
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
File: 0RpQ1ePqDchJb47JVhvb5mrHnUw.mft (raw, json)
Hash identifier: Ek37FQe8zPWjvEns9+poFZZVRn0n/MbQciuKa9CVBvA=
Subject key identifier: DE:74:2C:38:BA:25:C9:9D:ED:A9:2E:E6:07:DB:CF:E4:43:15:44:03
Authority key identifier: D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
Certificate issuer: /CN=A91FE67F/serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
Manifest number: 3A
Signing time: Thu 23 Jul 2026 10:35:21 +0000
Manifest this update: Thu 23 Jul 2026 10:35:21 +0000
Manifest next update: Thu 30 Jul 2026 10:35:21 +0000
Files and hashes: 1: 0RpQ1ePqDchJb47JVhvb5mrHnUw.crl (hash: WIHkmYzhilzhm2HLg7VpWyFhFgixK/0pKPEEy9q4MXI=)
2: 7D1805702E4211F18DDF32E693833773.roa (hash: eAvktFFlPMI5ncO/3br/ixgJ8aaCullrYEFRoA4e5b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE67F, serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Validity
Not Before: Jul 23 10:35:21 2026 GMT
Not After : Jul 30 10:35:21 2026 GMT
Subject: CN=6a61ee69-d69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:9b:4f:34:5d:d0:5d:3f:cc:0c:e8:95:ac:
25:1a:b2:68:04:0e:2e:41:d6:aa:a8:a5:fb:3c:5e:
f2:59:59:07:b5:3a:e2:8f:5a:24:38:22:aa:cc:54:
f4:2c:d0:1b:2b:f4:b9:ed:87:bc:43:29:d9:f2:a2:
29:85:85:02:4f:57:70:0c:9b:ad:a2:7b:eb:bb:16:
09:72:7d:a0:d6:e5:22:76:20:07:c9:4b:0b:e7:ac:
1f:e6:0e:4a:9b:4e:4d:0b:11:71:c8:af:25:d1:f1:
6d:8b:5f:8a:b7:bc:10:b1:fe:bb:59:70:7c:45:ba:
4a:26:a6:9b:06:67:12:c5:94:7b:c4:51:76:70:95:
95:c0:b9:02:93:0f:10:8d:01:35:ac:d0:2a:25:08:
0f:c4:a9:ae:35:bd:ab:0b:92:8a:cb:ac:e0:e9:f2:
c0:bb:1b:f5:17:7a:e5:d5:39:8c:7c:cf:d5:a6:e7:
d7:6a:40:19:a7:82:24:f2:d8:4b:c6:ed:28:fc:b6:
60:58:fc:0f:69:d3:a1:77:d6:fe:89:39:1f:e8:a1:
8b:99:76:dc:d1:d4:0b:ca:8b:22:71:0d:c4:7f:da:
d6:9c:fa:76:5c:a3:e6:66:75:03:29:cf:33:70:50:
a7:50:94:78:4b:83:6f:29:db:75:84:61:1a:d2:75:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:2C:38:BA:25:C9:9D:ED:A9:2E:E6:07:DB:CF:E4:43:15:44:03
X509v3 Authority Key Identifier:
keyid:D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:a1:b9:69:c5:56:5c:a6:af:a9:08:18:8c:db:b2:46:df:
84:cd:dd:a3:74:ca:57:fc:30:c6:35:a3:73:a5:7c:0a:fa:a2:
71:39:17:5f:ce:0f:2c:3d:fe:7b:e6:fc:5d:6b:fc:32:32:eb:
13:64:f7:b0:41:0b:98:54:51:c5:cd:22:ae:bf:0a:6b:af:62:
78:02:99:ad:19:56:3b:66:ec:18:11:f9:1f:81:63:6d:7d:c0:
e0:35:0d:67:26:70:ff:c0:3c:2d:c1:75:40:a8:b0:c7:70:95:
c7:0b:0a:b2:a4:cf:d6:d4:2f:e2:19:4f:dc:61:c4:e7:71:6c:
f1:5f:bc:71:4d:22:cc:2e:34:2b:51:53:25:e1:75:8f:05:20:
b0:1e:7e:f2:b2:f7:f2:04:10:2f:cf:00:cc:65:28:75:b6:6c:
71:48:2f:38:62:48:5a:a1:4d:a3:7b:ea:08:c1:0b:ff:e1:a9:
aa:95:f1:83:4e:3b:41:01:5b:27:a4:af:89:67:04:76:bb:56:
28:3b:c4:7c:30:a2:68:3c:79:53:d5:32:5a:fc:fc:d4:36:d5:
55:63:51:fa:03:1f:64:cb:2d:c6:01:f6:2f:53:6c:82:ba:f9:
b2:98:88:db:ce:3f:f4:bb:47:6d:94:09:73:01:8b:c6:77:02:
62:77:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:48 2026 by rpki-client