
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier: FNtWo+958jVWd+yKLCxTiWsaNsw93R1bhwCpe1R8tSM=
Subject key identifier: CF:40:E3:22:9A:F6:DB:DE:44:08:C9:85:81:B0:1B:AA:DD:A6:00:F2
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0D70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number: 0D37
Signing time: Fri 12 Jun 2026 18:08:34 +0000
Manifest this update: Fri 12 Jun 2026 18:08:34 +0000
Manifest next update: Fri 19 Jun 2026 18:08:34 +0000
Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: Y7Cv0AN+o0EgN76lspaKtW7b4+v1bTcyb+I24F1Bh2E=)
2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=)
3: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: i9uCa/jnhktxFdjqViYAybuthNUR7oD6rAf8exjN1kI=)
4: 5DB19F74332511F19B77F41AB8833773.roa (hash: eS81eZ4BRnB1S8RBeTEIim17x0/NA9jClADK3JWCczs=)
5: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=)
6: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=)
7: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Jun 12 18:08:34 2026 GMT
Not After : Jun 19 18:08:34 2026 GMT
Subject: CN=6a2c4b22-9f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:7f:31:3d:4d:18:ed:8c:6d:a7:ba:df:50:
4d:ca:65:7f:a2:ef:fd:d0:3f:0f:96:6e:95:0e:99:
cf:57:f3:99:03:30:fb:70:1f:00:7c:24:98:3b:42:
38:c4:d8:1c:12:05:90:4d:1b:40:5d:bf:99:8c:e4:
ec:09:d4:30:ea:ec:46:fb:59:fe:02:99:56:53:df:
3d:1e:4b:be:b4:72:2a:9e:2b:c5:d3:74:b1:63:64:
97:35:9b:be:fa:63:31:63:d4:94:cf:78:69:39:93:
4e:97:69:9d:1c:fd:15:8a:b1:71:48:98:a6:ae:b9:
9a:06:50:26:f0:31:cf:ac:52:8f:e4:9c:20:a2:dd:
31:3f:2f:b4:58:ed:cf:fe:7a:94:15:13:3b:28:2d:
3f:b9:82:b2:04:c5:6d:ed:7a:87:9a:ab:51:9a:35:
b9:40:6f:51:fa:37:94:97:14:2b:96:db:70:49:4d:
79:2a:29:75:49:88:4b:cf:8a:f1:f6:0b:7d:e9:e3:
a6:1a:66:1d:11:f1:7d:7d:4f:c4:2d:ca:72:57:81:
ad:bb:e8:71:ce:e2:d8:a1:94:28:60:c4:66:5f:1d:
01:62:01:87:f2:9a:e7:6c:62:ef:65:6c:47:ff:f4:
3d:07:a6:5f:e1:5c:30:f7:3b:73:d2:23:43:93:0f:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:E3:22:9A:F6:DB:DE:44:08:C9:85:81:B0:1B:AA:DD:A6:00:F2
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:65:f9:1e:de:aa:09:fd:86:72:dc:f8:2d:5c:a8:5e:0f:
5a:39:8e:e1:73:b5:8c:bc:ad:5c:2d:89:c5:42:54:4e:f9:37:
c0:63:ed:86:f1:6a:e4:e9:34:8b:fd:76:bc:b3:9d:6c:af:c5:
be:71:e4:4d:c2:83:ba:bf:ff:14:b3:dc:a9:93:ad:d8:e3:8b:
58:97:3d:73:91:d1:ed:7e:2a:05:96:2d:22:ad:34:96:0f:d0:
78:90:d9:cb:28:db:68:a3:4d:ac:aa:31:0f:32:2c:b9:28:a1:
34:2f:28:24:60:8d:94:68:61:40:1b:42:1f:56:56:7a:42:12:
76:a0:48:7a:b2:d5:06:d2:71:17:f3:fc:3f:17:cf:35:bf:4f:
12:50:4a:49:ff:f6:1c:56:19:6e:46:84:0b:54:52:c9:89:ee:
ba:be:7a:63:f3:f5:6f:51:19:e6:aa:d3:48:23:26:80:db:ea:
18:22:0a:ee:29:96:da:cb:62:ea:34:3e:52:2e:f5:8f:5e:08:
dc:7b:b7:25:63:ba:a8:f2:69:10:a3:53:9c:f2:94:43:bf:ca:
fb:25:17:0a:54:1c:bc:8f:68:3b:00:70:99:e0:e7:09:5b:ee:
88:dd:45:ad:f1:ec:0c:9f:ec:4e:19:a5:ea:47:24:29:3f:60:
40:ba:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:50 2026 by rpki-client