
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json)
Hash identifier: RC4jw5tu21EbtZvV9qA0sbYxFOooNAwU5f5efVcuomo=
Subject key identifier: DC:67:9D:54:A8:34:73:34:46:79:86:92:81:88:9B:D7:23:60:41:2A
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial: 0E58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
Manifest number: 0E4F
Signing time: Wed 22 Jul 2026 17:57:17 +0000
Manifest this update: Wed 22 Jul 2026 17:57:16 +0000
Manifest next update: Wed 29 Jul 2026 17:57:16 +0000
Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: vcC8lwq60PIhDPBFpINYowtCyGqiJheXoDjIEq9YJdY=)
2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: HF4nucogvlWev/6+Vaa0aM/i/xbw1FYeTT4JnV0mPb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3672 (0xe58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Validity
Not Before: Jul 22 17:57:16 2026 GMT
Not After : Jul 29 17:57:16 2026 GMT
Subject: CN=6a61047d-0907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:54:7e:26:ee:96:08:ca:b9:1a:b6:1b:c0:
29:56:b6:bd:95:c9:00:82:74:b3:09:d6:52:63:2a:
66:a1:41:3b:30:f8:bf:91:5c:c8:68:2a:a6:28:bf:
bc:5a:ee:a4:da:d3:cd:c4:75:7c:c1:ab:2e:92:f9:
e5:d4:7e:b9:9a:3d:98:08:51:c6:40:29:6f:0f:a9:
d8:c5:06:ec:c4:32:a4:59:36:01:11:05:df:5d:5e:
59:55:0d:fa:97:7e:03:4f:7b:3d:04:4e:49:16:e1:
29:eb:50:69:50:5c:ef:29:f1:a5:43:c6:fd:ae:48:
8a:64:0d:9a:20:a4:dc:34:9d:ac:eb:22:77:e4:b7:
95:31:d6:fd:bc:11:c6:00:f4:e3:79:de:81:a1:8f:
35:52:0e:7d:fb:f2:d4:86:56:c3:9c:c7:49:a2:2b:
f7:f1:b2:20:6f:94:58:cd:0b:d5:03:35:83:d9:5c:
23:38:9c:0b:c0:d9:fa:dc:6e:ea:f8:0f:24:7c:79:
06:bb:50:eb:35:a9:3f:1a:32:e9:6c:d1:f0:56:aa:
9d:16:06:3c:cc:88:87:ae:17:14:ac:a0:7b:79:94:
56:05:33:86:e5:34:6e:64:9a:a3:96:ce:a3:60:4f:
b6:43:cd:30:f2:f5:99:0a:3f:36:cd:ef:e4:3e:0b:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:9D:54:A8:34:73:34:46:79:86:92:81:88:9B:D7:23:60:41:2A
X509v3 Authority Key Identifier:
keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:43:1b:00:a0:0e:3f:44:58:6d:22:6f:79:7a:c5:b5:b5:
cb:56:7b:e0:27:c7:b2:d7:a9:2d:7f:13:d8:1b:08:74:96:26:
38:89:19:1f:2c:bd:ed:f1:54:14:9f:64:bd:4b:f8:8b:20:bf:
2b:c7:67:89:78:1b:07:3c:8f:d6:11:3a:49:34:2e:df:f6:c3:
46:d3:3a:26:f4:82:28:46:e5:96:22:87:4f:71:fa:a8:49:55:
da:88:be:8a:37:22:51:4d:db:83:61:c4:3e:6a:39:97:71:b8:
c9:ba:dd:d7:9e:51:9d:3b:0a:ca:14:c0:5e:f0:e3:42:14:3a:
b6:6b:48:e8:ba:6e:c4:83:d4:eb:ba:86:6d:e6:cc:da:57:81:
85:fd:89:aa:7b:9d:12:08:85:ea:1a:4e:8e:33:eb:af:be:a4:
74:9b:0c:de:59:48:b6:35:23:80:76:6f:fa:03:fe:da:a3:18:
7e:cc:00:02:94:62:42:47:30:56:12:e2:e4:89:db:81:33:5f:
62:5d:50:c0:ba:fe:a9:68:8a:32:9d:1c:a4:82:aa:fc:c5:91:
5e:ee:fa:4c:1c:6d:f3:15:09:37:e0:8c:4e:57:0a:1f:cf:bb:
ce:14:ce:f2:cb:51:df:26:2a:e5:8f:e6:93:f5:d6:38:43:bc:
ba:98:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:52 2026 by rpki-client