
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json)
Hash identifier: qnd9Fixm0B3qMyhndayR9ojoqiZmVtshI3csPYNBhgU=
Subject key identifier: B1:53:D7:81:38:36:49:61:E1:14:15:45:D1:45:45:2B:76:B8:B4:78
Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
Manifest number: 50
Signing time: Thu 23 Jul 2026 10:18:47 +0000
Manifest this update: Thu 23 Jul 2026 10:18:46 +0000
Manifest next update: Thu 30 Jul 2026 10:18:46 +0000
Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: mnhEb1lmEqsLoKda3FYmmLJdHQuWzS2lRZWVNGQHbJ0=)
2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Validity
Not Before: Jul 23 10:18:46 2026 GMT
Not After : Jul 30 10:18:46 2026 GMT
Subject: CN=6a61ea87-7953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:0c:35:b2:c8:33:3d:92:77:1f:1b:e9:44:
78:ff:ae:90:04:f1:81:8f:84:2a:28:bb:cc:35:77:
72:b1:c7:e6:51:82:1c:bd:4c:e9:fb:70:7f:a9:a3:
92:a5:ed:47:eb:ff:13:16:21:27:16:94:06:2a:e0:
1a:8b:7c:17:64:9c:63:bd:3d:8a:20:34:b4:33:13:
97:50:d5:f3:6b:2b:11:7a:ca:f5:78:bc:17:0f:e0:
73:90:73:a5:46:7d:be:94:37:11:b9:51:cb:77:f3:
fb:83:86:6d:07:35:b5:1a:ca:a0:4b:56:ab:4c:bd:
b3:3f:2c:5d:f1:83:df:43:c6:8d:73:6c:6b:6e:bc:
8e:4d:60:be:35:96:5e:6b:0e:6c:a9:12:ad:2a:ef:
3a:90:3e:83:07:1c:cc:2b:ca:dc:0d:1b:ba:29:4a:
22:1d:eb:42:bd:72:1e:8f:09:26:1d:2a:7a:54:52:
d0:92:65:41:a5:1c:49:5d:90:e2:05:1b:f5:21:66:
8f:4e:f6:11:d9:e5:80:db:8c:ee:9a:0d:12:d3:50:
49:74:25:64:53:62:26:67:ab:06:44:8b:af:a6:c5:
09:4d:d4:ee:58:89:97:7f:e0:54:0e:f4:20:23:51:
38:77:73:76:a0:08:08:50:01:5a:90:17:b6:ea:85:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:D7:81:38:36:49:61:E1:14:15:45:D1:45:45:2B:76:B8:B4:78
X509v3 Authority Key Identifier:
keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f9:e4:32:8f:d9:c0:9b:ed:9c:e3:3a:94:4d:37:b5:cf:2e:
53:a0:ab:ac:e2:cb:b3:59:09:65:fb:26:a2:12:f5:74:02:51:
01:8d:85:4d:96:34:81:8f:c8:2c:f8:57:59:d3:dc:c1:19:e8:
1f:37:27:a1:3e:07:2d:35:a9:f4:55:0f:ce:79:cc:10:0c:fb:
0e:ef:96:12:0e:25:c3:96:fb:25:ed:80:44:f2:d1:14:93:68:
b6:bd:6d:5c:7a:7f:17:26:e2:c9:66:cd:92:55:9b:5d:83:6f:
3d:3c:03:aa:4f:fc:7d:be:63:75:52:a4:68:40:b0:b1:90:f4:
30:8d:70:66:8e:35:18:cb:8b:27:e7:f4:4f:9e:c3:26:92:0a:
85:39:20:8e:d3:52:96:9e:fb:0e:3a:b5:b8:71:42:65:44:37:
69:5e:06:17:e6:d3:aa:91:78:fa:27:8d:e9:5e:46:6a:03:b1:
8b:4e:54:81:76:20:ad:02:e6:5c:5e:ab:d0:0b:a2:30:d6:0c:
d7:22:3d:71:2a:ae:76:26:88:7d:0e:76:b1:8a:b7:63:5e:4f:
b1:2c:d0:8e:f5:9e:2d:e2:fa:39:be:9b:ae:9f:db:72:2d:96:
18:32:a0:ba:87:72:7f:6d:c7:de:d6:4f:41:a7:96:b6:b7:cb:
2a:40:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:00 2026 by rpki-client