: CN=6a61181b-ab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:44:6c:70:1f:43:d7:02:c9:62:53:5e:06:
6b:c9:ad:df:1d:dc:91:80:ad:dc:fc:59:ad:1f:f3:
a0:b9:60:fe:b8:1d:40:06:3c:87:73:c3:99:a9:86:
02:e2:d1:94:a1:8a:ab:65:ea:25:fd:79:a8:7c:d4:
2f:e5:cf:81:7a:e3:af:ea:3d:6b:ae:ec:df:7a:5b:
2c:02:0e:00:93:7a:4f:6f:be:ca:99:fc:13:13:06:
5a:d6:a6:40:2e:fd:9d:20:cd:80:22:b5:e2:c2:84:
21:cc:4f:3f:06:ea:8c:85:57:1c:16:9a:5a:b7:fb:
cb:b9:25:c1:e5:12:36:16:0e:8a:c6:ee:cb:e4:8e:
4b:b4:dc:14:b2:95:d8:14:da:0d:d3:84:df:01:7b:
63:48:fb:58:fe:dd:ad:0b:1d:17:32:1c:5d:38:d5:
c7:91:c4:88:12:42:73:65:9f:ba:06:56:a1:42:26:
21:dd:44:5f:24:0c:f8:b3:64:70:80:3a:0d:30:dc:
26:d6:5c:19:59:a2:12:8b:e9:0f:d6:3b:44:f4:f9:
37:4e:79:5b:94:ef:54:cb:e9:a6:54:00:3d:db:be:
1c:5f:80:3b:26:ce:ff:63:3b:db:1a:9f:92:ef:ed:
fe:6f:5a:04:9a:d7:f3:32:f8:92:2f:96:d0:d8:05:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:87:01:88:D9:11:1B:D6:F5:E4:6C:A8:E1:79:88:8C:3C:76:55:D5
X509v3 Authority Key Identifier:
keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:d0:ac:f4:75:81:e5:17:f7:77:5e:71:68:0f:ef:c0:14:
05:b8:16:be:85:10:f4:1a:22:b3:21:22:26:40:7d:f8:d1:8f:
25:ac:70:55:0d:da:46:d1:6f:49:84:19:33:e7:51:7d:c4:e7:
a1:98:cc:53:94:37:cb:01:47:b5:f3:4f:c8:43:3c:8c:b9:12:
d6:a8:b6:8e:14:e7:96:b3:86:0a:58:4a:70:2a:29:48:61:c3:
76:6f:2d:50:06:e2:11:04:09:bb:19:a3:c7:3c:22:18:5c:3f:
e8:48:6e:8d:78:f7:30:c2:3f:a1:89:dc:b7:d4:ae:65:30:c7:
f1:30:ac:57:13:4d:d4:7b:22:99:3e:4b:e7:e1:dc:2c:50:e2:
a5:97:e2:2c:7e:71:d3:bf:04:e8:cf:da:9a:53:7f:95:ec:99:
8c:23:56:a7:e8:1e:28:13:7e:e3:5f:af:37:84:ff:f3:12:7e:
d2:ed:17:c2:fb:8e:6b:71:01:6b:f3:89:ad:c4:c1:b3:4a:79:
ad:7d:e1:17:11:f2:86:76:5b:d7:66:78:5f:04:1d:7f:23:0d:
d8:ac:4d:6d:92:0a:5a:f1:a6:94:e5:3e:a5:4d:7b:7a:97:f7:
8c:2c:9a:40:ff:b4:2f:e2:68:ce:5c:9a:db:7d:a3:f0:c5:4c:
d6:8c:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:54 2026 by rpki-client