
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: dGtxtGLwI0cjTeqOUlAVq8W7xB/dNjvrUd0AIBTHNWs=
Subject key identifier: 97:E3:26:55:93:EE:31:0B:1A:89:B8:18:17:FB:22:C7:27:41:E1:F7
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 0483
Signing time: Thu 23 Jul 2026 00:53:56 +0000
Manifest this update: Thu 23 Jul 2026 00:53:56 +0000
Manifest next update: Thu 30 Jul 2026 00:53:56 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: 8WDAyfguK6RFor11gvqbBOKjhoSa8kNC80UoPMCbjeU=)
2: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
3: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
4: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Jul 23 00:53:56 2026 GMT
Not After : Jul 30 00:53:56 2026 GMT
Subject: CN=6a616624-6c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:a7:92:83:78:37:f1:b8:b1:5d:ac:91:84:
8e:67:27:3f:c4:94:34:fb:d3:aa:40:ae:ee:d7:79:
5b:bc:db:f9:2a:6b:f3:32:d4:05:e1:29:22:ea:f1:
d5:be:39:d1:24:b6:0e:4e:ce:8d:45:b3:21:be:ba:
d1:84:2b:bb:aa:09:5b:50:b0:4d:80:86:2e:cf:a3:
7f:d6:84:e1:84:3b:27:e4:0a:c8:f2:49:7d:f1:fc:
59:f0:b3:50:e0:3e:49:12:28:6b:e8:63:08:d4:2b:
4c:54:76:d2:8e:85:29:bd:11:de:2f:85:ef:61:26:
64:58:a9:5b:b9:ba:1e:b6:72:87:b9:0e:3e:af:d3:
55:c6:9a:85:aa:1c:2e:65:79:1f:6e:34:a5:b8:a6:
ed:10:b4:5a:54:78:ed:13:ec:d1:de:14:be:1a:2e:
a3:f8:4a:e1:ba:d8:ee:b1:4c:3f:eb:a3:d8:ea:33:
3a:38:ad:57:34:c5:63:e8:fe:ee:28:20:27:c2:58:
37:53:03:c3:01:0d:3c:0c:43:0c:9d:12:59:5a:6c:
e8:24:bf:1d:59:ab:02:7f:4e:dc:0c:41:20:0b:d2:
4e:d4:f0:d7:27:4d:00:55:8a:8d:c9:c3:05:62:97:
5c:f5:91:48:6f:fd:5d:10:a1:01:5b:0a:41:62:fa:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:26:55:93:EE:31:0B:1A:89:B8:18:17:FB:22:C7:27:41:E1:F7
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:ec:f7:7c:81:7a:fc:0f:90:87:9e:88:63:61:d6:5b:ee:
fe:75:a6:ef:cc:a7:31:38:74:e5:a1:1e:a4:8f:77:62:3e:da:
2a:1e:04:a7:a1:d3:e5:b7:59:9f:5f:41:02:8a:e5:7f:5c:62:
49:ef:5e:dc:2e:86:db:3e:b1:90:61:92:7c:98:cb:23:4b:96:
65:b9:bf:89:fe:ea:52:fe:3a:2d:9d:f5:9d:e1:6a:f8:01:6d:
a4:d9:6b:9a:da:4c:53:e1:b7:5a:f4:05:0e:db:6e:20:77:49:
c0:12:5f:f2:16:83:63:56:00:e6:50:c7:0b:60:36:68:94:e3:
1c:91:7a:58:9c:e2:bc:7e:0b:db:00:f6:92:0e:a7:4e:93:85:
c5:40:9a:0a:9d:67:a5:f8:50:4f:95:ba:49:fb:39:ab:dd:f9:
4d:34:f1:87:c6:01:33:52:10:c5:c5:dc:ba:87:1a:80:99:6f:
77:78:40:f5:7b:71:2f:14:2f:a7:f8:15:54:f3:19:10:09:da:
fc:37:9c:4c:3c:3e:34:28:3c:9a:6b:a2:15:5c:18:a5:69:3d:
39:fb:fe:9f:36:33:7e:de:61:35:bd:8d:e3:78:e3:88:68:ed:
8b:51:80:ca:83:f5:36:de:d6:7a:19:f5:91:9e:71:12:17:59:
98:86:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:42 2026 by rpki-client