
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: nk4JLGO6WoHrHTSUrwbLab0HeCfqfUzJB4HyOjo6Mt4=
Subject key identifier: 5E:51:02:FE:77:B4:B4:6A:83:7B:AD:9E:1A:39:B7:6C:2A:B7:DE:12
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0526
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 04E8
Signing time: Tue 21 Jul 2026 00:35:48 +0000
Manifest this update: Tue 21 Jul 2026 00:35:48 +0000
Manifest next update: Tue 28 Jul 2026 00:35:48 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: dFbm+mfxExlqa4GcOgVxWW7QgGEsTOs8CSx7tppS+bU=)
2: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
3: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
4: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
6: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
7: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Jul 21 00:35:48 2026 GMT
Not After : Jul 28 00:35:48 2026 GMT
Subject: CN=6a5ebee4-ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:f2:a4:3e:fc:6e:99:a2:b9:23:94:84:ee:
76:c8:bb:82:85:da:fd:99:23:d2:5a:bf:9f:af:68:
74:c2:09:1d:cd:87:16:fd:6d:73:81:3a:eb:dd:9d:
b9:e4:f3:5d:24:e5:da:d3:27:59:d8:87:b4:c2:08:
64:da:7b:76:5c:13:32:b2:81:fe:34:75:48:b7:86:
63:69:8d:68:7a:bb:33:54:26:94:52:8e:25:8a:2b:
43:00:80:5c:7a:76:56:81:70:ae:a0:b9:b5:ab:e0:
7e:f5:b0:e9:91:e6:20:76:d2:2e:a6:33:74:43:29:
3d:59:3a:88:1a:7d:f7:14:3e:28:d0:e9:b4:de:56:
93:c5:b3:af:fe:69:71:3d:87:79:40:95:f6:19:90:
ed:53:ec:6c:17:12:44:99:ba:d9:c6:8a:6e:88:20:
51:10:ec:e6:ca:96:86:20:55:b6:d4:ee:8b:94:83:
a1:51:51:3c:e5:24:cb:a0:07:db:89:05:e7:be:19:
70:a5:f7:30:4b:21:58:74:48:32:72:a1:e8:8c:ac:
3b:00:bb:36:f1:5a:71:2b:b2:c4:40:db:79:f3:82:
57:c5:46:0a:b7:c7:4a:27:ae:48:7f:79:b5:de:7e:
fe:60:51:2e:0e:bf:81:81:25:20:8b:9e:75:61:c8:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:02:FE:77:B4:B4:6A:83:7B:AD:9E:1A:39:B7:6C:2A:B7:DE:12
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c1:61:41:f4:90:1b:51:7f:8b:b4:27:1c:d9:af:42:da:87:
8f:0b:d4:3a:22:df:b1:7b:be:0c:2b:9e:c8:21:ec:26:58:dc:
fa:cf:9c:ad:36:57:55:58:bb:e4:0b:90:8c:72:63:cf:d3:ba:
ad:75:7a:a6:30:28:dd:16:5b:22:5f:8c:21:0e:3f:69:16:ab:
69:31:c3:f8:85:ca:ee:e3:d5:3f:9e:29:ab:d2:ba:4d:81:16:
47:70:06:3f:82:0f:9f:da:6b:3f:38:8d:9a:58:56:12:a7:38:
95:d9:8b:b9:20:73:78:db:0b:1d:8b:52:80:38:04:ef:d1:2e:
5a:9e:82:a5:65:97:d7:ba:2f:79:1b:14:e5:a0:a8:c0:80:49:
d7:c7:d2:ad:80:e2:ee:f6:7d:2b:18:53:7b:a5:8f:26:9f:50:
c3:d2:5c:dd:ea:94:c0:6b:cb:47:bd:17:09:5f:63:9b:aa:59:
9b:c3:68:74:9c:36:bc:f4:d4:80:3d:a8:ad:c8:c0:e6:ec:17:
23:99:dd:f7:fc:a1:b5:93:0b:93:9b:a8:ac:7d:4e:d5:e5:01:
49:a2:65:b9:76:e4:b3:91:6d:7d:4c:73:0d:a3:53:49:7c:87:
a5:e3:43:c0:27:d7:5a:e9:43:1f:6c:30:6b:56:24:0e:e6:15:
33:3a:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:19 2026 by rpki-client