
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier: kp2fsq9ebIJNpGTHDfxCQImSNqErV2tMt9IYEGeWmQw=
Subject key identifier: 72:FB:AB:E8:8B:F8:1B:D1:2A:94:8B:54:90:03:20:E6:00:6E:B7:C6
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 0971
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number: 0964
Signing time: Mon 20 Jul 2026 20:33:56 +0000
Manifest this update: Mon 20 Jul 2026 20:33:55 +0000
Manifest next update: Mon 27 Jul 2026 20:33:55 +0000
Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: oorX6YnHWVGfoAeCQDe5ZByHjwwrsruCqgfkqIsj2CE=)
2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Jul 20 20:33:55 2026 GMT
Not After : Jul 27 20:33:55 2026 GMT
Subject: CN=6a5e8634-a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:51:96:a8:06:9c:b1:be:93:1b:8b:a6:fd:
a3:50:16:96:7d:e9:21:dc:1c:3e:54:d7:f2:b1:8d:
9c:fd:2e:d9:b1:17:9e:bf:2f:bc:c2:e9:f7:4e:73:
c8:d9:51:18:44:7f:b2:71:2f:38:5b:b9:8e:96:51:
19:99:8b:ee:61:4c:69:1b:1d:4d:5d:25:c7:2a:07:
af:b9:f6:a4:92:db:e8:7a:c6:4b:7a:3e:3b:b7:92:
8d:df:d4:d9:ce:26:ed:08:73:15:95:43:1e:ef:21:
35:33:06:8d:76:33:d7:17:32:f1:e6:5c:34:7f:05:
61:70:43:08:6c:4c:18:23:21:03:04:90:6e:4b:47:
48:69:7d:ed:af:2f:c6:fb:aa:05:ee:5a:a5:96:1a:
f3:52:0b:6d:23:7d:19:b1:e8:46:ef:fe:e0:08:0f:
ee:a1:14:af:95:49:80:6b:c4:ae:c2:ce:2a:b6:b3:
38:58:93:2f:d3:91:03:b0:df:22:98:51:bc:a8:68:
00:c2:21:db:67:cf:fd:9b:93:96:9b:59:2f:a0:e0:
ab:d5:eb:d1:82:36:e5:06:a9:66:49:2c:21:f1:bb:
d3:e6:07:3f:5f:85:a9:0c:07:48:85:22:5e:6e:b8:
ca:2c:d9:7f:a0:dc:ba:ee:a3:b7:ef:64:80:9d:62:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:AB:E8:8B:F8:1B:D1:2A:94:8B:54:90:03:20:E6:00:6E:B7:C6
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:81:8c:4f:93:b7:8b:11:1d:5a:d2:4f:b3:d7:7f:09:12:c2:
7e:74:3d:c9:64:80:b0:12:27:00:86:ff:ce:61:89:62:b4:e0:
55:37:95:e5:dc:92:6d:19:91:d8:8d:f8:02:23:b3:7c:07:9d:
af:cd:f9:c9:26:d5:70:f2:a2:96:a4:a5:d7:10:39:7d:26:bd:
92:9d:5a:8d:14:8a:c4:5f:66:0a:14:1d:27:ff:28:14:d1:07:
d6:87:59:d4:19:40:85:ae:71:ec:b1:11:75:f8:95:ff:8f:fa:
8a:a6:82:35:92:e0:42:51:46:a5:f5:ce:52:1c:23:27:3d:85:
7e:be:c1:32:7b:2f:e3:04:25:4c:2d:8f:2e:6b:24:60:aa:8e:
6a:73:de:7f:50:09:df:dc:bd:85:f1:71:ab:c5:6c:a7:bd:38:
4b:50:db:bd:07:5c:96:52:6a:87:d9:79:c9:00:e8:ad:61:4a:
6e:25:f6:e2:a0:9e:2b:db:84:12:f4:c8:6e:ad:34:41:d9:a2:
42:b2:4e:73:57:aa:ac:3b:50:bc:e7:73:8c:5b:16:51:66:0b:
96:f0:dc:10:1b:8b:3d:ca:13:bd:77:c4:86:34:83:99:78:e1:
63:62:26:fa:6d:65:ad:b6:7c:68:0a:d5:a9:be:4b:7e:cb:7e:
66:83:7a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:58 2026 by rpki-client