
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier: NaAtHRrBJQx191K5OIhAXKJMqJKtCE5xBi87+cIRqGU=
Subject key identifier: FD:00:74:D6:77:AD:B7:C5:E1:74:51:E1:97:55:28:B5:5C:4B:AF:3B
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number: 66
Signing time: Mon 29 Jun 2026 08:41:57 +0000
Manifest this update: Mon 29 Jun 2026 08:41:57 +0000
Manifest next update: Mon 06 Jul 2026 08:41:57 +0000
Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: ug75USKdZuJBP0L7eHOXa11RamdVXISdr1Oy7tXrtuE=)
2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 08:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Validity
Not Before: Jun 29 08:41:57 2026 GMT
Not After : Jul 6 08:41:57 2026 GMT
Subject: CN=6a422fd5-cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:01:77:1d:77:ca:67:cd:41:5b:20:a5:2c:
4f:63:68:f6:31:7b:58:ea:bc:16:bd:9a:06:af:f9:
96:73:09:61:07:fb:02:2e:4b:b3:61:7a:45:76:9a:
a5:d1:4b:40:d4:91:b5:16:0d:06:13:44:18:26:ed:
08:0e:0b:2a:fc:b0:2c:3b:83:b5:49:42:58:12:71:
12:4d:f0:a2:d8:d3:39:98:8d:84:f5:ee:d6:72:67:
63:dc:ce:7e:e4:61:c1:20:48:35:11:28:53:fa:45:
60:ea:f8:3d:6c:65:7d:2d:6e:59:9d:50:dc:1c:a4:
2f:b1:e7:0c:43:eb:b4:80:e5:de:78:a5:a5:2f:c1:
ef:39:af:35:f1:0e:86:c6:92:52:35:55:2b:9a:c9:
e6:43:df:55:65:3b:c5:3f:e3:6a:a3:65:c0:3e:77:
03:33:ff:06:cc:df:b2:d3:09:6c:bb:e3:32:66:cd:
64:75:6b:f1:f5:6f:27:db:6b:02:de:5c:32:0e:2a:
04:2d:b3:20:cf:ea:c9:8d:b8:9b:c1:2a:02:cc:c3:
88:cb:d6:5a:3f:19:19:7f:09:1c:8c:60:1a:f6:26:
03:98:a1:5a:32:3e:5d:f7:74:27:7e:78:ac:c7:08:
bf:6e:7b:20:35:2c:2f:a9:18:1c:8e:df:b3:71:13:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:74:D6:77:AD:B7:C5:E1:74:51:E1:97:55:28:B5:5C:4B:AF:3B
X509v3 Authority Key Identifier:
keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:75:4b:c2:a2:b1:af:5d:bc:9c:9c:95:06:e1:de:20:a2:
bd:04:fe:ef:f0:fd:fa:ea:a1:5c:94:eb:cf:e0:c2:63:4f:1b:
31:22:10:af:ec:16:f2:9e:cf:02:26:41:c3:fe:ea:34:c8:10:
f7:16:74:20:59:f8:4d:ec:cc:38:e7:3f:2a:19:fd:04:eb:ea:
56:53:3e:bf:58:ee:30:9e:84:4f:93:f6:cb:d2:89:aa:63:4c:
87:80:3f:63:85:b2:54:f4:fa:81:94:22:35:44:8c:ee:c3:23:
c4:15:c3:4b:09:bb:af:f1:70:30:ab:11:6c:50:6d:95:07:74:
ce:d1:05:97:58:70:23:21:a5:e2:bf:cd:75:20:35:2d:49:0d:
dc:a5:d5:49:e7:10:9d:a9:73:c8:a8:4d:b3:75:27:31:76:dc:
f4:ed:fc:4a:9e:f1:99:48:f2:4d:91:b4:ba:d5:f9:86:11:ff:
25:de:d9:b7:fe:2f:a2:c0:18:4a:2e:90:12:d4:3e:60:77:ef:
c9:c4:83:6e:14:18:7a:3d:37:bb:1c:5d:f1:23:8a:80:ea:27:
d4:2b:3b:e1:a5:9f:45:de:b3:ab:88:08:9a:3f:05:57:ca:84:
1d:0e:39:53:59:74:4d:19:42:5a:e6:25:44:a7:87:bf:c7:b3:
6b:54:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:45:00 2026 by rpki-client