
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier: mdnUm64Bn+ilsswGnpJdlgk9ofYsJSPgJowgvlwuQHo=
Subject key identifier: 6B:C3:D1:78:1A:97:50:F9:25:AB:5B:A6:DF:1D:67:99:04:CC:E3:3D
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number: 0197
Signing time: Fri 19 Jun 2026 04:33:13 +0000
Manifest this update: Fri 19 Jun 2026 04:33:12 +0000
Manifest next update: Fri 26 Jun 2026 04:33:12 +0000
Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: dZifro3kPYgN/hPuaD7RscIg0D8I5a6eCRdhZizOuHY=)
2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 04:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Validity
Not Before: Jun 19 04:33:12 2026 GMT
Not After : Jun 26 04:33:12 2026 GMT
Subject: CN=6a34c689-6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:f6:53:2b:ee:bc:af:68:69:61:4e:65:28:
63:df:3f:d6:74:1b:06:1b:b5:88:c1:b6:d9:77:08:
20:cf:73:9d:4c:b8:05:b0:fd:1b:f9:71:cf:d5:e6:
a0:33:f7:19:14:78:40:39:e2:c5:1e:7f:c3:67:b7:
cf:d9:d4:6d:e2:5c:bd:f3:73:fa:f7:24:bd:6b:a8:
c6:28:11:73:12:10:2c:3c:87:f3:ae:21:84:00:5b:
d3:7e:3d:17:b7:c8:02:bb:33:2f:e7:9c:54:91:02:
4f:64:9c:07:26:c4:ee:52:82:79:e6:44:d5:0f:2a:
a4:5d:62:0d:8b:86:96:5f:05:3f:f6:94:3b:4a:c3:
18:e9:3b:f2:2a:c7:21:87:34:11:6f:ab:a5:f6:bf:
28:4a:dc:a5:c7:e7:61:ad:00:a6:4b:65:4e:f4:cd:
72:27:e7:1c:79:95:e9:1b:ce:14:dc:c1:64:4d:d0:
d5:ea:c9:45:cf:2c:45:d0:08:34:15:9c:7c:2d:85:
74:1f:01:66:ee:6f:dc:97:21:fb:3b:f2:30:f0:da:
2c:77:f9:97:ed:fc:f5:f3:b9:0e:05:9c:62:00:df:
9b:f3:7a:1c:4a:03:3d:63:32:0c:96:e6:2d:e0:81:
be:15:5f:03:66:6f:fc:35:1d:a0:66:5b:7f:d1:c3:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:D1:78:1A:97:50:F9:25:AB:5B:A6:DF:1D:67:99:04:CC:E3:3D
X509v3 Authority Key Identifier:
keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:cc:4a:75:f0:fb:a6:f2:8a:4e:df:eb:3a:dc:59:1e:60:
83:2f:98:da:17:30:35:8f:cc:df:1c:2c:85:d7:45:c1:2b:5b:
b1:9f:7f:78:b6:4f:c5:a4:6a:b4:99:1d:a7:89:c5:cb:51:f5:
d9:6c:ad:f5:69:cf:36:88:c7:9f:4b:ef:e0:11:5f:a7:2f:b5:
94:8e:62:f4:14:be:bb:d3:4e:c8:c3:08:3e:50:6c:05:b7:73:
89:04:c6:44:10:9d:30:2e:7b:6f:12:9e:5c:1f:63:df:d1:6b:
37:d2:cb:f5:4d:9b:4e:e8:6a:20:c3:b5:ba:09:b7:52:88:fb:
5c:16:d2:57:c0:e6:b1:f4:eb:cd:dd:52:70:a1:3d:92:8b:10:
6a:a8:43:4f:6e:f8:5e:91:0a:74:d1:1b:c8:30:49:13:2d:60:
52:25:e0:30:05:8a:4c:b4:78:46:10:40:9b:9a:70:17:42:80:
5b:c1:aa:e2:8e:77:2c:45:a1:bf:43:a6:40:1d:52:24:7b:f3:
66:1b:cf:0f:c6:07:1a:c9:6d:40:d5:9d:81:af:dc:64:89:8e:
c1:ba:87:4f:cf:73:7c:ab:72:12:71:c4:6f:f9:34:c1:2a:c8:
67:78:a2:ef:34:b1:5d:f0:c2:72:32:79:4c:96:90:1a:cc:c6:
8e:00:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 16:23:36 2026 by rpki-client