
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
File: tDpaYNRoBqaf_vfGdiGexLqLo20.mft (raw, json)
Hash identifier: VkGhGjkVTLZUBpCEe4gEdz8ddAwkU72M7LWQJEy8PZ8=
Subject key identifier: 28:6E:1D:9E:D3:14:33:B7:ED:BC:5F:2C:E5:AC:5C:11:BD:07:31:74
Authority key identifier: B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D
Certificate issuer: /CN=A91E2AE5/serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
Certificate serial: 2C6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
Manifest number: 2C47
Signing time: Fri 24 Jul 2026 15:37:33 +0000
Manifest this update: Fri 24 Jul 2026 15:37:33 +0000
Manifest next update: Fri 31 Jul 2026 15:37:33 +0000
Files and hashes: 1: tDpaYNRoBqaf_vfGdiGexLqLo20.crl (hash: BvC0rs05zhLaNlmEveeDk3xhLsrJoov6SOT3wj8NzXU=)
2: 43487B18BF1811E9A2C00E63C4F9AE02.roa (hash: iD/ZZuFi7/RhaL5/ToA8PIzL2/6qCFz6N1JbxCrgnXQ=)
3: 2815E7D4BF4211E9A93A3957C4F9AE02.roa (hash: HzrAoaY9JYPA2q5sXzU/LWx/s6FAhl2YIVATDmW8pSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11375 (0x2c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=B43A5A60D46806A69FFEF7C676219EC4BA8BA36D
Validity
Not Before: Jul 24 15:37:33 2026 GMT
Not After : Jul 31 15:37:33 2026 GMT
Subject: CN=6a6386bd-d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:4e:2a:c0:fd:06:7d:dd:6e:d3:a1:f3:8b:
a9:76:aa:26:18:0d:3b:37:fb:90:f1:fd:71:36:60:
c5:7d:dd:ea:33:80:b0:23:02:19:27:2b:66:01:2f:
97:b2:34:1a:22:da:bf:86:53:f5:dd:20:bf:16:fb:
57:c1:d8:35:a9:91:f2:25:6a:32:34:9f:fa:9d:b4:
e9:1c:80:7a:2a:ac:84:da:24:13:d4:53:42:19:62:
ab:89:f1:bb:ea:f9:e6:d3:ce:ce:be:1a:5b:ff:d7:
1b:68:a3:1c:68:80:72:6f:c3:35:f6:99:af:6f:32:
f6:8a:80:ba:77:e0:01:e1:f5:e6:78:36:b3:08:e2:
9e:13:3f:1e:bb:6f:bd:39:de:35:69:08:04:b3:96:
71:ba:9a:02:a2:9e:04:d0:e5:2e:9a:72:2b:53:b4:
80:89:42:71:21:c1:0f:19:c4:e7:d7:a0:e5:84:16:
62:b2:89:7a:3c:58:87:8b:a5:2d:14:3e:8d:2d:1f:
b3:7a:b8:07:b8:41:0e:8d:41:c3:b9:26:ca:75:ab:
3b:5e:26:99:3b:f5:a1:a0:0a:01:08:66:3b:a6:6d:
29:95:e6:d6:cb:0e:fc:ab:f9:9d:bb:d7:b9:02:73:
40:71:ad:f9:3b:8b:d4:6d:05:e4:33:e6:38:43:15:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6E:1D:9E:D3:14:33:B7:ED:BC:5F:2C:E5:AC:5C:11:BD:07:31:74
X509v3 Authority Key Identifier:
keyid:B4:3A:5A:60:D4:68:06:A6:9F:FE:F7:C6:76:21:9E:C4:BA:8B:A3:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tDpaYNRoBqaf_vfGdiGexLqLo20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/8D3E54EAED5911E3B09011925911EA32/tDpaYNRoBqaf_vfGdiGexLqLo20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:bf:99:bc:9a:cb:2c:6f:b1:e6:9d:d6:56:c0:49:7a:1b:
93:3e:4f:9c:f0:51:51:f4:36:25:b8:78:40:a8:77:2c:f1:38:
30:5b:97:3f:12:9a:72:0a:5d:9d:e9:92:77:97:70:3d:78:73:
72:47:4c:fb:02:52:3b:0f:f9:b6:34:f8:b4:d0:11:ac:12:2a:
59:b4:5e:33:cf:ff:e3:19:51:72:b2:9d:ba:25:1e:ad:d2:12:
dd:6f:49:0f:7a:49:dd:d8:e4:55:32:db:f4:72:5d:f1:8c:4e:
e1:dc:64:33:07:fb:44:0b:a4:20:5d:c0:90:99:92:0d:46:e6:
8d:75:ef:f0:97:dd:75:06:e6:59:1c:e6:09:b6:12:2e:15:e9:
8c:1e:89:06:e4:81:1d:23:d4:89:e2:6b:60:40:44:cc:c4:97:
c1:6a:84:a8:4e:24:6a:62:90:33:bc:5d:56:10:c2:ee:79:59:
af:1f:8c:f7:b0:fa:cf:89:0f:85:94:1f:14:d0:df:ea:68:b5:
08:b4:e5:b7:4a:df:ce:a8:ae:15:7a:b1:9f:20:f4:c3:dd:24:
51:55:7b:72:14:fd:17:0d:3b:7d:15:68:54:bd:5f:54:7d:23:
80:b0:5f:3f:5e:6f:c0:13:4f:6a:af:32:72:14:b7:d3:30:32:
49:ad:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:54 2026 by rpki-client