
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json)
Hash identifier: RmiADq25x7NUCbMDyax6b4b7Opsc3anuHCOb7A5HjAg=
Subject key identifier: CE:57:AF:AA:EA:3A:53:CC:97:77:09:A6:63:58:ED:39:6F:59:FD:77
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
Manifest number: 051F
Signing time: Thu 03 Sep 2026 05:40:54 +0000
Manifest this update: Thu 03 Sep 2026 05:40:53 +0000
Manifest next update: Thu 10 Sep 2026 05:40:53 +0000
Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: Q9WVD4NTllxuHEgpZqxKFKt6p0VobiMUHeD+7Q+0uVQ=)
2: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=)
3: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=)
4: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=)
5: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=)
6: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=)
7: 04018F58A75A11F1998E3A213411F970.roa (hash: Br8VWReNn2kIUilsRcPk+KsT6Kue3Sa/9TUPm+SrlEU=)
8: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=)
9: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Sep 3 05:40:53 2026 GMT
Not After : Sep 10 05:40:53 2026 GMT
Subject: CN=6a990866-f0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:27:76:a7:a0:50:5c:cb:56:ce:fd:89:97:
98:21:5f:7d:49:d0:6c:45:f2:f0:0a:e7:5e:fe:fe:
58:5d:1a:e7:b1:01:20:26:c3:8c:c8:df:2a:22:5d:
0a:b5:01:03:c2:e2:0c:89:ba:8f:95:ae:91:18:a2:
77:48:55:f8:d6:cd:18:25:c8:52:ac:55:e4:c0:79:
78:cf:c0:0c:0d:07:f8:c1:41:f2:9c:ef:c2:87:8f:
c6:0b:28:a8:a6:c8:51:2e:c5:81:62:2e:02:0f:06:
47:ad:32:76:8c:8d:ea:dc:b4:c6:ad:96:5e:e8:c3:
7e:86:ac:21:ac:7c:53:79:34:b8:8c:55:cf:ef:1b:
2b:d9:f5:ac:52:19:b2:cd:df:4d:cd:85:cf:e9:f4:
3a:d6:e6:50:c3:e8:55:00:c8:58:3d:e5:eb:7d:17:
a5:a9:bf:d0:bd:72:da:da:8f:24:44:75:e2:70:13:
d8:80:45:b1:cf:62:cd:ca:c9:fc:21:c2:3c:24:ae:
f6:5b:6a:cb:39:ca:b9:5b:be:8c:b7:39:43:36:45:
1c:a4:dd:b6:81:0f:e4:e8:90:d6:07:f8:6e:46:2a:
f0:fd:12:0d:56:77:ad:fa:80:33:56:e0:a7:b9:19:
8d:7d:2b:5e:79:26:c8:bc:3f:be:d8:f0:3a:9f:50:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:AF:AA:EA:3A:53:CC:97:77:09:A6:63:58:ED:39:6F:59:FD:77
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ee:dd:7e:e3:55:f0:4e:da:f1:16:1e:04:15:5e:03:53:83:
dc:75:c4:7f:6c:2c:45:f9:2f:2a:f7:97:bc:dc:78:58:c9:81:
53:25:4a:2f:ee:d2:ee:c7:53:b5:c6:bd:a3:21:cb:00:52:72:
9f:75:a5:ed:7d:1e:1a:7e:65:c6:32:43:51:f2:b3:73:94:3a:
5e:74:40:3d:14:a7:09:de:94:52:f7:29:74:f9:08:3a:c4:ec:
cc:ed:90:f8:91:c6:aa:d7:79:16:86:c9:5b:47:4a:b4:45:da:
43:90:a8:c2:56:76:94:95:18:03:ca:19:de:f3:50:51:17:ef:
80:9f:35:6a:b6:94:b9:9b:86:80:37:23:4e:3b:d8:39:d3:a1:
21:2f:38:1c:14:7a:e1:05:5b:a9:d4:b7:18:04:96:62:00:b9:
ee:8d:b2:58:50:dc:c0:2e:b1:d5:c7:d2:e5:c3:f5:40:cb:8a:
b8:ae:e0:fc:39:7f:e5:1c:20:0e:5a:3e:c3:0b:61:18:da:8b:
7b:42:d0:7d:8d:71:cb:75:f1:d1:68:36:2c:3a:a1:14:a5:6b:
ef:46:27:36:4e:a6:0f:78:03:4a:c9:a6:2a:c5:81:e6:6c:2f:
a9:e9:84:f7:5f:c4:a2:59:53:ca:f5:2e:78:db:b9:e0:c9:41:
75:68:ea:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:22:56 2026 by rpki-client