
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier: OuKaZNZt9eSaE+2Z9+aUbVH/CvJpZfkcSLwEThAYl6s=
Subject key identifier: 17:73:C2:78:48:0F:65:E3:6F:6C:7E:97:83:C4:91:F0:67:B6:2B:54
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial: 2611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number: A2A4
Signing time: Wed 22 Jul 2026 14:31:32 +0000
Manifest this update: Wed 22 Jul 2026 14:31:31 +0000
Manifest next update: Wed 29 Jul 2026 14:31:31 +0000
Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: +AiwImRUgcGf+aLKZqaDXWLL6dIyKZ5+Hx6lrk70eXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9745 (0x2611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Validity
Not Before: Jul 22 14:31:31 2026 GMT
Not After : Jul 29 14:31:31 2026 GMT
Subject: CN=6a60d444-ac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:06:13:35:cd:3d:11:9a:de:57:31:ac:cf:
89:9a:a4:8b:72:8b:de:0f:3d:ab:62:94:1d:98:39:
a8:5e:b3:57:02:a9:e4:c9:b1:08:ab:af:87:a8:c7:
dd:b6:f2:d3:38:b7:e9:d7:3a:a0:7a:6d:dd:b4:29:
f7:e6:3f:03:3f:f3:1f:be:69:5e:d9:66:8b:03:61:
cc:12:65:fc:e9:e7:6f:3f:6c:a8:16:32:cf:3e:99:
16:5a:1c:5a:a5:4a:92:80:f7:ee:19:22:9a:4f:9f:
82:44:74:83:dc:5f:cc:b9:01:39:8b:cc:db:02:6c:
07:74:73:00:ad:15:fb:4b:5e:1e:96:f3:13:ff:16:
65:a0:a2:12:59:1f:f0:15:9e:ce:b8:aa:1c:99:f8:
89:9d:f9:3c:a5:f9:b4:79:ce:ab:61:c1:53:fa:8d:
ae:7e:38:38:8a:08:0d:a1:b5:6c:77:52:52:d9:e0:
79:82:80:6e:ab:40:ed:e6:7d:7b:d6:1e:1b:10:68:
59:54:ff:28:c4:df:f5:ca:78:93:41:99:ff:e2:1e:
59:f6:46:61:e0:e2:49:58:66:5e:f8:68:52:82:0d:
f8:a3:a1:67:b7:b2:32:58:96:44:ae:e3:f6:c9:40:
67:56:77:c7:59:e5:b7:41:93:19:16:85:a8:aa:6a:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:C2:78:48:0F:65:E3:6F:6C:7E:97:83:C4:91:F0:67:B6:2B:54
X509v3 Authority Key Identifier:
keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f5:28:9c:51:f3:4b:0a:c5:1f:45:13:10:c7:59:b6:3d:45:
bd:55:86:db:30:54:41:48:e5:71:24:c6:fb:05:29:c4:0a:61:
06:7f:69:04:86:37:15:3c:6d:d5:ea:b7:e9:22:2a:f1:f4:4c:
5f:02:0c:dd:bc:f0:90:e0:53:a2:e4:06:61:46:4f:eb:b2:44:
e9:f4:a9:ac:8f:21:2c:54:83:67:31:18:90:8c:b1:24:f2:3d:
cf:a7:52:99:4d:54:15:39:4a:a0:91:38:83:e3:d1:c6:59:b9:
66:ea:16:50:85:88:17:df:af:87:cb:c0:c7:86:d0:df:f3:ac:
f1:60:77:f3:3c:47:32:66:2b:55:ff:a7:f4:12:8e:97:b8:06:
70:ec:e9:52:08:b5:a2:22:1a:31:4f:bc:d7:f0:04:ea:ae:40:
e3:88:1d:21:85:4b:77:f9:99:28:7b:3c:85:e9:a0:d3:4d:a3:
25:93:4c:cb:90:f5:41:b6:44:bf:83:8a:49:9d:e5:19:44:39:
30:01:9b:2c:31:2d:ca:2f:6d:72:48:71:5f:87:fa:43:58:04:
f5:0c:a6:83:db:b6:f4:68:4b:53:a5:ad:34:94:ef:06:b8:ec:
f3:3b:88:06:4d:ab:6d:e6:2c:1e:e9:c0:a1:41:a2:d4:74:88:
4a:b1:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:59 2026 by rpki-client