
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json)
Hash identifier: LlKCSjgtU3XAbpkX6ZJRFNH5OIFuH7Ybz7bhrXYyKWY=
Subject key identifier: A9:62:84:3B:CE:0F:62:E1:44:9B:B8:DF:02:A1:19:A6:D9:4A:7A:DA
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial: 21E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
Manifest number: 21D6
Signing time: Wed 22 Jul 2026 15:58:17 +0000
Manifest this update: Wed 22 Jul 2026 15:58:16 +0000
Manifest next update: Wed 29 Jul 2026 15:58:16 +0000
Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: U0o33SWUCwWOcsYUj4fdcG1ZFrYVCNkJnho/hLnIetI=)
2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8677 (0x21e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Validity
Not Before: Jul 22 15:58:16 2026 GMT
Not After : Jul 29 15:58:16 2026 GMT
Subject: CN=6a60e899-c1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:12:b5:f1:b7:1a:db:6e:1c:fe:5d:16:76:
88:c5:e4:8f:a6:84:dc:38:80:fe:19:c9:99:96:24:
87:43:3f:db:08:b5:e3:2f:80:dc:6a:bb:6d:6b:7e:
3a:f4:b8:c2:f2:e4:87:46:b7:7e:d8:b5:77:42:e7:
8a:63:df:54:d6:27:38:45:e7:dd:ca:a4:6c:bb:5d:
97:72:a1:09:57:e3:9a:42:0f:da:ff:5e:f9:9e:7f:
b9:ee:1a:1b:a3:0b:13:27:b5:52:a0:26:ba:53:97:
d3:99:24:12:74:18:8b:49:79:06:d6:10:17:b1:1a:
dd:d3:ab:72:fe:45:1b:dd:a9:87:8a:86:01:3f:4b:
25:d1:b5:c3:b0:08:5f:7a:80:d3:4b:a5:e1:f3:74:
19:d6:ad:e8:95:19:56:c9:26:e4:1d:cb:2a:be:6c:
c4:53:12:ab:5b:69:04:76:6f:9e:93:8e:0d:cb:a4:
8e:57:d3:de:ac:67:76:64:67:c1:99:55:76:14:6e:
39:6f:92:0d:fd:c2:92:8b:53:13:e5:32:9a:15:8c:
e5:ee:d8:ec:f0:93:6f:cd:4f:2c:4e:8e:9b:15:78:
dc:f5:ba:1f:fd:8c:de:26:3d:55:31:75:0b:c5:40:
4d:5a:6f:95:8b:27:6f:12:07:13:7d:18:a3:a4:bf:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:84:3B:CE:0F:62:E1:44:9B:B8:DF:02:A1:19:A6:D9:4A:7A:DA
X509v3 Authority Key Identifier:
keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:d0:d9:52:58:d8:77:a7:b1:5f:77:3c:8a:6c:93:b5:a4:
38:74:d3:c1:b3:dd:d9:ae:ca:50:47:8a:7b:31:58:c3:58:0a:
c3:7b:4c:5e:2d:a9:57:50:14:1a:e3:74:f7:69:92:01:42:ff:
84:12:a8:72:21:da:71:21:62:2f:4c:3a:2e:50:26:e2:aa:4f:
f3:4e:42:8e:7a:9d:83:0d:4b:32:78:45:10:28:1b:c7:9c:98:
5b:9f:1e:d6:00:c8:f9:50:60:48:9e:e1:5a:b0:d8:0d:38:d4:
26:9c:65:c1:e8:d8:cf:72:88:9a:48:38:2c:8a:b4:6e:2b:2c:
e6:35:cb:48:c2:ab:a3:aa:3d:63:8e:61:b6:9e:ae:d6:fd:c5:
61:fe:50:d5:d6:f6:e2:e7:fc:50:e7:4a:04:ff:d2:99:c4:1d:
c4:4a:ad:96:1c:69:d8:20:f7:8b:cc:52:88:c9:0d:8f:b0:a3:
87:95:0c:3a:04:3e:03:5a:4c:bb:67:24:a1:0e:85:bf:d3:7b:
8f:38:20:9e:02:df:f2:c9:30:f3:36:3a:62:e9:3e:cd:51:62:
f1:37:e9:c2:c2:be:e1:b8:19:19:8d:93:60:f3:b7:6f:11:ed:
c8:85:00:af:27:cb:4e:7a:0e:ef:c2:da:42:78:fc:28:89:b6:
d4:7b:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:46 2026 by rpki-client