
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier: r36fjgXKUEgFfHNgxT8urq7FKz6F1imwyA3MntKJS98=
Subject key identifier: 03:7D:47:6A:17:FC:F8:C2:F5:3D:9C:01:CA:2F:4E:7C:AA:46:0B:98
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number: 0196
Signing time: Fri 17 Jul 2026 05:23:43 +0000
Manifest this update: Fri 17 Jul 2026 05:23:42 +0000
Manifest next update: Fri 24 Jul 2026 05:23:42 +0000
Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: uTXYNJvD7PYinNkdyklQxKr9/xoGszP0usxvG7DslxY=)
2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=)
3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: Jul 17 05:23:42 2026 GMT
Not After : Jul 24 05:23:42 2026 GMT
Subject: CN=6a59bc5f-f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:3a:2f:57:19:32:0f:d5:8a:30:1d:cd:61:
10:12:2e:95:4e:ff:64:40:8d:75:96:3f:5e:d5:42:
16:60:ae:bb:90:1e:7a:9b:f1:f7:45:cd:55:e2:e3:
ab:44:f9:12:c2:32:6c:29:2d:c0:52:db:b5:3d:5b:
17:97:d6:e6:99:00:a8:dd:a2:56:03:29:d7:b6:d7:
29:aa:da:7e:71:1c:36:1b:95:09:1d:ee:ce:d1:10:
bd:c0:a7:26:d4:18:90:72:d8:b9:62:a5:cc:ab:71:
21:ab:ce:46:d2:23:a4:91:0e:ee:5f:9d:11:ef:27:
5d:c4:7d:e5:c5:b8:7c:07:29:01:4c:4e:bd:c7:40:
63:35:cf:3d:f6:61:e7:e1:0d:b6:71:66:34:ea:4f:
f1:46:7b:14:d3:e2:ae:a9:f9:94:76:94:d1:cc:b9:
7c:3e:7a:12:2e:2d:7d:f0:46:2e:f8:6c:42:70:6b:
9e:55:d1:8b:ed:19:ed:6b:5d:51:68:72:82:12:30:
19:07:1f:35:8b:ec:5a:b5:3c:c7:f4:8c:6e:6c:2f:
29:6f:e1:ed:6d:29:ff:f2:52:60:91:12:19:02:12:
e0:e5:42:ec:3e:f9:fe:50:fa:68:ad:ae:3f:7a:85:
28:5d:24:63:6f:8a:aa:a4:af:5e:d9:4f:be:38:f6:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:47:6A:17:FC:F8:C2:F5:3D:9C:01:CA:2F:4E:7C:AA:46:0B:98
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ba:04:a7:fe:85:ef:b4:3b:6b:46:a0:ed:e1:84:86:a7:17:
4a:45:20:12:d9:1e:19:e0:92:1b:21:5d:76:7b:ce:9e:92:5f:
cd:7d:f1:1d:4b:4d:2f:26:22:91:6e:67:0d:49:a8:18:55:db:
73:33:42:f0:dd:ae:5c:56:a0:b3:33:45:42:67:bc:58:ec:63:
4b:22:30:63:e6:e8:0c:a8:f4:fb:0e:67:99:5c:d0:70:34:c3:
ee:54:a4:9a:0d:ad:8c:8c:81:39:d1:35:42:92:d8:73:5e:33:
47:5c:ec:ae:b3:0c:98:54:fe:b3:fe:ea:d0:40:04:ab:11:68:
23:af:1c:4a:47:8a:32:5a:b6:74:90:d9:9c:95:5d:3c:f2:c8:
3a:84:3e:d2:5a:28:a1:7a:2d:d7:d5:cf:5c:ad:3e:46:23:73:
9d:14:e3:78:ef:03:c6:50:bb:1f:85:b6:3e:05:63:f2:da:9e:
b5:61:1a:28:78:b3:54:3e:fa:f1:53:58:c3:ce:69:08:e4:d1:
4c:db:1e:48:8b:c4:4e:b5:f9:f6:17:72:64:c7:6e:93:d3:82:
01:87:2f:c2:f5:26:0b:df:5a:30:0b:29:98:43:89:32:5f:2d:
3b:4e:84:c7:3f:02:6a:db:51:3f:a4:74:e2:d4:9c:3f:a0:25:
89:d5:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:14:19 2026 by rpki-client