
$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json)
Hash identifier: 1JUpx2hSa9zIs6d7y44wYWpQPV2vJRmYigLWwRsZgsE=
Subject key identifier: C0:2F:08:6E:2B:00:16:7B:E2:5F:AA:40:A7:3D:93:55:55:AB:42:07
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial: 08D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
Manifest number: 08CB
Signing time: Mon 22 Jun 2026 20:28:48 +0000
Manifest this update: Mon 22 Jun 2026 20:28:47 +0000
Manifest next update: Mon 29 Jun 2026 20:28:47 +0000
Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: ZWValpU/pQfmyBXhNEaC/6E/ETIWtsX0QS1XbXRVNqg=)
2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: vNsxw0QyIyijT8fEK/xaUyiuFQdDNw7cfAxOqXgV9jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Validity
Not Before: Jun 22 20:28:47 2026 GMT
Not After : Jun 29 20:28:47 2026 GMT
Subject: CN=6a399b00-929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:95:c9:9e:b0:84:45:60:ff:ac:c9:ea:e6:
47:98:cb:0a:db:4b:46:ee:8a:9e:d0:a8:70:88:66:
4c:cd:f1:81:a7:5e:85:8e:3a:53:80:ac:cf:2d:c1:
1c:79:b6:7b:0a:88:e2:5a:a5:fc:18:7f:69:4b:09:
0e:15:5d:f6:db:5d:c2:be:d2:52:04:ec:88:ce:6b:
af:86:8e:dc:6b:0e:bc:ea:58:a3:a0:20:9b:28:a6:
d1:5c:a9:c4:7c:48:ce:78:63:18:a8:42:c2:d9:35:
77:a0:8a:4e:55:f5:5c:1c:70:22:e8:09:49:fb:76:
80:9e:11:d5:ed:4e:98:94:df:86:0f:ff:50:6a:45:
87:f5:af:89:e6:6e:68:da:42:53:a1:13:f6:c9:8c:
b7:13:25:ea:c9:f5:ca:cf:2b:ad:fa:f7:4e:9b:a5:
f5:ef:8c:f3:22:23:8a:3e:fb:3e:d5:32:6e:22:3d:
51:77:03:1c:88:16:d5:16:da:81:24:31:cb:f1:6b:
7c:3f:fb:02:22:2f:22:c1:6b:74:64:d0:f5:14:64:
6e:0e:f7:dc:bc:e4:a2:3b:d6:aa:56:c3:e3:f5:4a:
9b:ea:6d:6a:da:50:a4:b3:4d:a2:58:2e:9c:88:43:
30:eb:cc:11:1f:b2:bf:3c:b6:cf:fa:9b:9d:6e:e1:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:08:6E:2B:00:16:7B:E2:5F:AA:40:A7:3D:93:55:55:AB:42:07
X509v3 Authority Key Identifier:
keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:9f:d8:b2:99:7b:4a:dc:34:b9:b5:9a:bd:54:bf:fc:47:
7d:7a:ac:c3:98:93:83:4d:ad:e9:56:98:04:f0:c2:ef:bc:9c:
ee:a5:a5:52:a6:bc:02:38:bc:87:3b:90:6c:81:7b:87:af:de:
79:21:09:88:cb:6b:fc:9c:15:90:66:8c:7f:e1:36:9b:23:d0:
33:3e:6d:81:5b:73:3a:43:4b:b0:93:7c:97:1f:4f:15:15:52:
87:0e:00:07:68:f9:b0:f2:ee:48:9d:65:51:4c:ff:fa:fd:33:
e1:ab:a2:06:ee:17:01:a8:81:30:7a:13:34:55:a6:48:95:36:
2c:ad:ed:b8:f0:25:d0:ca:ea:6e:15:b7:3d:2e:3f:e8:5e:7b:
1d:aa:50:ec:a2:a3:3f:22:7d:e0:08:f4:ce:23:a0:40:b5:1b:
c2:35:3f:eb:38:85:1a:8f:c1:2b:bb:78:e9:26:26:b9:e3:42:
3d:da:9b:3c:e4:43:a2:64:a8:22:14:f5:27:b8:8d:64:64:53:
0a:f3:a3:28:39:c8:df:44:4e:24:33:0e:53:12:0f:42:5b:b0:
95:f5:80:8a:b1:ad:15:bb:3d:35:00:7f:5f:b4:ad:24:9d:0e:
4e:9f:c6:a1:b3:c5:ad:61:5d:52:b2:16:69:d3:fb:dd:15:f0:
73:84:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:15 2026 by rpki-client