
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier: YXhQQzweyVbO3xHDTOvBk1AMsY5ey4R5C0RX2UjriCY=
Subject key identifier: B6:ED:80:7F:E6:2D:32:07:BA:E5:7E:43:3E:46:EA:ED:30:22:31:65
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 0575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number: 0561
Signing time: Thu 23 Jul 2026 00:12:50 +0000
Manifest this update: Thu 23 Jul 2026 00:12:50 +0000
Manifest next update: Thu 30 Jul 2026 00:12:50 +0000
Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: JcN7SUjFgU345GOJlWaDXtCWGfNCIFB/gKw8oJIkcms=)
2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=)
3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Validity
Not Before: Jul 23 00:12:50 2026 GMT
Not After : Jul 30 00:12:50 2026 GMT
Subject: CN=6a615c82-1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:c4:01:2b:e4:5c:07:b5:91:65:02:62:1e:
7c:95:26:95:f8:dd:40:b7:93:e3:f8:45:fc:1b:49:
0a:8c:9c:4d:e1:63:5d:81:82:45:ad:a9:7e:ef:5d:
42:17:63:90:4c:ec:3a:13:94:1b:be:47:7f:af:ac:
59:0c:92:d9:26:ce:b8:cc:13:9b:1b:05:ed:bd:f8:
c6:0d:47:f7:a0:63:c5:a3:1b:2c:2e:c9:d1:1f:90:
e4:a1:32:d4:3b:99:31:a9:07:ff:92:4d:b5:4c:44:
b2:39:18:22:4a:f5:da:10:65:ff:04:c5:c5:b4:9e:
29:ac:9c:dd:17:64:b1:fb:33:1e:e0:3a:31:71:25:
0c:8c:7d:9b:a4:8d:33:b0:44:7e:a6:10:cc:c7:1c:
f9:f9:19:ff:a1:57:12:74:78:5e:7d:e6:c7:02:ca:
b0:3a:e8:eb:8a:2d:57:f4:d3:c1:5c:29:77:fa:5d:
50:1c:ea:dc:99:72:5e:a0:56:a8:6c:d2:41:41:2f:
37:dd:3f:99:91:5d:c3:35:a3:a4:e3:40:be:f3:d3:
11:81:37:8c:2e:e3:20:ba:b8:aa:36:85:c7:1a:d4:
cd:ed:68:6c:13:46:5e:57:29:a2:ff:2d:77:13:47:
25:a9:eb:c1:e0:87:84:d5:86:57:1c:0c:89:3f:bd:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:80:7F:E6:2D:32:07:BA:E5:7E:43:3E:46:EA:ED:30:22:31:65
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:dd:0b:be:1e:a8:a4:31:68:14:72:0d:a9:f7:4b:03:37:
10:89:55:90:70:93:9f:b5:d2:6c:20:47:fb:0c:2e:c8:4a:4b:
7b:45:68:58:d2:48:18:c4:df:85:4b:93:a0:87:da:d5:a4:fe:
d4:76:55:56:34:31:2a:a7:dc:58:79:67:90:91:9d:e1:3d:d1:
e9:9f:8d:ce:c9:fe:e2:5a:ca:44:3d:bd:c2:af:d1:d4:16:9e:
fb:2e:fc:28:e6:f4:8a:d2:19:f0:90:f9:00:1b:de:ae:e0:b7:
ae:4b:ee:00:3f:ca:c1:f2:71:69:8e:a3:39:9e:de:38:ef:f2:
45:c4:60:d2:e3:df:c4:72:12:73:52:cf:b7:b2:b0:54:82:89:
13:9f:1e:35:57:f6:25:a4:f9:c6:f7:f7:45:96:51:e3:f3:ff:
36:89:e4:1a:e7:2f:2e:df:d1:07:91:96:f6:e3:ed:c7:40:84:
ed:ec:ad:86:5e:af:44:03:1b:40:ed:a1:f8:58:cd:07:34:95:
21:15:41:16:e0:c4:a8:d6:5f:44:86:1a:5c:7e:94:40:f7:78:
7e:9c:76:14:d6:7a:a5:c6:91:10:07:d0:94:47:dc:5c:d0:3d:
29:19:81:48:04:88:41:cc:36:68:52:be:e0:2e:63:a4:ea:68:
ab:b6:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:25 2026 by rpki-client