
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json)
Hash identifier: y7MiQNKQCnqjIRA7yHNncpuxIir7LCs4xo+bA2Mu3lE=
Subject key identifier: 01:40:E7:C4:6E:8F:32:1B:95:72:84:89:48:D4:8F:C3:1C:77:BC:75
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
Manifest number: B8
Signing time: Thu 23 Jul 2026 08:57:44 +0000
Manifest this update: Thu 23 Jul 2026 08:57:44 +0000
Manifest next update: Thu 30 Jul 2026 08:57:44 +0000
Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: 5vCcuew31ikPBKFz295/EUee8Mxx1HcTTY8wXZWCiDY=)
2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: LK3Fx9ZDOnbQgLdeGCFpJxId6+acwMWw9HvmZv77xfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Validity
Not Before: Jul 23 08:57:44 2026 GMT
Not After : Jul 30 08:57:44 2026 GMT
Subject: CN=6a61d788-64bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:6f:8d:b4:4a:10:69:f3:63:26:30:ce:ec:
04:35:37:d0:c8:b4:43:e8:53:a8:86:70:2f:f6:9f:
bb:da:82:c8:68:b6:8b:06:d9:99:1e:0b:54:c5:8f:
93:8b:97:5f:d6:fd:44:0a:27:ce:0c:d6:53:ab:24:
3c:1e:67:84:f6:78:dc:05:e0:e0:a5:4f:71:00:a8:
4e:75:92:19:c2:e2:1d:6b:ae:e7:c5:87:dc:00:ac:
ac:76:27:f2:51:f7:24:c5:1b:11:0c:2c:b6:b7:68:
9c:98:21:34:b2:df:c5:2d:7f:ea:8d:16:40:ff:fd:
62:66:a4:21:0f:a7:6d:17:f8:9f:09:a1:73:98:ee:
fc:54:28:5b:60:00:eb:55:3a:52:30:92:bb:ab:44:
d3:88:de:75:07:51:aa:28:5d:a7:b8:e3:10:d5:c6:
c5:ba:c3:42:e3:7c:8e:09:74:74:ea:51:8c:22:db:
b2:9c:22:f0:c9:b4:4d:29:61:e9:79:f3:98:8e:12:
bd:25:e6:96:dd:68:b4:4a:04:ee:c2:c5:aa:90:f2:
ac:9e:fa:09:66:11:04:4e:08:03:38:a2:f9:53:d6:
28:9e:5a:0f:d0:90:ea:85:14:95:54:ac:38:98:8a:
f1:c2:3d:d9:7e:e2:fe:0e:05:39:a0:2b:37:08:b6:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:E7:C4:6E:8F:32:1B:95:72:84:89:48:D4:8F:C3:1C:77:BC:75
X509v3 Authority Key Identifier:
keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:88:e5:ac:e4:9f:f3:08:ab:ae:c2:4f:be:bb:40:51:8a:
fe:f8:84:5f:23:17:b8:0e:b4:e1:df:ac:db:e6:02:66:c9:11:
b5:ad:dc:4c:f1:81:64:e5:70:58:78:60:d2:25:61:84:bc:3c:
f0:6e:3a:4d:a7:4b:32:3d:ca:1a:44:c2:7d:09:88:6d:62:2c:
71:dd:15:89:b8:72:93:4a:75:78:07:08:60:1c:d7:c3:45:d6:
6a:1b:fe:4e:b1:d0:bf:0d:a9:d8:87:19:89:d7:4f:2c:7c:bd:
ef:85:d8:ff:3e:98:3d:26:cb:f2:bc:56:59:cf:f7:54:0d:fa:
0e:a5:6d:e9:25:d7:58:f9:21:69:3f:e9:8b:56:e7:ab:09:d2:
23:78:1d:c8:45:05:3d:d5:a4:aa:46:5a:85:91:64:c4:ce:6b:
26:65:19:08:40:07:39:66:80:cc:cf:77:0d:2e:e8:5b:9a:be:
4e:89:84:2d:c8:d3:7b:20:9d:4e:b7:4f:40:31:90:fb:26:ad:
49:fd:d3:a9:a3:82:79:53:ef:06:cc:b4:65:b4:26:b4:bb:5a:
4e:63:0d:e6:1c:a8:b8:62:a6:09:2d:38:14:6e:35:a9:a6:c0:
77:fc:e6:f0:b0:a6:1a:bd:ef:2f:17:bf:63:c1:db:b9:2d:8a:
a1:91:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:08 2026 by rpki-client