
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: sio1h2jDkWLCVrC3S1ysfG0S2+zQUbO1wYUoiskT2Xk=
Subject key identifier: 87:C1:88:2C:47:7E:07:C0:6F:DD:EB:C1:33:18:6A:8A:79:E4:7E:F4
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: A6
Signing time: Sun 05 Jul 2026 07:53:47 +0000
Manifest this update: Sun 05 Jul 2026 07:53:46 +0000
Manifest next update: Sun 12 Jul 2026 07:53:46 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: 1PCRnKKWbIsSpUKZBLw89H+NsBRNmJxR7ykjakqoDIg=)
2: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
3: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 07:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: Jul 5 07:53:46 2026 GMT
Not After : Jul 12 07:53:46 2026 GMT
Subject: CN=6a4a0d8a-19f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:4d:a8:0e:5d:3d:83:3a:f5:40:38:5a:be:
ba:39:db:e5:4c:e9:98:76:3a:a7:94:12:eb:76:e2:
a9:d5:e2:7c:0a:6b:d8:4a:30:4a:8c:20:1d:b5:f0:
df:84:e0:81:8a:14:64:b5:6a:ea:d8:1c:87:96:e7:
ee:c6:2f:50:e7:5f:bf:86:bd:cc:50:d0:e1:05:b1:
f2:f7:b7:69:1c:a4:12:28:67:c7:6c:06:0e:54:71:
55:28:1b:c3:cd:41:aa:da:8d:df:f3:05:48:78:3f:
52:d8:89:aa:ed:2e:5a:cf:19:73:a0:91:b2:68:40:
a4:da:fd:1d:f0:83:cc:ee:ed:1c:6b:cb:b6:2b:ea:
02:a2:22:7c:60:56:c4:1e:00:ff:73:e3:0c:ed:64:
cc:b4:eb:a8:02:e6:59:84:ec:0a:a1:47:2a:1c:66:
10:3c:1c:93:88:96:72:73:6f:2a:79:5b:76:52:8d:
46:36:a1:47:45:e6:e7:21:25:e4:7c:63:fa:ca:f5:
1c:ae:35:b5:a9:ef:be:0d:5b:bf:48:ec:e1:5f:43:
90:9f:05:93:87:1c:5e:8b:0b:6d:d5:1b:2a:8e:29:
6c:d4:07:2b:65:e7:b5:09:67:95:d9:cd:6a:73:1a:
61:7d:24:4a:3d:16:e1:f4:1e:e6:d8:e9:f2:49:32:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C1:88:2C:47:7E:07:C0:6F:DD:EB:C1:33:18:6A:8A:79:E4:7E:F4
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:26:02:55:b3:2b:11:2c:fd:76:78:2f:d6:bf:1d:5d:d5:
ec:84:ec:1d:0d:22:c8:0c:22:dc:26:e6:e7:a9:d7:55:88:7b:
cb:fe:9d:94:8f:18:0c:55:5a:16:ed:2f:f2:f4:99:71:da:c9:
10:c5:8a:e9:36:db:a8:a4:0d:e7:0e:6e:50:19:81:67:3f:bf:
2f:f2:a9:92:1e:61:a1:8a:92:83:12:cd:82:ec:40:5e:73:a7:
ae:3c:d2:bc:55:95:03:e3:d5:59:c4:11:10:c7:05:37:41:d9:
e6:49:ba:5d:30:39:71:7c:97:a2:9b:72:e4:d1:3d:7c:dd:5a:
bc:e8:5e:e7:a6:2d:19:62:2a:d7:51:ad:56:fa:98:2e:19:fb:
b0:81:3e:ba:bf:b1:e2:1f:1c:10:31:4a:f3:46:09:6d:cb:7b:
55:ac:6b:b2:1c:39:01:8b:e6:15:00:d0:2a:7c:21:db:08:0b:
29:44:cd:c2:c9:bb:0d:ca:5a:87:25:16:0d:04:ec:cd:71:26:
ff:4c:10:93:83:70:18:b8:fb:55:04:25:69:62:5b:54:99:91:
d2:22:9f:b1:d4:87:fb:7f:c1:63:65:f7:76:5b:17:b1:70:02:
4f:69:56:95:42:e2:46:77:f6:13:03:f0:bd:6c:fd:4e:09:b1:
2a:2b:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:53 2026 by rpki-client