
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier: uj6/R0jeUFNoTrNH9mTlkHFTTni7o+gWPXcHDy+R+UU=
Subject key identifier: 71:58:BF:17:1A:2D:86:59:BB:C8:C3:6C:A8:9A:FF:40:3C:82:BF:39
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number: 02F2
Signing time: Wed 19 Aug 2026 01:34:17 +0000
Manifest this update: Wed 19 Aug 2026 01:34:17 +0000
Manifest next update: Wed 26 Aug 2026 01:34:17 +0000
Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 2ZLdhx2n3sRHPi9yPF1uZ8DKScP84+54S2DFXnGmCD4=)
2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Aug 19 01:34:17 2026 GMT
Not After : Aug 26 01:34:17 2026 GMT
Subject: CN=6a850819-b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:36:25:b9:8b:7f:cd:ac:ab:35:62:f0:25:
87:30:b7:8d:60:66:e3:ee:7f:c8:15:1c:0c:32:e1:
77:ba:f1:81:1f:93:4f:5e:c6:60:eb:81:be:ff:bb:
7a:22:62:47:47:1e:d6:7c:87:06:50:a8:7b:83:c2:
2a:ed:d2:12:a2:a0:a1:43:e5:54:7a:54:37:00:e2:
1a:6e:e1:98:4d:d3:9f:f6:ef:4b:59:23:c8:8c:66:
d3:56:ee:3f:21:49:af:b2:88:0c:98:9d:83:74:36:
be:7d:ce:ba:d6:48:38:77:ea:e1:31:79:bb:34:90:
b1:ea:ee:cb:2c:21:6a:77:ef:87:7d:97:dd:b5:0e:
07:a6:6b:68:f2:66:41:eb:08:60:22:ef:3a:78:86:
c9:64:e1:44:36:4d:4b:b3:46:41:0e:23:9f:ff:75:
c3:f5:f2:e6:75:83:f4:8c:d0:5f:02:ad:dd:c5:76:
41:e6:04:19:7a:db:57:26:d7:41:06:d7:16:3d:a1:
42:f8:0a:91:ca:22:47:58:02:16:a2:4c:64:8b:78:
eb:74:78:c7:d3:4d:f3:49:57:c0:15:31:4b:94:a2:
f2:4e:ff:0f:54:6a:75:c3:1d:d5:61:75:42:16:d8:
81:82:dd:ba:61:d6:34:7e:1a:44:29:b3:da:a3:4f:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:BF:17:1A:2D:86:59:BB:C8:C3:6C:A8:9A:FF:40:3C:82:BF:39
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9f:91:db:2f:b7:bb:ad:bf:48:38:50:3f:61:0c:19:5c:f8:
3c:16:1e:bd:48:64:6e:9f:a7:52:65:e8:ea:ac:d1:8f:08:d0:
d9:dc:85:f7:aa:4e:46:49:7f:3b:ad:7d:e8:27:f4:d5:45:5a:
36:74:d3:d6:66:7d:67:4a:56:a4:7c:9b:6b:88:07:24:9f:6f:
b5:90:86:13:e5:23:be:a6:4c:e5:76:c6:83:20:44:79:d8:00:
69:24:87:a3:e9:ac:f1:0a:e1:dd:46:0e:55:7a:fa:a0:5b:1d:
0f:02:36:12:93:af:04:51:57:83:33:99:01:38:88:c8:bc:f2:
6f:a4:af:a5:56:dd:e4:6c:4e:9b:fd:0d:98:71:4e:76:a2:70:
34:38:50:2a:f4:9a:07:64:d0:d8:16:be:f9:0a:4e:5a:aa:0d:
45:e2:cd:80:ce:11:85:83:55:99:fc:a1:38:13:f0:07:e7:13:
2a:88:2c:6d:2f:00:21:a3:5e:47:e9:c6:a7:6b:93:ae:bc:18:
71:fd:8b:e0:a2:ef:1a:30:7d:25:96:46:63:6a:e1:99:5d:bc:
4e:d4:a2:8e:a3:91:1f:98:27:1b:95:fb:d8:1b:ce:5c:92:7c:
df:6a:ec:a1:0b:b5:b9:d8:19:57:9b:c2:41:dd:26:8f:f8:95:
b0:35:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:24 2026 by rpki-client