
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier: 6BceQc65B2mHqTFN3Cxqeky27PRjFZmYOC+Ibh34Rbc=
Subject key identifier: D2:7B:0F:C3:D6:BC:C1:1F:86:8F:94:6D:A2:F7:C6:4E:95:9D:7B:B6
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number: 02C5
Signing time: Thu 23 Jul 2026 02:21:10 +0000
Manifest this update: Thu 23 Jul 2026 02:21:09 +0000
Manifest next update: Thu 30 Jul 2026 02:21:09 +0000
Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: k7KHDF+wWuEvtvRVQBAFfgepf1w3GE/SOTWbn0IMKqE=)
2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: JEoXZriBqJJhzP1nkyHSHN9MJNXjkBusjNVR9oT/r4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Validity
Not Before: Jul 23 02:21:09 2026 GMT
Not After : Jul 30 02:21:09 2026 GMT
Subject: CN=6a617a95-4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:1b:ce:1e:5c:e7:58:44:de:fb:e3:31:26:
a6:c7:c2:44:27:cf:02:ef:f5:d0:1c:3d:a5:b6:28:
4e:a3:40:39:e3:38:f3:98:6f:8d:67:af:c4:c8:68:
1f:d1:ba:3f:cf:a6:8d:ea:b3:82:b7:1d:38:8e:c3:
ed:6e:ec:a3:bd:3f:12:15:7f:19:50:e1:9e:9a:df:
98:58:39:4c:59:2c:36:5a:a7:57:06:fc:52:70:71:
84:d0:36:71:20:82:cb:bd:f8:37:d4:48:ba:85:46:
f0:9e:51:cc:8d:f5:44:70:4d:42:29:f8:ce:ff:62:
3f:47:a5:7b:ae:45:e0:70:59:db:e9:e5:40:6d:f9:
d0:df:5d:fa:06:a3:9a:93:72:24:1f:4c:f4:ac:42:
f6:3c:2d:1d:46:b5:2a:ff:c2:eb:bc:88:5f:24:f8:
a7:d2:0d:b3:39:a0:96:3f:aa:0d:6e:67:d6:62:c9:
3c:14:fd:51:cd:66:1e:84:9e:82:d0:6e:ff:68:16:
85:96:b7:50:51:e1:d3:9d:41:55:91:c4:52:f0:a1:
c8:e8:fc:a5:37:19:fd:54:92:9e:91:88:32:55:d9:
b4:17:03:66:49:52:de:64:14:84:0a:5a:26:79:2f:
fd:54:ab:b4:e7:7b:34:21:1b:b4:dc:62:1d:9e:1a:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:0F:C3:D6:BC:C1:1F:86:8F:94:6D:A2:F7:C6:4E:95:9D:7B:B6
X509v3 Authority Key Identifier:
keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:86:31:f3:df:83:cf:b6:18:5a:bf:65:d8:cc:4e:56:d9:
8b:44:7d:d0:f2:61:92:69:aa:de:fb:4f:35:7f:cc:20:89:f6:
6d:3c:f5:77:e1:72:fa:fb:3a:fc:a4:21:7b:b8:62:fe:76:b9:
db:7c:d9:3c:0f:24:85:a0:20:90:fa:52:9f:d0:21:3e:b9:07:
d1:cc:9e:b4:26:c1:e0:5e:fe:9e:c5:4a:e3:b1:27:04:74:93:
6b:73:b0:ee:57:e1:06:ec:79:49:81:39:16:4f:6d:60:cf:b0:
8a:6b:e0:8d:62:94:db:cf:19:34:51:40:ed:76:ef:cd:5a:31:
2c:8c:ef:5f:d6:af:66:61:f1:67:6b:44:37:e0:57:b8:df:69:
c8:0a:1f:09:43:52:cc:2f:e4:57:39:1a:ff:c8:f5:bc:52:c1:
16:b8:ce:65:29:80:f5:f9:fb:ba:9d:0e:a9:f1:ba:60:9d:bb:
ab:43:83:47:4e:1b:ef:fe:cd:71:a7:3e:dd:00:da:f3:9f:2a:
a6:19:03:55:96:86:1c:0f:9a:9d:9b:96:43:e3:c6:73:af:cf:
f8:1a:ec:6b:06:0a:1e:c3:fc:0f:1c:23:3f:22:6a:6d:49:72:
ef:0d:a1:a4:84:f8:34:1c:d8:64:4b:f0:3f:4d:3b:24:84:51:
50:2a:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:37 2026 by rpki-client