
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: KD0rEDNy1C4X/SW1RJmxn+3ej3oLZjAAKvciZqVphyo=
Subject key identifier: CD:12:93:96:50:9A:F0:17:76:C1:F7:D1:DA:18:63:AD:5D:B9:E2:BF
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: 01D6
Signing time: Fri 17 Jul 2026 04:40:44 +0000
Manifest this update: Fri 17 Jul 2026 04:40:43 +0000
Manifest next update: Fri 24 Jul 2026 04:40:43 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: gNO561dVplzYWuKjY48Ix1yfMdCFoc9epJGFCCut0ng=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: Jul 17 04:40:43 2026 GMT
Not After : Jul 24 04:40:43 2026 GMT
Subject: CN=6a59b24c-87f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:ec:34:9a:12:3b:6f:8e:67:22:9b:b2:89:
5e:dd:d0:b8:4b:26:e9:c3:7c:9b:fc:63:ee:66:e7:
21:26:6a:de:d3:b6:04:20:0d:5d:1a:c8:56:bb:99:
80:ec:f1:24:77:87:a9:70:8b:79:da:87:38:76:a2:
18:0a:d5:70:0f:0f:ab:91:fc:b9:99:2d:fb:2a:cd:
6d:fe:c7:07:82:9c:2a:a9:6a:e7:c4:75:5c:c3:2c:
21:2d:32:2e:25:ee:17:92:ca:47:ea:d8:40:7f:6b:
dc:9d:4e:5a:a3:33:01:8f:6e:4f:30:0b:43:39:ef:
45:32:74:72:31:ed:d3:4c:d3:9c:67:a7:13:0f:d1:
ad:fe:ac:47:d2:ef:c0:61:ab:40:7a:3c:7e:69:b5:
67:c9:34:ae:da:8c:23:e8:71:e0:74:a0:fd:7e:e4:
e7:e0:ac:32:4d:24:6f:94:6b:2d:2d:d7:31:af:ef:
b6:fd:ae:78:d3:7e:77:21:37:6e:cb:97:60:fc:f2:
db:dc:fc:3c:92:c8:71:9b:26:3c:66:dc:67:4c:f7:
e2:cc:de:22:4d:5c:cc:62:3c:ce:3b:c8:de:69:16:
1d:f7:d1:d9:6e:1f:8a:fb:37:4d:fc:26:cd:78:c4:
3f:83:90:69:70:be:ef:2a:99:51:a7:77:f6:68:23:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:93:96:50:9A:F0:17:76:C1:F7:D1:DA:18:63:AD:5D:B9:E2:BF
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:50:61:ea:53:06:62:19:73:ad:05:5c:d6:f9:61:d6:71:
8b:e4:92:47:bc:79:5c:c7:45:4c:aa:8b:55:0d:61:55:a5:7e:
f0:cf:fb:70:67:29:34:91:7b:ca:94:33:40:ca:2a:e8:d1:71:
cd:f6:99:f3:9a:88:3b:fd:9c:8e:0c:20:2b:67:b7:9b:26:b9:
75:6b:6d:92:40:cf:78:97:1a:9a:a7:23:cc:a6:76:92:23:cb:
f4:40:23:08:ef:22:75:27:74:73:61:19:49:83:06:6a:d3:3a:
03:a7:40:c9:61:20:e8:d6:c3:a7:25:7d:a8:b9:d3:47:43:04:
5f:5d:fd:94:46:3f:fb:53:5c:21:05:94:18:66:d5:52:74:83:
82:6f:c2:0d:e7:52:84:ca:ac:e7:d8:a0:ef:d3:f1:66:af:4e:
76:32:d7:79:f9:65:2e:2f:2c:2c:b1:6d:ca:44:fc:62:8f:39:
3e:24:9f:37:18:d8:54:32:1f:b5:b1:12:4b:76:51:d0:f5:a1:
ea:ad:21:1d:57:2f:0d:d2:49:82:9d:43:c2:ef:1c:27:fe:d2:
e0:90:1a:ee:ef:48:cc:e1:7a:f6:fb:e9:6c:e1:90:82:8b:fe:
cb:1c:cb:cb:13:36:b2:11:bb:b0:3c:34:31:00:4c:87:b7:82:
01:80:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:04:38 2026 by rpki-client