
$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File: cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier: U0pt0SZ3ibZt3mXqfB7V74gbweCQl2Dul9hruB6IBCs=
Subject key identifier: 19:91:10:D4:59:AD:61:B6:B8:13:CB:C8:C6:B2:BC:D4:0D:FB:06:90
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number: 4F
Signing time: Thu 13 Aug 2026 06:33:15 +0000
Manifest this update: Thu 13 Aug 2026 06:33:14 +0000
Manifest next update: Thu 20 Aug 2026 06:33:14 +0000
Files and hashes: 1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: 3VRTRexIImkYbwbedZDi4w9VveQ/OsCUFPN8QQR5JOY=)
2: 8Tg_ZSb-Viei1OQ529_uiTOZ0aM.asa (hash: nINaH8TXBJUn7znOvUaYM7JswX00LEbegro4mFGLb3o=)
3: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: Aug 13 06:33:14 2026 GMT
Not After : Aug 20 06:33:14 2026 GMT
Subject: CN=6a7d652a-6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:65:75:66:04:6e:98:20:97:fd:aa:37:f8:
dc:2a:3e:9f:5c:3f:2e:f4:2b:83:dc:cc:c8:11:7c:
1f:65:0b:3e:3e:1a:41:b3:a9:07:4d:68:f7:df:2b:
9d:f2:ac:c7:a1:eb:31:6f:f0:51:9d:68:8c:fb:08:
cb:ff:36:b4:08:51:62:57:0b:b3:5b:e0:be:84:5b:
c8:8f:22:c9:24:dc:0a:16:0b:e4:c0:6d:4c:9d:7c:
76:90:d7:f7:f5:a3:9f:68:ea:5d:28:fe:3a:51:6a:
32:09:b2:ee:7e:94:d2:b0:b5:0d:cf:c6:85:50:ba:
6e:4e:2b:b2:44:a1:d9:ff:c0:ff:88:e8:b7:d4:f0:
64:06:ea:f3:0a:a2:f9:2f:6e:28:e2:7f:90:f0:30:
2a:f3:71:ad:94:41:38:e0:1a:18:74:4c:11:16:82:
83:fa:ae:77:6b:97:0d:dc:9e:f5:25:b8:65:92:34:
c7:0c:3f:bd:89:72:a7:22:1d:c0:99:a5:2b:71:e9:
2f:3f:a2:51:37:23:bd:f5:63:a0:8c:96:76:82:64:
cb:83:f4:f6:dc:a9:6f:13:c2:8c:b4:24:e9:2f:52:
52:ae:43:3f:71:c7:d9:b3:66:99:1f:50:eb:e0:f5:
f2:06:e9:e4:bf:f6:7e:92:5e:1b:c8:09:2e:e5:49:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:10:D4:59:AD:61:B6:B8:13:CB:C8:C6:B2:BC:D4:0D:FB:06:90
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:3e:c0:e9:76:5f:64:8e:ba:27:cc:34:be:c4:00:aa:3b:36:
8a:39:97:5c:02:ef:fe:9c:fc:3a:fb:a7:60:c6:ce:25:9f:08:
47:10:30:ad:ae:38:87:fe:66:da:92:31:18:5f:6f:b3:75:a7:
db:02:ff:9b:ac:b8:c8:44:d7:28:05:cf:75:9b:0e:dc:a0:02:
df:ed:c8:b0:0b:0a:3f:b9:58:2b:fc:45:58:8b:6e:ce:9d:72:
dc:ce:cb:fa:9f:c3:83:d1:a8:f8:53:08:bc:27:3f:68:71:46:
cb:d0:77:cf:9b:4f:74:57:c1:35:23:95:d6:28:fa:51:df:42:
43:4f:cc:f8:69:69:bb:a5:7d:63:42:2d:94:03:27:67:e4:ea:
12:74:8e:18:6c:c2:a2:4b:99:bc:b3:3c:56:45:91:e0:05:fa:
7b:f0:d4:2c:5b:71:92:4d:63:c2:d9:0d:fb:f9:ea:11:6b:dd:
71:1f:c1:65:24:f4:ae:4d:dd:4a:cb:f1:98:fa:57:0e:21:23:
72:8b:8e:ea:f5:b3:4c:21:46:a0:03:7e:9d:5c:b9:5a:4f:10:
1e:3a:28:6a:d7:80:af:86:94:a1:79:3e:71:93:c0:94:1a:18:
3f:b8:5f:6c:5a:45:d4:99:26:29:c6:fe:02:d7:48:9c:0f:5b:
1e:55:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:51 2026 by rpki-client