
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier: TiPETgsPmiSpR0UksTR7fCS1+zvoiYFPyEQqrYamg5k=
Subject key identifier: 7F:DB:74:A0:D7:91:D2:43:C3:88:3D:5F:2B:8C:99:E5:A1:B8:03:1F
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number: 60
Signing time: Thu 23 Jul 2026 10:16:17 +0000
Manifest this update: Thu 23 Jul 2026 10:16:17 +0000
Manifest next update: Thu 30 Jul 2026 10:16:17 +0000
Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: X4BfUShs8gNSpXzfDtDzxlerFTvnoq9revNZh4g04mY=)
2: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
3: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Validity
Not Before: Jul 23 10:16:17 2026 GMT
Not After : Jul 30 10:16:17 2026 GMT
Subject: CN=6a61e9f1-1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:e9:13:44:7f:83:96:ae:ec:ea:6f:bd:f4:
e3:c6:28:a4:d7:d4:fd:a2:44:24:0a:17:a0:6c:1e:
32:38:fa:0f:c7:6e:db:c0:c1:01:d7:77:5a:d3:d3:
d7:ec:33:dc:bb:c2:cb:25:69:77:07:f9:e7:aa:54:
4f:88:d7:7f:94:89:14:ee:ae:43:9a:8d:fb:cd:e5:
6d:05:fd:2f:91:99:60:bb:e8:e8:c0:19:6a:39:97:
3f:89:e8:91:fc:1f:69:bf:ea:0e:19:90:a4:35:83:
1a:a7:56:c6:d8:87:67:e8:28:78:14:4d:44:fd:3f:
ed:6c:27:8a:dc:bd:2c:e8:ce:13:12:f6:2a:84:76:
08:3b:a0:35:e2:36:0a:0f:ac:74:4b:a1:07:41:48:
79:9d:f9:c2:08:62:ff:d5:7d:25:1f:20:6f:b7:82:
bf:c7:f3:37:56:cd:1a:d6:08:5b:6d:f3:33:c3:ae:
67:ee:c6:77:8d:09:40:de:ea:1b:0d:ae:6c:67:27:
8d:d9:10:a6:30:db:2a:0d:2b:53:1a:1a:33:07:ae:
c7:13:83:d7:be:63:63:6f:df:4a:fb:69:d5:2a:50:
4f:2a:11:08:3a:0f:9f:48:61:56:6a:e0:d1:d1:16:
99:5a:38:a8:d5:79:f1:93:44:45:e5:83:c0:1e:63:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:74:A0:D7:91:D2:43:C3:88:3D:5F:2B:8C:99:E5:A1:B8:03:1F
X509v3 Authority Key Identifier:
keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:2d:66:2a:80:da:5c:d7:be:4d:23:90:ed:1c:9e:ec:ba:
94:0d:d0:5f:96:c6:73:10:cd:fc:b4:a1:9f:00:b4:1b:cc:7b:
5b:d2:e8:1c:ee:df:c8:2f:0c:b1:69:0a:21:00:5a:78:cf:a2:
26:36:da:a5:8c:53:91:0e:7f:ad:10:e5:3e:5a:b8:e2:3e:61:
a1:e5:51:8a:1e:b2:e5:eb:8e:b9:0b:61:f4:88:48:8c:9d:24:
c5:48:e3:dd:be:a6:e8:27:ef:1b:78:92:8f:52:7d:a5:89:6c:
20:83:38:75:a9:59:31:cf:5b:85:26:39:1f:6d:8b:b4:cc:76:
22:03:bf:e3:b1:b0:0c:ba:ae:c3:0e:3e:44:3b:7b:e7:5a:fa:
19:c6:a7:5b:91:06:52:14:03:e1:0b:53:18:28:bd:01:09:8c:
55:13:0a:c9:e1:aa:5f:eb:25:e9:f2:a2:30:ea:44:82:db:26:
b7:6a:86:7a:7e:6a:cf:f7:67:01:63:7b:14:9c:e4:49:19:04:
63:82:fe:a7:07:1a:86:a5:f3:77:c6:34:be:92:1c:73:ad:5d:
76:f0:1a:97:17:26:d4:46:87:1c:0b:b2:a2:da:a6:76:fd:74:
c9:57:e4:e6:3c:38:8e:8b:d0:c9:68:b4:2e:67:fd:a2:85:f6:
57:c2:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:26 2026 by rpki-client