
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier: HOxMHUHAsrvRlALtHunxXJCWfr97pX9GGI41rNIRIKo=
Subject key identifier: 40:9B:53:1A:0C:E1:D1:D4:5E:AC:05:FC:0E:6E:B3:F1:BC:10:8D:9C
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 0993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number: 1550
Signing time: Wed 22 Jul 2026 19:15:11 +0000
Manifest this update: Wed 22 Jul 2026 19:15:10 +0000
Manifest next update: Wed 29 Jul 2026 19:15:10 +0000
Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: ht760ZTcmAfu4UnHUQGrMeWEwvBsHf/sV0Wh5igekbw=)
2: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: QSEFrzyHThxfsuxeqGmvUKb+41WIgQBL8rivqG2479w=)
3: A856E7621BBC11F182440C5A133D8C67.roa (hash: UIVYsay7KQVs5dzePoAdcxAtnbz74xRDDqNirYjgjg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Jul 22 19:15:10 2026 GMT
Not After : Jul 29 19:15:10 2026 GMT
Subject: CN=6a6116bf-6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:12:7e:bb:82:d2:fc:d5:ad:0e:06:3d:24:
8d:d2:86:6c:51:0c:3e:bc:05:f2:db:49:83:3a:d3:
df:77:30:fb:57:8d:12:04:fa:3c:b0:57:d0:3e:41:
61:73:4b:a8:cd:fc:cf:23:b6:10:b4:0c:ac:8e:ce:
52:89:51:04:d9:7c:a3:c1:f5:cc:51:07:57:df:19:
7d:84:31:47:ad:08:71:51:2f:0d:94:eb:45:2d:33:
38:cc:8a:e4:46:72:a8:8f:fb:fb:cf:06:cc:80:32:
0c:4e:fb:fd:23:dc:2f:b0:cc:89:f8:79:42:a5:71:
0f:4d:7b:f4:2c:5b:f5:fb:45:ff:97:29:43:cb:61:
62:4f:03:14:7d:0c:9d:94:75:62:92:6d:82:53:d0:
c5:30:86:94:6a:75:cc:92:ea:66:fb:89:ec:d5:c7:
18:1e:03:e7:dd:05:e6:a0:62:5e:e5:ba:89:a5:82:
04:ad:49:a8:7e:f1:50:79:8e:46:79:64:d3:98:96:
87:fe:ac:42:4c:9b:c0:43:35:8e:96:52:b2:44:b2:
be:bf:c2:c3:6b:82:da:0e:d6:c9:80:8d:a6:e9:36:
a0:41:63:0b:58:ed:a5:a8:25:f5:df:85:f8:92:46:
ca:91:88:66:f5:b4:59:85:d3:0d:22:fd:91:7b:82:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:53:1A:0C:E1:D1:D4:5E:AC:05:FC:0E:6E:B3:F1:BC:10:8D:9C
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:c8:3d:19:69:98:8e:61:98:d8:29:55:c0:8e:89:aa:89:
61:97:4b:22:dd:62:70:66:71:07:c6:92:cc:d8:0e:ba:b3:6e:
81:11:05:8e:48:aa:65:ec:79:9f:bf:35:8c:5b:af:af:8c:8d:
8f:80:1f:2b:0b:0f:a5:66:44:e4:47:5f:df:29:43:35:11:d0:
96:5a:14:c8:51:d6:f8:d4:36:73:19:79:3c:d2:34:3d:bf:a2:
94:1d:90:86:cb:34:e2:40:92:c6:e6:eb:6e:ee:77:17:48:32:
76:db:e4:d6:d4:14:e1:7f:8f:3e:98:00:f0:7c:00:00:c3:46:
fb:7f:65:04:a5:41:ce:06:c8:77:96:c2:3a:22:00:9e:a9:86:
d3:92:04:c3:3d:a3:07:2f:6d:9e:d3:71:1b:52:f7:ad:ac:65:
92:46:c2:5c:31:c5:e0:be:56:52:d1:17:74:a9:ff:ff:d6:22:
be:cd:d0:4d:7a:98:18:db:36:c4:4a:b8:42:b3:04:74:68:be:
b9:bf:3f:b0:a5:ca:5d:9b:95:8f:45:89:66:7a:b2:7a:09:0a:
50:83:ed:18:c2:4f:e0:95:9c:04:49:78:a6:96:39:57:a3:61:
14:7e:10:7b:b7:14:4a:34:6e:0e:c4:2b:8c:26:97:c6:1a:12:
24:0a:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:17 2026 by rpki-client