
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: NQVnAWMogLBYtuKfHZKZ/smY21gIhQa668qdGMtaU0s=
Subject key identifier: 99:0F:28:B7:A0:F7:66:56:FE:B6:32:80:02:44:A5:83:2F:97:82:C0
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B3B
Signing time: Mon 20 Jul 2026 16:22:25 +0000
Manifest this update: Mon 20 Jul 2026 16:22:24 +0000
Manifest next update: Mon 27 Jul 2026 16:22:24 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: EDlxCi2/Kdra4G1qUf8VqD77NsIqtC+EqOZUsE51ipA=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6986 (0x1b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Jul 20 16:22:24 2026 GMT
Not After : Jul 27 16:22:24 2026 GMT
Subject: CN=6a5e4b40-074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:90:29:19:46:5d:f8:e8:03:6e:66:74:d0:
ff:34:99:92:f4:9e:e5:a1:1c:be:48:b0:91:cd:25:
24:a3:1e:9c:ad:50:eb:76:e7:67:1d:99:c8:42:47:
a3:f5:87:90:c4:2b:e5:b2:14:63:44:3f:c3:74:50:
33:30:28:36:51:00:a9:ef:50:e0:b5:d2:dd:b5:f8:
6d:d4:3d:4b:96:65:e2:74:21:90:af:91:09:ee:b3:
09:28:b5:ff:d6:5f:5c:cd:b0:da:98:ac:ed:75:32:
2f:15:a3:10:2c:09:49:05:c7:f7:50:45:10:f7:75:
95:e4:c1:8a:e7:d0:14:05:38:be:39:25:f1:b9:ed:
8e:a6:be:b3:85:e1:ae:42:b2:76:39:30:84:e9:ca:
07:16:9d:ab:36:e8:c7:94:48:b7:51:11:7b:36:e1:
ce:a4:f7:39:af:e6:73:9f:e8:57:8c:b2:f5:db:4c:
28:ec:fd:8b:fb:ce:6b:bf:3e:d3:a8:9c:da:04:3c:
29:ba:b7:56:85:83:e6:7a:e8:15:87:95:5e:ed:ea:
30:62:39:2c:4c:51:5b:ec:0d:d2:79:a5:a5:91:e8:
5f:af:1b:1c:54:e3:bc:5f:af:d1:ed:1d:ed:29:fb:
0a:04:01:3d:a4:47:c0:4a:2c:9f:09:7c:9b:8c:4e:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:28:B7:A0:F7:66:56:FE:B6:32:80:02:44:A5:83:2F:97:82:C0
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:52:95:b9:ac:3b:21:bc:7c:fc:e3:f9:13:d9:6b:f6:6f:
96:42:bd:c7:84:eb:3b:9a:c0:c1:58:ca:38:7b:e5:9e:bb:c4:
1c:bd:c7:3b:c5:6e:fd:e4:6f:c4:6b:95:df:da:cf:05:d3:80:
62:c9:df:a0:84:33:19:87:42:7b:0f:fe:c6:b5:3d:be:c8:14:
12:19:f3:e6:8b:e2:c2:2f:20:17:1d:e2:a1:bc:cc:4d:9b:be:
ad:e4:be:e2:e3:15:67:b7:f7:06:6b:74:0f:96:d3:73:19:34:
8c:27:0b:7b:2a:18:ef:ce:3d:3b:34:d2:ad:65:67:d0:9a:7f:
2a:6c:05:83:74:3a:8a:ca:fd:02:a4:4a:ea:31:65:a7:cf:32:
09:88:5c:ab:ee:38:6f:6c:36:29:5c:cd:ab:c5:4d:bd:21:b8:
e4:c6:90:b3:7e:28:c6:c9:db:c6:7d:86:20:39:e8:de:90:0e:
37:7c:29:ad:d3:56:6b:7c:63:86:b2:23:f5:46:99:53:5a:6b:
d9:7e:e1:79:23:59:9b:c7:f6:f8:c8:fd:34:9e:62:c8:90:21:
3d:f6:2e:b3:3a:e9:59:c6:30:ec:ff:d8:e7:61:bd:66:bf:90:
dc:43:8d:31:60:5f:3a:1b:cb:06:8b:0c:2a:74:3b:f7:8c:52:
bd:b5:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:40:15 2026 by rpki-client