
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: AQlM0ML7Q4zlmFZPPLLK8ELcJEmFZ50NRQlrViIz9LA=
Subject key identifier: C8:1C:B5:42:4E:1D:62:95:07:66:C9:75:86:95:2D:41:A8:9E:99:06
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 016B
Signing time: Thu 23 Jul 2026 06:26:08 +0000
Manifest this update: Thu 23 Jul 2026 06:26:07 +0000
Manifest next update: Thu 30 Jul 2026 06:26:07 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: +PnmFU5QlwmZt89uOVSW5IrUzsp0a6jCboYtUicY7rU=)
2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=)
3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Jul 23 06:26:07 2026 GMT
Not After : Jul 30 06:26:07 2026 GMT
Subject: CN=6a61b400-a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:42:b7:dd:d0:b2:2b:ff:a0:30:55:9e:ba:
fd:81:26:62:62:5e:7a:47:4a:c6:ab:b4:11:58:5b:
f4:59:be:03:4b:03:75:bb:db:84:dc:85:83:89:5e:
4b:86:02:b8:e0:d6:31:23:46:5f:24:41:dc:ed:ea:
a8:ab:09:90:b7:fc:53:be:c5:6f:a2:8c:7c:ff:62:
30:f8:d3:9e:72:58:ee:3e:9a:ab:60:84:70:06:ef:
45:cc:cd:1e:67:52:be:37:a8:45:62:cc:a8:f9:0e:
92:93:27:87:ea:a7:bc:98:d0:72:d0:8a:dc:3e:ac:
d8:f6:72:c3:e1:5e:6f:5b:b5:e0:8c:88:8a:d8:21:
c5:43:f8:a1:8e:36:30:85:ab:c6:40:a9:9e:24:68:
bc:d8:18:43:89:3e:2a:7e:ce:64:a8:22:8d:b5:18:
4a:6b:fc:d3:d2:ca:bf:df:26:51:7b:9d:e6:2c:a4:
ed:dd:3d:69:77:bf:6e:d5:b2:dd:3c:f8:46:bd:23:
ef:59:3a:22:66:83:91:8b:68:46:e3:63:a7:4d:95:
54:58:8c:f8:b8:22:b5:83:af:bc:ad:c6:ee:59:8d:
a4:0d:63:4d:4d:01:27:65:2e:ee:db:79:2e:8a:c7:
1a:69:2c:a7:5d:e7:ff:7f:a2:71:4a:b7:a7:7e:71:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:B5:42:4E:1D:62:95:07:66:C9:75:86:95:2D:41:A8:9E:99:06
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:7e:48:81:96:42:27:63:44:26:5a:e6:03:4b:dd:6e:f1:
82:38:45:93:6a:fd:58:96:ec:cb:05:92:98:dd:39:5c:3c:27:
b4:8d:d6:da:ac:41:e1:83:64:c4:e4:6c:5c:9d:90:b4:a9:2f:
ed:a7:84:80:ca:b3:4e:ba:dd:d7:50:0a:1e:14:02:1f:64:c6:
aa:88:05:bb:ba:f1:55:cb:0f:65:e1:90:84:ef:c0:10:e0:6d:
33:83:ba:27:03:52:34:f3:7d:f6:46:7c:41:dd:e3:5c:71:1d:
30:20:f3:75:05:a6:59:ae:14:09:3e:d8:45:41:53:ba:73:4b:
84:b1:9d:10:2b:fe:2a:b1:2c:41:6b:dc:03:6f:19:57:b7:6b:
0d:51:e3:3a:b4:aa:22:76:46:70:69:97:10:52:af:a5:20:0a:
97:cd:56:79:64:c3:12:6f:46:f4:37:3e:72:21:9f:d9:46:a7:
62:7b:9d:fe:17:d8:2d:1a:3e:d3:f1:4c:fd:9b:a9:26:24:36:
1d:6d:83:84:e2:77:1d:f7:f1:d3:26:3b:0c:62:40:5d:53:dc:
7d:56:bc:ed:42:34:b3:c3:16:d1:61:43:ee:0a:b5:6c:b9:19:
9f:23:78:65:88:b9:31:ed:8a:26:b4:d0:96:71:a4:38:f8:1b:
09:0c:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:56:50 2026 by rpki-client