
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File: piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier: J/lQsy/3qx6uv2pbLCFPaerDP7ZjZfqC7UJ9QYJHwhs=
Subject key identifier: 72:39:EF:FB:AF:B8:0A:CB:78:64:BE:CF:97:87:AC:FA:D1:F9:D3:05
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer: /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number: 72
Signing time: Fri 17 Jul 2026 09:06:32 +0000
Manifest this update: Fri 17 Jul 2026 09:06:31 +0000
Manifest next update: Fri 24 Jul 2026 09:06:31 +0000
Files and hashes: 1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: UkDuco48nqSCpXwSjg97lsXFfrRMLIP3DE5o6roxCX4=)
2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Validity
Not Before: Jul 17 09:06:31 2026 GMT
Not After : Jul 24 09:06:31 2026 GMT
Subject: CN=6a59f098-9ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:f0:d4:35:3e:42:42:63:8d:88:97:96:fb:
00:e7:62:8a:4d:28:5b:c7:9f:fa:c7:98:0e:53:2f:
25:9e:5b:bf:39:4e:fe:b3:f6:f7:10:f0:b2:15:a3:
db:db:0e:84:b9:a4:75:64:0d:d0:89:51:1c:b7:21:
64:f4:75:2e:d4:af:ca:03:be:7a:7a:c6:79:69:e7:
53:89:9e:4c:b9:78:63:98:3a:c5:79:a6:7a:d8:14:
1f:f0:63:0f:93:bb:f7:ca:94:7f:73:5b:52:41:69:
06:c7:e2:4f:e2:67:8f:0f:09:9b:27:2c:3f:f8:af:
75:eb:4c:5f:08:b7:98:5f:0f:0d:f7:6a:d1:83:ef:
16:12:91:e8:1c:fd:82:a0:a2:34:14:d0:0c:12:b0:
2a:49:68:40:30:46:63:5a:8d:51:11:e5:51:ac:4b:
9a:d8:8f:18:ee:bb:9e:91:7e:d0:ba:32:ac:d7:bf:
0e:b3:cb:f6:4d:5c:dd:35:1e:63:bb:8c:3c:41:0b:
a5:f1:dc:0a:3e:35:d1:82:82:c3:fe:31:25:03:1b:
76:b6:5f:14:a3:f7:2c:0d:af:f8:2c:0a:d0:b3:1d:
99:d5:57:c6:3e:e7:32:1d:d3:47:7d:e4:16:38:7e:
77:d5:38:2a:ab:11:df:4b:e2:87:3a:b5:c2:7c:fa:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:EF:FB:AF:B8:0A:CB:78:64:BE:CF:97:87:AC:FA:D1:F9:D3:05
X509v3 Authority Key Identifier:
keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:35:75:f2:66:ee:c5:fc:90:07:62:d7:20:96:c5:f9:f0:3d:
cd:0c:21:82:1e:de:2a:70:30:77:56:e7:f9:7c:74:4c:f7:cf:
4a:3f:26:f8:f8:ef:13:53:ac:c2:ff:f1:9c:74:b4:82:21:b3:
82:06:64:37:5a:8c:f6:00:e2:be:ca:52:ba:9f:62:37:32:22:
40:a0:86:82:d2:0a:4f:3e:34:8f:0e:08:1a:dc:db:b7:17:25:
c8:62:fc:5f:8c:55:d5:ec:a8:98:71:7f:5f:14:5c:08:fa:a9:
81:82:51:b2:03:5f:73:eb:df:96:0b:b4:45:80:77:3d:87:e7:
f8:5d:45:60:0f:27:b4:fe:d2:7d:72:f0:5b:d1:da:6e:5a:25:
23:90:49:41:fd:22:48:56:1b:f9:5e:e3:1d:b4:38:2d:92:3a:
a8:84:5e:c4:2f:82:e0:b6:c4:84:f4:40:3e:34:ec:74:55:c5:
3a:24:1e:b2:a7:47:ba:f2:72:52:dd:7c:15:65:f1:b1:b0:91:
5e:e2:cc:53:34:c6:07:99:03:5d:d8:c5:de:db:13:d1:0f:e2:
f5:28:14:6a:d0:f3:57:4b:d6:84:b1:d2:f5:36:31:90:f1:3a:
8e:c2:4b:62:79:2b:aa:61:34:d0:68:01:06:ce:cb:42:11:84:
20:38:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:32 2026 by rpki-client