
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json)
Hash identifier: //4AOrS69iogz1BCzu5fAfVSFxdO6pRw3XSQxQl7PR4=
Subject key identifier: A5:05:30:E6:4A:C8:74:96:D0:61:A1:FE:17:09:4B:97:89:06:71:9A
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
Manifest number: 0102
Signing time: Thu 23 Jul 2026 08:02:40 +0000
Manifest this update: Thu 23 Jul 2026 08:02:40 +0000
Manifest next update: Thu 30 Jul 2026 08:02:40 +0000
Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: fUQ+W0nik6MYBvYNV/N0c5isd9ErMn6wvLNORQomHR8=)
2: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=)
3: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=)
4: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=)
5: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Jul 23 08:02:40 2026 GMT
Not After : Jul 30 08:02:40 2026 GMT
Subject: CN=6a61caa0-3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:90:11:be:b4:4d:3b:f8:88:04:45:d8:78:
83:5c:99:65:b5:24:c1:dd:1e:bc:57:35:5f:79:16:
ea:b9:64:8e:b5:0f:4b:d0:87:20:8d:3a:d0:fb:7d:
57:9f:2c:49:6e:32:52:7b:29:a1:72:e9:16:2e:3e:
31:14:26:31:d3:b0:c4:5c:2a:14:cb:8a:a3:06:e3:
dd:d4:da:16:d0:e9:a1:7d:fb:7c:36:5d:1c:57:64:
d2:7b:3d:b8:d9:2a:ac:d9:c8:97:b0:f8:cb:a4:5e:
04:e0:ae:b9:69:08:dc:d2:33:85:ce:64:ed:9e:d5:
47:d2:e3:b7:aa:19:82:10:70:f5:9e:ba:18:4a:9e:
ee:cf:7f:c3:15:2a:6b:cc:02:70:ec:91:44:01:c4:
3e:f8:9d:8a:cd:1d:d2:4e:26:76:98:84:f7:d6:a8:
4e:60:df:fa:87:3d:cc:43:2a:92:43:f4:d4:52:87:
1f:51:de:8c:8c:97:b2:d7:5b:89:2f:f9:85:b0:b2:
b8:df:a0:6f:ea:b3:3a:45:cb:05:45:95:dc:98:2b:
dd:dc:1d:85:9e:95:d2:e7:53:80:96:83:4c:3f:11:
af:9a:79:f9:b6:2f:16:d9:f1:27:18:f0:84:74:bb:
1a:42:2b:51:94:c4:52:46:7e:56:9e:02:15:55:e0:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:30:E6:4A:C8:74:96:D0:61:A1:FE:17:09:4B:97:89:06:71:9A
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3d:be:c6:b0:ae:7f:f5:f1:19:02:6c:ea:eb:da:5d:e7:5c:
bf:83:5c:0e:a9:ee:bb:0c:57:bb:d9:6e:6f:fb:38:56:c8:bb:
b3:75:6c:5e:8a:ef:cb:a2:a4:e1:c5:b8:e3:e1:2e:e5:2c:eb:
02:66:44:bf:85:66:e1:e9:b4:7c:6c:bb:82:4a:dc:ce:4e:69:
18:3e:5a:5f:07:8f:b6:29:fb:58:dc:de:16:9c:53:51:d2:91:
27:23:3f:83:21:6b:1b:b9:98:4f:7f:90:47:77:28:f3:d6:36:
b0:f7:a8:96:93:59:13:8f:60:44:15:14:26:85:1e:47:26:40:
5c:dd:20:62:b7:d3:30:9a:48:5e:bb:6e:31:a4:35:b1:f8:cc:
57:86:3f:e7:7f:78:e0:6f:4e:c2:83:c2:93:a0:3b:85:1e:ce:
2b:1f:cf:3f:af:72:d0:d0:0a:59:04:6f:48:92:38:6e:b7:93:
38:b7:1c:bc:a3:82:5e:18:1e:2f:77:56:c2:ee:f8:31:d9:d0:
13:09:57:c1:67:f3:1e:25:f3:97:bf:e7:22:8d:b2:1c:07:65:
99:90:70:b6:eb:5b:6d:58:3a:49:a3:b4:ea:14:e6:62:6a:59:
f2:77:80:6c:f4:ef:75:76:85:63:f3:55:09:8c:2a:78:88:22:
39:61:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:30 2026 by rpki-client