
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json)
Hash identifier: Nv1YPbYzMJDiN8AcjZmP1BZAtOrglWnW5O+8hhFHUQI=
Subject key identifier: A4:C7:59:FE:C0:7B:34:B1:01:85:7A:9B:9B:E1:33:2C:05:48:34:73
Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
Manifest number: 31
Signing time: Thu 21 May 2026 08:49:41 +0000
Manifest this update: Thu 21 May 2026 08:49:41 +0000
Manifest next update: Thu 28 May 2026 08:49:41 +0000
Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: MBdMLGKidSuSwYJKFAXzs3Pp7Q8Ghzn//SqE/e3pAjk=)
2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Validity
Not Before: May 21 08:49:41 2026 GMT
Not After : May 28 08:49:41 2026 GMT
Subject: CN=6a0ec725-b664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:e6:5b:18:b8:e4:62:b9:95:6c:59:9d:6c:
26:45:0a:f6:83:67:b4:31:79:11:df:32:cd:82:1a:
92:1e:80:fa:f3:6b:1b:be:de:c3:6c:58:f4:c9:88:
3d:ed:63:ba:73:ef:c8:5a:fb:d5:60:63:c5:7d:67:
15:47:63:f3:8e:e6:bb:ea:1b:e5:8d:41:7d:ed:61:
74:25:45:06:06:4d:a1:0c:33:9f:01:d8:5c:09:c5:
ff:9e:3b:1d:50:c6:90:05:1a:ad:42:45:5b:be:35:
71:d3:1e:4c:35:d6:6e:5b:a5:b0:40:52:40:ab:a3:
6e:c3:83:ed:fb:fe:d1:da:ce:1a:af:3c:6d:85:7b:
8c:7d:87:17:db:83:61:a8:d1:03:b9:f3:ae:75:db:
51:4f:f0:1a:77:4d:73:a5:82:58:29:d3:96:0d:29:
ad:9c:6c:db:f6:36:dc:9f:c2:9b:8a:7b:b8:ab:70:
23:4a:52:aa:0c:c9:23:7f:fb:54:16:a5:9f:81:cd:
9f:a3:ee:2d:85:44:00:90:4c:37:c1:04:b0:c7:81:
da:af:6c:68:75:19:85:df:8e:71:36:4c:4c:fa:92:
11:e4:17:c8:76:0d:83:c1:1d:be:1d:11:7c:92:d1:
e3:46:c5:4a:ca:42:8e:b6:3a:7b:52:a5:6b:a7:03:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:59:FE:C0:7B:34:B1:01:85:7A:9B:9B:E1:33:2C:05:48:34:73
X509v3 Authority Key Identifier:
keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:79:fd:4b:93:79:ba:7d:33:15:07:a6:bb:84:93:11:03:
28:99:1a:43:b1:a4:bf:03:80:91:e8:a3:27:cc:1d:d9:b6:48:
57:7d:56:8c:0e:43:af:6d:86:b3:68:b6:32:ea:26:2f:7b:25:
42:a0:fd:26:12:6e:9d:d0:b1:de:de:ba:f9:ba:7f:f7:10:5f:
27:dd:fe:22:56:f6:9a:a4:c3:e8:f6:04:c8:43:f9:1e:6f:76:
ea:fa:d5:22:80:27:2c:6f:69:51:d9:40:22:e8:c2:bb:cb:93:
4e:ab:3e:f5:e6:e2:d5:d9:11:54:1c:65:57:e6:8c:fe:59:83:
f4:c4:7c:75:ae:ab:47:74:32:84:04:ce:54:7f:6e:6a:3e:0d:
1c:fc:ed:01:d9:86:87:b4:80:06:23:9b:fd:ff:fc:d1:d4:90:
c4:6e:4a:21:d2:3f:89:f3:02:47:ba:07:1b:92:b4:70:45:59:
92:40:9a:fb:4f:9a:7b:f2:f9:8e:fc:b3:65:bc:4c:d2:8e:f0:
06:a5:be:f6:7b:c2:a3:93:5e:09:9b:90:c3:f0:06:a7:63:60:
a6:b2:ce:1a:f6:0e:48:0f:46:da:0e:e2:77:04:4d:23:86:44:
25:65:ce:23:be:19:6c:e5:3a:24:c8:42:b6:96:5f:d7:71:69:
ec:0a:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:11 2026 by rpki-client