
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json)
Hash identifier: PpHzNbrpngpvAcJxCFigcXvUE8SsTJlDRJWlsrjfMIs=
Subject key identifier: 14:04:6D:7F:2D:EF:C5:A4:EB:26:D9:1F:05:8A:6E:F4:91:65:D6:54
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
Manifest number: 027E
Signing time: Fri 31 Jul 2026 02:54:09 +0000
Manifest this update: Fri 31 Jul 2026 02:54:09 +0000
Manifest next update: Fri 07 Aug 2026 02:54:09 +0000
Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: 6NAIQgP8m8yUVIE6pfXuCbD88E/y1AeNskk7xIR1qNs=)
2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Aug 2026 02:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Validity
Not Before: Jul 31 02:54:09 2026 GMT
Not After : Aug 7 02:54:09 2026 GMT
Subject: CN=6a6c0e51-5ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:09:57:42:fd:10:96:d7:d5:9e:26:e9:ec:
94:9f:ba:f1:9f:c9:19:eb:46:6a:ea:ce:b4:5d:6d:
64:11:d5:af:f3:0f:22:d9:46:6f:35:79:2f:a4:8a:
c5:1d:db:d4:5a:c9:31:e6:19:cd:3e:42:3c:3f:1e:
02:8b:89:c7:d2:a3:8e:26:a6:82:f8:12:7a:29:15:
d9:17:2d:44:92:4e:bc:34:0a:73:b3:71:45:6d:6f:
14:69:9e:f0:f8:69:8a:df:d7:28:0d:22:d5:ec:fd:
c7:57:2e:a7:65:3d:00:f8:8a:6e:18:56:33:25:cb:
26:ca:80:da:32:11:e7:ca:3e:55:bf:8f:76:bd:54:
ff:cb:6c:e1:f6:0e:7b:bf:e9:88:89:ab:a7:f5:24:
1a:51:00:d2:22:ab:a2:69:b6:c9:f1:37:83:6e:06:
d7:96:da:8c:af:ef:81:69:50:89:dc:ee:3d:9a:98:
5d:a3:48:6a:38:56:06:c6:ff:29:af:37:2a:b9:37:
44:84:4a:ce:b3:49:29:5d:72:09:63:ef:85:62:ae:
03:46:d6:26:a6:f8:83:fb:da:76:2c:ab:9c:9b:a0:
36:09:ea:3e:1d:c7:68:65:24:85:01:66:59:7a:7e:
5a:78:24:92:8e:92:29:65:89:ff:b0:fc:36:77:04:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:6D:7F:2D:EF:C5:A4:EB:26:D9:1F:05:8A:6E:F4:91:65:D6:54
X509v3 Authority Key Identifier:
keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:36:17:aa:e9:03:a6:43:68:6e:fd:78:ef:71:2a:50:b6:84:
f8:6a:c1:0a:e1:f3:60:ba:df:e9:52:d8:6d:0b:7e:3b:05:af:
8a:17:6b:c5:95:aa:13:33:32:16:03:95:37:50:9a:85:41:ec:
29:fd:d2:22:8f:8e:32:dc:e9:5d:0e:32:b7:99:6c:3d:08:0b:
de:ae:7c:c9:cc:70:fc:51:60:74:c7:b6:47:b6:8d:c3:9e:7a:
db:0f:2e:49:1b:ba:0c:bc:4b:51:e9:a1:30:a6:b1:ba:e8:39:
ac:48:e7:cf:9d:25:91:32:77:5e:4b:26:5f:0f:58:77:c1:75:
5f:84:28:84:79:1a:14:00:8d:f7:7c:3d:1a:bb:e0:a7:a2:50:
3b:cf:70:2a:55:e5:40:a5:dd:a6:01:87:99:6e:51:b4:26:f0:
9a:1f:a3:d2:ed:45:04:89:43:e8:18:7a:a0:92:5f:18:7a:c2:
e7:d6:97:e4:1a:81:ef:bc:07:1e:44:79:33:db:5a:c0:6e:02:
df:19:1e:b4:f3:d0:c9:4d:da:78:7b:e3:01:a2:86:29:28:70:
44:a3:58:9d:17:4d:69:97:86:7a:ad:7b:2c:89:fe:d8:08:34:
4a:8c:02:f4:2c:45:d8:0f:31:af:ab:25:b7:10:3e:82:11:c2:
c1:90:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 05:29:54 2026 by rpki-client