
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier: OrfcSAfP5ilV81v+S/RKNx1CQuFYCIeUFcvlz8WyrVA=
Subject key identifier: B0:1A:EF:1B:29:DE:CF:35:CE:12:81:4E:7E:8F:0E:C0:07:8A:A3:D8
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial: 1CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number: 1CB7
Signing time: Wed 22 Jul 2026 16:14:50 +0000
Manifest this update: Wed 22 Jul 2026 16:14:50 +0000
Manifest next update: Wed 29 Jul 2026 16:14:50 +0000
Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: wqHDWXFyqzYjXqb36sG+BVN8R/xRYt4qgl5ofQCBffQ=)
2: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=)
3: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7373 (0x1ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Validity
Not Before: Jul 22 16:14:50 2026 GMT
Not After : Jul 29 16:14:50 2026 GMT
Subject: CN=6a60ec7a-053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:ca:55:62:b9:aa:90:0e:8a:bd:43:b2:a0:
89:c6:8f:c5:fb:57:08:6d:36:01:c3:cb:91:06:81:
d5:d5:67:5c:5a:26:af:53:2a:cb:44:31:89:7f:b8:
37:08:4a:6d:38:d0:84:6b:ac:bf:33:f2:95:8f:92:
3f:c4:7f:6c:2a:0c:fe:a2:57:94:ae:63:6d:54:eb:
d6:af:1d:2a:48:ce:fa:6f:44:6a:0e:32:02:12:cc:
2b:f6:71:b7:90:ed:be:e3:95:76:7f:18:37:bf:cd:
1c:2c:b9:db:8d:b2:6e:35:2e:32:3d:c1:3e:e1:e5:
e0:eb:e4:a0:0e:3f:a8:81:3f:fa:ee:6c:06:63:b4:
8d:5b:53:95:43:cf:4c:6f:43:50:a6:c6:08:b5:17:
72:5d:56:ab:57:a4:3a:1c:5b:24:7a:e3:d6:20:d6:
ee:44:39:7d:39:87:39:ba:95:32:b7:e8:ab:c8:62:
14:cc:e1:9b:2e:f5:1a:4b:3b:43:8d:ec:49:95:2a:
ba:be:b6:ba:18:79:6e:67:8d:ff:50:0a:36:2b:26:
23:a8:70:b5:8d:38:41:bb:9c:3e:14:bf:96:6d:05:
dc:f6:72:26:98:5b:f8:84:08:14:c5:41:d4:6c:d4:
26:6e:1e:ab:ec:2a:8a:b2:5a:83:67:86:ed:74:84:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:EF:1B:29:DE:CF:35:CE:12:81:4E:7E:8F:0E:C0:07:8A:A3:D8
X509v3 Authority Key Identifier:
keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1c:a5:a9:35:b6:36:bf:35:41:ab:df:be:2d:97:b2:be:7e:
52:9c:bb:ce:36:bb:2e:62:cd:60:d2:7a:bd:ed:39:cd:51:b0:
4d:4f:37:f2:62:88:56:6a:0c:ff:58:a5:9b:0c:66:f8:cb:af:
ba:7f:32:57:ed:24:8a:4b:9c:5c:de:f0:c3:f4:65:dc:55:65:
11:3b:54:d1:fe:05:8b:3a:f3:f6:8c:59:d4:99:77:cd:81:b3:
9a:11:28:b5:f0:08:ae:02:45:79:c9:05:cf:c5:85:a3:15:23:
37:e6:48:e7:cb:c2:60:88:c0:95:80:8e:8f:d7:3e:d1:06:e2:
13:67:72:74:83:4c:bd:69:d7:ce:eb:1a:45:02:fc:c0:ec:04:
42:41:28:2e:8a:c1:f7:fd:fc:b8:f3:28:7d:a3:46:78:57:7a:
ce:8e:bc:b1:2e:00:56:9f:46:bf:c5:da:27:77:ee:3e:39:43:
bb:96:52:11:7b:ae:92:ff:fc:bd:97:1c:37:3c:ca:8e:0c:cd:
2c:d9:26:a6:7a:43:01:3b:ae:67:c2:b6:1e:73:a4:d0:78:22:
91:e1:29:46:df:2e:9e:62:69:85:94:e9:3e:44:64:42:23:84:
a9:25:ab:f2:16:45:c8:ec:1c:19:79:02:0a:cc:64:76:cc:31:
db:51:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:34 2026 by rpki-client