
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: Y1uqfN+X1/Bo1CT/gzkbcEBJ3wxfqFbAurAoMg5YCTA=
Subject key identifier: 64:86:A4:E6:A3:16:7A:35:98:1A:74:52:4B:EE:B3:41:89:D6:C1:8A
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 02D3
Signing time: Tue 21 Jul 2026 02:16:17 +0000
Manifest this update: Tue 21 Jul 2026 02:16:16 +0000
Manifest next update: Tue 28 Jul 2026 02:16:16 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: SGlK5JSg+LaZW5/roraF4tbiIZUjW0xZZKdLk+BDepE=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Jul 21 02:16:16 2026 GMT
Not After : Jul 28 02:16:16 2026 GMT
Subject: CN=6a5ed670-30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:37:47:56:66:05:33:ec:1a:73:83:0c:f2:
5d:c1:8d:46:e9:50:7d:71:6a:ba:60:a5:b7:2a:74:
57:bd:28:98:5e:ad:7c:c3:31:8c:a5:cd:c5:09:16:
d6:82:35:10:be:53:2b:83:fa:ed:d2:a2:0a:0e:ad:
75:c2:9e:6b:38:3d:77:cd:b8:94:e8:29:19:61:8e:
9f:89:92:f0:76:01:79:a5:5d:31:0a:75:4c:50:69:
d1:42:27:8b:37:3e:ae:ca:83:17:2a:4d:d6:09:79:
73:61:b3:48:e7:41:a3:13:40:ee:50:71:8a:d6:79:
45:4f:a7:b2:82:d6:8f:e9:6f:35:1f:2b:f5:2c:d3:
80:a5:10:a8:3d:9c:99:62:5f:44:b3:bc:b4:37:6f:
f1:7c:b2:ee:95:18:fa:ae:12:90:1b:84:7d:be:f6:
a4:bb:5e:c4:e2:81:39:0c:96:35:64:31:e3:d0:32:
6a:1f:59:42:06:a3:c4:10:11:d5:d4:94:32:64:34:
1b:12:76:bc:64:0d:87:9c:89:8e:6a:8c:88:5d:a2:
7e:46:31:08:af:aa:eb:36:90:fb:a6:fe:c6:8b:88:
3d:33:a7:12:eb:5a:70:fd:d6:50:ad:c4:71:12:0e:
bb:a3:3c:19:7f:ff:f2:74:db:03:85:83:64:9f:0a:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:A4:E6:A3:16:7A:35:98:1A:74:52:4B:EE:B3:41:89:D6:C1:8A
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dd:51:86:5b:45:55:6e:72:5a:8e:16:cd:59:fd:5f:32:7a:
08:04:5f:fb:33:91:44:f3:4d:6c:61:9a:eb:15:c7:30:b4:f8:
e7:f7:f7:5a:07:06:db:84:5d:1f:29:b5:69:c1:55:3f:a9:23:
c6:e7:71:37:d3:28:1b:a6:f6:5f:61:05:bd:e1:e4:f9:ef:b2:
a8:c6:87:d0:04:1e:88:97:aa:01:78:13:2b:c9:75:9e:be:ec:
40:ac:b1:0c:9e:9c:f8:0e:36:9d:17:1a:6e:7a:5d:3a:5e:05:
54:55:b7:e5:f4:92:19:26:17:cd:13:ee:09:90:a4:e0:93:00:
e2:7b:5e:ee:0e:5b:36:6f:6c:49:f1:4f:df:00:a8:27:6c:88:
63:33:b2:eb:ed:bf:39:80:d8:52:e5:9c:03:36:28:06:b2:02:
86:8d:c5:33:6b:ac:39:68:9f:32:f7:2e:8a:b5:97:d8:3e:27:
d1:0b:54:a4:4d:80:46:d2:53:14:07:22:ce:57:7f:1c:93:a4:
20:fa:4e:a9:d6:32:f7:89:6f:e1:55:77:78:bc:aa:68:9f:cc:
40:28:04:ab:84:eb:87:db:66:7f:9e:72:e7:d0:d9:09:4b:87:
a8:f2:ef:cb:0f:28:49:6f:71:02:d9:19:f6:ad:22:53:3f:ad:
b9:1f:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:33 2026 by rpki-client