
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
File: -w7kjrCDajqH89uEyQ0NmXQYO7w.mft (raw, json)
Hash identifier: q+YYO3BhxCXsGA8+bzx95J64Y+uBkBfae9TTgQKhYsY=
Subject key identifier: 73:21:EE:04:E3:76:B7:01:10:62:71:B4:64:06:F6:E6:A1:88:31:94
Authority key identifier: FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
Certificate issuer: /CN=A91DF92B/serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
Manifest number: 1F
Signing time: Tue 07 Jul 2026 10:12:06 +0000
Manifest this update: Tue 07 Jul 2026 10:12:06 +0000
Manifest next update: Tue 14 Jul 2026 10:12:06 +0000
Files and hashes: 1: -w7kjrCDajqH89uEyQ0NmXQYO7w.crl (hash: VTxQ4N1/W3XF1kkMXNfSsSI0/fse9z31JCekAApjQgs=)
2: 4B7CEF5A4B5F11F19135E42BB0833773.roa (hash: j9oLKt21URlcYaAs/2+sCC08EJUvzOERXy2T9IPR3BM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF92B, serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Validity
Not Before: Jul 7 10:12:06 2026 GMT
Not After : Jul 14 10:12:06 2026 GMT
Subject: CN=6a4cd0f6-f86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:3c:b4:03:70:5f:08:69:29:f2:ad:c9:ed:
63:66:8c:d9:ca:7c:82:17:e0:96:3f:6a:b9:d8:ca:
80:59:51:cb:0f:13:93:35:90:72:38:48:97:4c:85:
b9:fe:76:0b:e3:83:26:89:7f:e4:e7:7e:63:36:78:
2d:e5:d0:d5:27:5a:3f:37:b2:c1:13:81:8d:91:a0:
cf:7a:e0:63:3d:7c:9e:18:40:6b:2d:94:7d:95:3b:
60:8c:08:ba:15:e1:d8:1c:f6:a7:71:ae:02:63:cb:
7e:02:38:31:e2:e4:99:00:da:68:b0:1c:44:74:88:
96:e1:ce:a3:03:14:c8:66:bc:41:ad:35:38:f0:1f:
6a:cb:88:08:db:39:bc:42:2b:ae:8c:f0:2c:4f:18:
59:a8:fe:d9:dd:65:8f:1b:28:0f:35:df:a1:f0:a7:
33:36:5b:2c:10:0a:f7:c1:87:34:4f:1f:9e:6a:e3:
93:c6:d1:59:00:b1:00:b0:b1:56:5f:51:de:cd:c0:
c2:60:da:e1:4e:cc:46:cd:a2:72:af:c7:d3:51:da:
e9:7c:00:90:43:96:cb:18:5c:9f:87:46:a0:1d:81:
ba:ff:4b:76:63:a0:de:4b:4c:a1:ec:79:87:45:ec:
92:de:90:73:2f:f8:4c:20:36:42:29:69:f2:72:8c:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:EE:04:E3:76:B7:01:10:62:71:B4:64:06:F6:E6:A1:88:31:94
X509v3 Authority Key Identifier:
keyid:FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:88:9e:3c:60:47:7d:d0:88:a1:b8:c0:3c:51:e4:26:2d:
18:cb:76:da:26:90:54:fb:9b:75:b5:26:1b:1b:44:7a:43:78:
be:f1:a9:50:86:dc:e9:24:d3:45:be:e1:c1:95:06:41:99:58:
a6:c1:42:07:3e:2d:fb:4f:84:ca:96:12:27:7b:fd:ae:14:74:
ee:ed:fb:50:e2:86:87:1f:c5:40:b9:e8:ec:ad:19:29:81:82:
cc:d7:fa:37:d9:87:e8:7a:fc:b1:b5:4e:f1:89:73:7f:59:01:
de:44:4f:89:ed:19:7a:d7:22:64:42:15:70:a9:fb:11:3b:4b:
02:3d:61:fb:88:d9:a7:7e:21:4b:2e:37:07:42:5f:6b:bb:6d:
80:d8:de:54:d4:8f:24:93:c7:51:c8:42:b8:27:95:16:d0:b5:
ba:41:72:fa:d2:c4:ad:1d:c2:50:c5:f9:98:94:ef:03:79:f2:
6c:f9:6b:c6:62:cc:4c:00:1c:7b:8f:be:e1:c7:cc:c8:d0:6f:
14:d0:04:df:fa:83:f3:ea:83:6b:7a:16:d7:e8:9c:c1:2d:c5:
a7:3d:03:95:7f:3e:4d:83:51:95:ad:ca:5f:4e:7b:13:22:0f:
20:7f:25:37:e7:f3:fc:8c:35:70:d2:e2:af:72:b6:ed:19:4a:
a4:95:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:05:01 2026 by rpki-client