
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier: x4/33B6lIyCixAtWDDqYqy9wwJTY1B6QlPsrQVPQkT0=
Subject key identifier: 27:9F:3E:84:D9:4B:33:28:75:F2:73:70:E6:7F:2A:02:60:BA:04:88
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 356C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number: 3565
Signing time: Wed 22 Jul 2026 14:41:05 +0000
Manifest this update: Wed 22 Jul 2026 14:41:04 +0000
Manifest next update: Wed 29 Jul 2026 14:41:04 +0000
Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: GcVq4LiMMF2qFvU+/v5Jge9GyznuwO0r549suYOS0gI=)
2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676 (0x356c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Jul 22 14:41:04 2026 GMT
Not After : Jul 29 14:41:04 2026 GMT
Subject: CN=6a60d681-8ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:e3:8d:5b:78:fe:d2:2b:cb:cc:0b:11:33:
b5:31:ee:61:d3:e7:1e:98:68:74:c2:69:ff:02:93:
b1:90:21:86:ea:49:aa:9c:de:ad:1d:92:53:36:14:
91:fe:f6:f4:68:b8:d6:d0:e2:14:63:8e:a2:3a:93:
31:7c:06:77:36:32:97:c2:69:ee:fc:83:74:0a:75:
09:9d:18:7b:16:85:4e:a6:e1:9f:56:56:72:45:05:
37:d1:65:a7:aa:43:0b:47:64:34:9a:3f:05:af:59:
62:e0:f5:a6:f2:76:58:03:ae:e1:db:3e:c8:40:ee:
ed:61:2d:2a:e4:23:6a:ab:5f:0d:e4:df:07:0b:73:
9d:53:5f:98:b1:e5:87:67:5f:62:1a:eb:ba:e0:a2:
d7:64:b0:c1:60:ed:1f:2e:fa:09:97:09:76:01:11:
27:42:8f:6f:1a:6c:56:89:9c:a8:89:55:e6:35:90:
0c:aa:b5:92:00:ab:80:fd:af:08:76:db:d3:3a:97:
02:b2:5e:92:95:6b:bf:88:fa:fe:bb:2f:98:49:dc:
56:23:bf:9e:ef:87:7a:7d:13:75:25:a2:85:99:98:
fc:53:ad:53:ce:4a:fd:59:bb:96:c9:97:e5:91:b0:
ec:0e:ea:e0:d0:74:b6:ec:35:12:1f:49:b7:00:a2:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:3E:84:D9:4B:33:28:75:F2:73:70:E6:7F:2A:02:60:BA:04:88
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:c3:cb:97:25:d5:dd:80:6a:56:aa:f4:ee:51:cd:70:ce:
e3:23:09:51:31:86:ca:1c:f2:10:41:2f:25:19:7d:e1:64:82:
99:e7:d1:4c:59:85:37:ac:f5:e3:5e:e8:81:44:b3:31:45:a9:
f0:84:59:93:c5:0d:94:c8:76:c5:22:0a:09:7e:e7:12:c7:8d:
34:61:7c:2c:68:5c:9c:5d:be:ea:a7:00:db:c4:74:e7:5a:c4:
e7:88:d8:ff:29:28:64:9c:b7:c7:4b:e0:5e:ef:0b:a9:10:70:
d5:a8:54:66:3c:4e:7d:e9:72:de:b4:51:67:eb:e4:26:c5:5e:
0a:df:86:6a:d5:bc:37:1a:ff:86:66:15:7b:af:ba:d1:bc:82:
e9:2a:97:5c:a1:fe:96:e3:8b:7d:bd:17:88:6b:06:f2:01:eb:
af:06:3b:60:3b:c9:81:98:5f:c8:31:9e:ff:f0:4e:df:05:15:
25:04:40:bc:38:c7:38:b2:14:e7:bc:36:a2:a1:5e:b2:dd:2c:
23:be:a3:de:e7:8a:39:e9:93:60:df:13:fa:e1:8d:ab:e7:97:
5c:17:ba:97:ad:38:b2:e8:67:fe:6d:75:f7:ff:7b:7b:62:2a:
19:d7:58:f8:61:c6:e5:f6:a9:76:3b:4a:5c:cc:85:94:41:5c:
ba:bf:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:16 2026 by rpki-client