
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File: 1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier: tTG66Rk08ov9nPZ2yhcAB1W2ghMSeduJHzvfGNvc3Ek=
Subject key identifier: AB:C3:D5:6C:D9:25:36:00:46:AE:62:7A:E9:3F:A4:13:00:72:B8:37
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number: 04BD
Signing time: Wed 19 Aug 2026 00:14:35 +0000
Manifest this update: Wed 19 Aug 2026 00:14:35 +0000
Manifest next update: Wed 26 Aug 2026 00:14:35 +0000
Files and hashes: 1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: Pd6XfnKGTTEIjHLcCt/wRJkzbMdiDr6P/d4PSZqCehU=)
2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: lf68hMOfZ/T65yk1q4mtj4OSXwkBVD1LwcuwEotYLTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Validity
Not Before: Aug 19 00:14:35 2026 GMT
Not After : Aug 26 00:14:35 2026 GMT
Subject: CN=6a84f56b-0dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:56:0f:f1:05:db:a9:8d:c9:e2:3d:44:03:
56:4d:23:61:9c:7f:af:b9:4f:a8:b2:03:0b:a6:ac:
6d:f4:5d:6a:fa:4f:5d:fd:f7:74:87:d6:c0:3b:07:
f0:65:b7:08:92:04:e6:46:1e:56:2c:bc:e3:df:ff:
c4:d5:d4:d3:e0:4e:3b:a5:b6:75:15:3f:44:06:47:
b6:cb:80:95:e1:6a:05:d7:6f:6d:08:2b:10:39:3d:
cb:e3:2d:1f:e5:26:3a:1e:eb:ad:24:6f:5d:1f:88:
92:e1:54:5b:90:c6:e4:ce:cd:0c:7f:6a:a7:57:af:
26:23:bd:7a:62:8d:8b:5a:d7:2d:fe:d0:65:c6:2d:
20:be:bc:ce:4c:70:44:26:0d:db:4b:16:e7:1a:1b:
a0:e9:68:e6:fb:23:8b:43:a5:b1:48:4a:43:92:38:
4a:5d:28:99:ad:78:9b:62:0b:02:f4:11:58:e1:99:
70:ad:e9:36:39:7e:20:0b:97:d0:08:27:72:ee:0f:
02:d3:46:17:ec:2f:eb:0d:11:af:0e:da:9e:90:bb:
7b:ce:50:db:c1:a5:53:f9:5c:56:d9:ef:f4:fc:23:
62:be:48:71:7b:be:42:ad:05:69:27:c7:b2:a5:92:
6b:99:31:63:39:6a:52:cd:4f:b5:f0:56:95:e6:a8:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:D5:6C:D9:25:36:00:46:AE:62:7A:E9:3F:A4:13:00:72:B8:37
X509v3 Authority Key Identifier:
keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9e:06:f9:83:8c:2a:f4:7c:a3:ae:c1:ae:a2:e5:c6:dd:b0:
c4:fb:99:0e:3b:54:4b:48:e4:11:6e:29:dc:1d:6a:39:f9:90:
bf:68:ee:5e:4e:10:91:58:5e:32:ed:bd:b7:b1:55:be:44:8e:
a4:d1:65:59:48:88:d2:0c:3e:40:0f:10:01:28:3d:67:21:e8:
cf:6b:c2:fd:67:c4:c7:b6:61:51:04:a8:4e:83:9a:0c:31:66:
16:2f:78:bd:f1:84:3b:49:4c:3b:16:88:bb:83:31:a3:fe:46:
95:7a:c3:a2:7c:01:f0:09:cd:e1:c6:ad:9a:58:52:a9:84:59:
20:fc:c5:ed:91:bf:7b:65:2d:e2:17:24:24:cf:32:fe:27:6e:
6d:0d:70:da:36:ae:37:23:6f:f9:51:f3:21:ff:0b:ad:a1:17:
3e:c7:c8:c1:0c:5b:c8:ed:3a:6d:b4:ec:25:4a:09:d1:d7:41:
c1:af:48:2a:54:19:14:dd:c6:e0:6e:0d:e9:60:8a:45:66:dc:
8f:b5:d2:6c:dc:45:be:dd:d0:08:cc:d7:92:a9:58:fa:59:44:
70:0b:03:82:0f:51:52:b2:c1:1c:04:89:26:a2:3f:d1:08:fc:
71:84:1b:5c:62:c8:e3:3f:52:20:37:9b:12:3f:83:ea:e0:74:
d4:6d:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:19 2026 by rpki-client