
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json)
Hash identifier: eHWBYJENvdXhLuhZZgljQ5AHkV54lrpVt3HDc7mODvw=
Subject key identifier: F0:EE:6B:90:A6:92:BE:29:5A:E9:E0:B2:47:EB:79:E7:59:0B:ED:D7
Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Certificate serial: 0E3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
Manifest number: 0E32
Signing time: Wed 22 Jul 2026 17:59:22 +0000
Manifest this update: Wed 22 Jul 2026 17:59:21 +0000
Manifest next update: Wed 29 Jul 2026 17:59:21 +0000
Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: 0a02/qHk3tODrHqF0Oh7aAn6PgemdCXhYg4yurDUGpg=)
2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0
Validity
Not Before: Jul 22 17:59:21 2026 GMT
Not After : Jul 29 17:59:21 2026 GMT
Subject: CN=6a6104fa-9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:30:ba:5d:de:ea:8f:59:16:91:7e:49:4c:
d4:9e:c4:92:80:0c:1b:76:c9:fe:51:b9:98:7e:86:
3a:37:72:c2:ad:fa:19:5c:25:7a:f5:e0:d3:89:5a:
90:1b:35:09:92:85:96:65:29:9b:9a:0d:8b:1b:19:
aa:bd:11:01:4d:c2:e3:85:e4:70:92:64:db:fd:bc:
33:a5:53:4b:1b:4c:d9:de:67:ed:18:9d:6d:29:46:
5c:ce:3b:c9:c0:f5:e1:65:8c:26:12:07:4b:b9:08:
b5:93:4e:47:30:c5:b7:3c:80:b0:e3:51:d2:04:69:
9b:21:66:04:16:a6:76:bc:59:a0:21:5c:66:01:4a:
6f:81:4a:62:70:ba:85:eb:ef:6b:7f:ab:dd:05:33:
04:e5:47:84:9c:e5:5a:aa:9d:25:c8:d8:10:89:d1:
8f:40:c0:c0:df:7c:e1:c1:25:1d:87:b1:43:6f:34:
28:74:3c:db:88:ea:b6:cd:c9:f8:c7:81:fe:85:09:
91:6a:7b:67:9d:ec:82:08:f1:b4:a4:55:08:4f:60:
9e:30:8a:25:96:62:2e:a3:2b:77:77:49:e2:cb:bc:
27:ab:2c:e4:49:c4:f4:ef:67:a1:37:6e:87:96:61:
18:4d:2c:f7:e0:c9:8e:1d:f4:ed:c4:3f:c2:7d:11:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:6B:90:A6:92:BE:29:5A:E9:E0:B2:47:EB:79:E7:59:0B:ED:D7
X509v3 Authority Key Identifier:
keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c7:12:78:a4:c9:5e:3d:47:f0:bf:b9:1e:8e:fd:6c:28:ac:
80:0e:19:a6:2b:c7:5f:39:ff:c5:dd:cd:2c:c7:96:ae:c6:d3:
c7:cd:ad:05:71:0a:20:e1:79:eb:b1:2d:91:e0:a9:b9:3a:b9:
6a:e4:4a:ab:26:00:e4:a4:24:a1:9a:2f:11:73:c1:3b:63:1f:
da:49:0c:1a:fa:ef:82:0e:13:8b:03:90:43:16:40:ca:f1:bc:
27:c6:ea:56:f0:08:9d:fd:49:e2:63:be:db:21:c6:a3:ed:b9:
10:1f:f3:b5:88:bb:15:a2:3d:8b:eb:4d:67:de:ea:70:52:b2:
d7:a5:e7:49:8c:1e:59:5e:43:7b:b5:75:de:8d:37:ce:bf:b7:
71:89:b2:cf:55:e7:3f:4e:d9:78:ea:d4:71:1a:d2:13:06:0a:
8f:e4:73:3d:34:d0:99:79:8f:3d:e5:54:cd:5d:7b:12:ab:45:
8a:7c:63:f3:42:15:ea:3c:5d:24:f2:0d:74:e4:9c:2e:7e:ab:
f9:37:75:26:9b:ea:ca:0f:84:96:1e:ee:ce:fa:ab:24:62:06:
a9:70:58:61:79:40:89:f2:c3:92:72:4d:72:6b:b4:95:3f:09:
ee:e7:02:4a:9f:60:aa:fc:07:86:96:c3:f1:47:f9:87:35:25:
0a:ce:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:32 2026 by rpki-client