
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: lOi9oo/yX7/iA56+YET8w0qfjr5kyTgFB4CeZZvASDA=
Subject key identifier: CE:F0:EF:54:50:8F:AF:BF:56:CC:AD:DF:BE:A5:DA:7F:FE:12:AE:57
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 01A8
Signing time: Thu 23 Jul 2026 05:40:34 +0000
Manifest this update: Thu 23 Jul 2026 05:40:34 +0000
Manifest next update: Thu 30 Jul 2026 05:40:34 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: yXy8L+If6Z9wv3kMrjytGyehXae6LNJu9a8SSfPVVsg=)
2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Jul 23 05:40:34 2026 GMT
Not After : Jul 30 05:40:34 2026 GMT
Subject: CN=6a61a952-8c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:d4:b2:ab:f9:db:85:db:63:45:c4:1e:13:
f4:e6:6f:f4:70:1a:f9:db:c7:bc:a9:52:4e:47:de:
f2:9c:4e:d3:45:80:80:71:94:0d:c2:e5:07:04:dd:
48:6d:78:54:e1:23:c1:f0:49:24:55:70:82:bf:a1:
3d:80:d2:75:c6:54:51:d4:39:23:78:95:a9:f4:1f:
57:a4:29:d2:98:5d:df:f5:ec:be:5e:6b:83:f8:25:
36:2c:d5:28:3a:c5:ed:42:d6:ac:45:43:81:88:da:
c9:bc:9c:e7:ba:2c:57:41:d3:3e:39:e3:f2:8a:8b:
0c:e5:6c:b2:fe:42:88:6b:c5:d9:9b:a7:fa:ee:5a:
c0:73:70:2d:7a:b1:14:2e:e0:ec:8c:a6:6f:cb:fb:
25:42:0c:de:85:1c:39:7e:8c:88:57:c9:a4:67:19:
7e:a6:4c:33:7b:b8:bb:9c:a8:9f:99:55:62:46:eb:
a6:40:6b:d4:e4:f9:72:31:6f:7b:3c:e2:57:1a:46:
d8:fe:6d:56:ea:d9:17:e7:53:d3:7d:2f:c7:df:e7:
f3:ba:23:5e:85:45:11:e9:1b:35:64:86:d1:7b:c5:
80:7c:77:d9:73:be:51:1d:4d:de:67:12:33:c5:91:
d0:cb:f2:fc:16:f0:83:06:d5:b6:0a:69:1e:ac:0f:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:EF:54:50:8F:AF:BF:56:CC:AD:DF:BE:A5:DA:7F:FE:12:AE:57
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:15:ac:78:77:c8:62:aa:61:ab:ec:61:c6:12:df:53:c7:f6:
39:99:e9:9a:e6:f2:cf:2c:eb:f1:41:12:ee:1f:d3:7e:30:52:
12:ee:57:87:ba:b4:ba:1e:13:4b:b6:8c:f6:43:3b:f9:06:a8:
bf:c7:73:42:fe:3b:ea:ec:4a:84:39:6d:35:56:90:d7:75:a1:
36:1a:c9:35:2c:d4:e7:c2:32:0a:52:1d:64:f7:a2:3e:d9:21:
52:13:27:53:0c:3f:42:a6:b0:6f:10:ad:19:f7:5b:c9:01:6e:
dc:f5:85:0c:0c:34:a6:76:ca:a5:e8:7b:b9:96:2d:c7:5d:c9:
1e:fb:bd:dc:a1:ab:c9:fa:e0:04:df:42:e5:fc:96:86:43:fe:
bd:d1:b0:24:eb:b9:44:e3:96:f5:f2:ef:4c:68:7c:0f:42:be:
17:c3:09:8e:35:97:cf:7e:1c:89:e5:29:e8:52:97:0c:23:d8:
ab:48:6e:e9:56:23:c8:81:31:86:32:49:52:ff:af:05:df:7a:
a8:1a:3b:ff:0e:49:c3:8e:f7:f6:59:b9:de:85:13:16:61:2c:
d5:a1:92:20:15:19:03:ad:52:38:19:89:77:83:28:bd:70:12:
ce:41:c4:b6:97:1c:02:97:a1:42:ce:71:c9:12:15:15:6c:96:
1f:ea:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:00 2026 by rpki-client