
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: +8hASqkzpA/BKvFWwxtpcHfdhBzbO5xqrWd0LjBoQrE=
Subject key identifier: DE:EC:BE:11:24:7C:34:E0:1B:76:D9:AE:29:B7:FB:19:66:12:85:B0
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 07B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 07AE
Signing time: Wed 22 Jul 2026 22:04:04 +0000
Manifest this update: Wed 22 Jul 2026 22:04:04 +0000
Manifest next update: Wed 29 Jul 2026 22:04:04 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: 8f29hIW09M4wlf7BfMjW+N8V4BrZdOxT6S/25dKWWk0=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Jul 22 22:04:04 2026 GMT
Not After : Jul 29 22:04:04 2026 GMT
Subject: CN=6a613e54-dea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:a9:f6:62:31:47:94:f5:36:dd:3d:df:a4:
85:8e:e4:d2:20:4d:90:5b:46:d1:a5:b9:e0:e7:38:
58:58:cd:97:1c:35:bb:ac:ba:72:b4:21:e1:9f:0b:
e7:0c:a9:ff:90:8a:88:6e:af:ac:5a:ba:7f:7b:c4:
7f:68:79:7e:9c:45:b8:78:4c:44:7a:6f:8a:b7:9c:
af:56:e2:ea:2b:1b:15:40:0b:71:2d:b3:1d:10:9a:
f4:1d:dd:6a:c4:db:4c:d5:0e:5e:00:8a:c6:75:78:
1b:49:d9:62:a1:97:a9:a6:2d:8e:36:55:e5:93:b7:
81:3d:ea:ef:de:12:a1:01:90:39:5b:dd:40:29:ad:
0a:77:43:2b:12:b4:59:cd:96:67:0a:9f:af:21:aa:
78:b3:8a:a1:50:90:0f:aa:b4:19:47:ee:18:aa:0b:
b3:44:86:d4:79:3c:c7:bf:65:d8:ee:f5:66:2c:ce:
84:fb:e0:fd:42:b9:05:4b:4e:34:67:d3:0f:81:3f:
05:93:93:49:cb:cb:04:35:ac:f1:d5:9d:63:fd:15:
4c:27:7a:df:55:3e:22:ba:61:f8:b8:c2:6b:7e:94:
89:8f:e9:9e:22:08:28:d8:1f:42:f9:86:34:52:b4:
14:da:f8:42:f4:b9:61:ae:7a:ea:34:15:b6:a8:56:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:BE:11:24:7C:34:E0:1B:76:D9:AE:29:B7:FB:19:66:12:85:B0
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:6b:0f:f3:e1:5c:2b:4d:35:2c:78:89:98:48:82:8f:55:
46:cc:cd:0c:a3:64:52:65:bc:ad:eb:17:3c:45:12:43:4a:d4:
14:c8:1b:3b:ce:96:dd:71:38:48:f2:b9:ad:55:87:11:9c:4e:
1a:66:11:e1:f4:c8:cb:7a:04:e1:32:c5:47:80:ae:61:5e:8c:
c4:ff:bc:df:0b:14:4e:e2:6a:62:0a:aa:b0:27:b6:29:0d:49:
76:12:a7:60:4a:4b:f1:ca:2b:e0:3e:e7:fc:13:f4:70:59:dc:
5e:23:55:51:1c:f4:70:44:a1:db:62:2e:55:10:58:52:51:48:
d1:33:d0:25:99:6f:6f:92:27:72:a0:c8:9d:4b:75:b6:e0:3d:
75:6c:64:fb:7b:1a:be:4a:a9:47:cf:ce:c2:9e:3c:92:8d:3c:
26:47:44:d1:e0:e1:6f:a9:5b:87:73:eb:f4:34:ac:86:2a:48:
31:ac:b2:9b:0b:1e:bf:04:35:fa:95:41:cc:70:12:9b:a1:e5:
d3:fa:67:95:79:ad:78:a2:d0:6e:8b:46:9c:5f:f9:02:46:a9:
25:17:58:3c:04:05:7b:bb:dd:11:eb:b2:9d:0a:8d:98:e1:04:
26:cb:bf:77:6b:02:da:32:cc:a9:dc:d2:51:44:24:92:68:da:
2a:e6:53:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz
NUNDNTI2MjMwHhcNMjYwNzIyMjIwNDA0WhcNMjYwNzI5MjIwNDA0WjAYMRYwFAYD
VQQDEw02YTYxM2U1NC1kZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxeOp9mIxR5T1Nt0936SFjuTSIE2QW0bRpbng5zhYWM2XHDW7rLpytCHhnwvn
DKn/kIqIbq+sWrp/e8R/aHl+nEW4eExEem+Kt5yvVuLqKxsVQAtxLbMdEJr0Hd1q
xNtM1Q5eAIrGdXgbSdlioZeppi2ONlXlk7eBPerv3hKhAZA5W91AKa0Kd0MrErRZ
zZZnCp+vIap4s4qhUJAPqrQZR+4YqguzRIbUeTzHv2XY7vVmLM6E++D9QrkFS040
Z9MPgT8Fk5NJy8sENazx1Z1j/RVMJ3rfVT4iumH4uMJrfpSJj+meIggo2B9C+YY0
UrQU2vhC9LlhrnrqNBW2qFbqzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7svhEk
fDTgG3bZrim3+xlmEoWwMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1
N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM
a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANaZrD/PhXCtNNSx4iZhIgo9VRszNDKNkUmW8resXPEUSQ0rUFMgbO86W3XE4
SPK5rVWHEZxOGmYR4fTIy3oE4TLFR4CuYV6MxP+83wsUTuJqYgqqsCe2KQ1JdhKn
YEpL8cor4D7n/BP0cFncXiNVURz0cESh22IuVRBYUlFI0TPQJZlvb5IncqDInUt1
tuA9dWxk+3savkqpR8/Owp48ko08JkdE0eDhb6lbh3Pr9DSshipIMayymwsevwQ1
+pVBzHASm6Hl0/pnlXmteKLQbotGnF/5AkapJRdYPAQFe7vdEeuynQqNmOEEJsu/
d2sC2jLMqdzSUUQkkmjaKuZTMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:42:57 2026 by rpki-client