
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: uEyDu9kgXE+xC/3Q+3xKJNU0fAWgDu/+WoArMZwglQA=
Subject key identifier: 69:E7:DB:99:0E:58:C3:3F:91:E6:F5:A8:C9:F0:08:FF:70:6E:04:C0
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 052F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 0525
Signing time: Fri 17 Jul 2026 00:09:51 +0000
Manifest this update: Fri 17 Jul 2026 00:09:51 +0000
Manifest next update: Fri 24 Jul 2026 00:09:51 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: CbmZKeGTFLI98xYYUi4QDy/MxnFSKAnWE9hxld+a4rg=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 00:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Jul 17 00:09:51 2026 GMT
Not After : Jul 24 00:09:51 2026 GMT
Subject: CN=6a5972cf-c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:28:31:b3:26:92:e2:b8:9f:d2:1a:e5:38:
6f:18:b1:67:4d:68:1d:fd:3c:f7:72:cc:4a:8a:4e:
9f:55:86:19:1c:56:ec:2f:1b:4f:53:63:65:f6:0d:
31:42:df:e2:57:2c:27:a7:b3:cf:34:f4:74:69:6b:
b7:db:b4:0a:78:c4:c1:7b:df:7b:f9:8f:26:6b:22:
6d:9c:a4:66:14:f0:64:4f:74:67:a4:b1:33:f1:b4:
21:d7:2a:4a:0e:2f:2a:08:b8:cc:35:d3:0b:bf:ff:
a3:2f:71:2d:ef:30:74:0f:c1:ba:97:25:cd:19:b5:
f2:71:2c:cf:58:8e:a8:7a:fd:e7:28:ad:78:5d:fb:
ba:f3:11:02:e4:b0:c6:23:68:b4:c9:18:2c:50:72:
6e:26:58:d7:fa:a2:fe:a7:ad:60:f4:4e:42:45:bb:
bf:29:58:87:e4:4c:28:60:df:7a:fe:98:82:93:51:
79:be:f0:be:6b:b6:1d:90:bd:98:3e:b3:0c:ac:38:
79:f6:59:e8:63:63:27:22:14:c2:6a:5f:b1:94:7a:
62:e8:40:aa:10:1b:f5:72:4f:48:60:7e:ad:7f:c1:
24:96:54:66:e9:d4:63:20:b3:c5:37:45:dd:7a:03:
01:7f:02:99:52:2a:48:40:4b:93:04:8d:31:fc:74:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:DB:99:0E:58:C3:3F:91:E6:F5:A8:C9:F0:08:FF:70:6E:04:C0
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:9f:7f:f8:d0:3b:da:14:82:08:83:2b:f5:63:7e:18:92:
ea:1f:5c:95:44:59:85:39:f2:c8:f4:ee:78:46:77:a1:b2:cd:
7e:b1:e5:27:cf:36:d7:af:a9:e2:2d:ec:de:a5:4c:67:26:07:
93:0b:53:33:47:f4:f2:8d:b5:3a:4f:36:4e:9e:c7:08:d8:ae:
e4:40:10:62:17:99:25:d9:6a:2b:ab:5d:ce:52:47:86:ea:bf:
77:a4:44:5c:18:c0:ed:b5:db:61:52:39:3d:da:17:9c:8b:0c:
00:47:15:0c:c6:46:ea:39:f9:fe:1e:b1:83:2f:db:b1:04:30:
96:aa:ab:a5:6d:ac:7a:7d:36:b4:18:2e:2e:85:38:50:c0:5d:
42:aa:8c:bd:e6:5c:cf:e1:ce:59:5f:01:67:07:e6:18:46:42:
49:c4:66:d8:80:dc:9e:08:6d:5d:55:71:8d:49:b4:20:28:6a:
79:3b:d1:f1:c8:e1:0b:86:9b:bf:63:52:86:cf:18:76:84:1c:
dd:a3:fc:ae:9c:74:fb:61:61:2f:83:de:a2:45:15:f7:bb:57:
a8:25:2d:e1:06:9c:7a:5e:3a:a5:97:1e:2c:e4:08:01:71:e6:
a7:8f:f1:5a:d4:9b:8c:4f:fc:80:01:62:47:25:5b:50:7f:7f:
2a:8e:6d:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw
OTYzNTNERDgwHhcNMjYwNzE3MDAwOTUxWhcNMjYwNzI0MDAwOTUxWjAYMRYwFAYD
VQQDEw02YTU5NzJjZi1jNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYsoMbMmkuK4n9Ia5ThvGLFnTWgd/Tz3csxKik6fVYYZHFbsLxtPU2Nl9g0x
Qt/iVywnp7PPNPR0aWu327QKeMTBe997+Y8mayJtnKRmFPBkT3RnpLEz8bQh1ypK
Di8qCLjMNdMLv/+jL3Et7zB0D8G6lyXNGbXycSzPWI6oev3nKK14Xfu68xEC5LDG
I2i0yRgsUHJuJljX+qL+p61g9E5CRbu/KViH5EwoYN96/piCk1F5vvC+a7YdkL2Y
PrMMrDh59lnoY2MnIhTCal+xlHpi6ECqEBv1ck9IYH6tf8EkllRm6dRjILPFN0Xd
egMBfwKZUipIQEuTBI0x/HQGsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnn25kO
WMM/keb1qMnwCP9wbgTAMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3
ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2
R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmFKff/jQO9oUggiDK/VjfhiS6h9clURZhTnyyPTueEZ3obLNfrHlJ88216+p
4i3s3qVMZyYHkwtTM0f08o21Ok82Tp7HCNiu5EAQYheZJdlqK6tdzlJHhuq/d6RE
XBjA7bXbYVI5PdoXnIsMAEcVDMZG6jn5/h6xgy/bsQQwlqqrpW2sen02tBguLoU4
UMBdQqqMveZcz+HOWV8BZwfmGEZCScRm2IDcnghtXVVxjUm0IChqeTvR8cjhC4ab
v2NShs8YdoQc3aP8rpx0+2FhL4PeokUV97tXqCUt4Qacel46pZceLOQIAXHmp4/x
WtSbjE/8gAFiRyVbUH9/Ko5tlA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 13:31:17 2026 by rpki-client