
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json)
Hash identifier: Uzsmz6ep6+Ck/0WBkNRIcg0cWLY6SdVqtwqI1CCLHYA=
Subject key identifier: A4:35:B4:52:E4:15:11:7F:D5:7D:14:7E:2B:4A:22:8A:12:FB:A2:79
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
Manifest number: 79
Signing time: Mon 01 Jun 2026 08:37:21 +0000
Manifest this update: Mon 01 Jun 2026 08:37:20 +0000
Manifest next update: Mon 08 Jun 2026 08:37:20 +0000
Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: /V5PndJSL3d7oMs9MgMq1cBDaWXX+Z3Wj9vr5ah+lUQ=)
2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Validity
Not Before: Jun 1 08:37:20 2026 GMT
Not After : Jun 8 08:37:20 2026 GMT
Subject: CN=6a1d44c0-984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:e6:98:b5:ec:14:1b:a8:e8:4b:47:3a:4d:
47:e2:8c:8b:16:db:cd:ff:ec:ab:46:fc:d2:26:0f:
06:95:f9:46:80:92:1e:16:d3:94:58:d0:a6:d4:6d:
0b:14:9f:d1:10:cc:d2:3f:a1:95:6e:22:c6:29:3f:
38:73:aa:86:66:57:56:ae:4b:47:12:bb:ad:ce:65:
8f:b2:49:bd:68:da:12:2f:7e:42:47:f2:dd:71:d8:
5a:9e:66:3e:6c:27:a1:bb:55:5c:ea:c3:5e:88:db:
ae:7a:a1:0a:77:63:24:bf:54:5b:f5:18:46:09:2f:
86:80:cd:be:b7:d8:79:de:61:da:44:4b:25:7d:3c:
8e:77:67:07:3c:06:6e:c5:20:99:7f:52:71:1b:fd:
3d:62:17:3e:07:65:96:57:bf:9e:76:4f:b1:b1:77:
7f:6a:92:8d:a2:ec:e1:f5:84:1a:57:b0:b8:18:51:
84:7b:98:1e:96:31:c9:60:c0:af:11:49:62:00:07:
7c:31:a8:be:0c:2a:4b:73:fc:81:fa:f5:3e:a3:6a:
e2:cc:12:de:1f:e0:de:63:9c:ac:3a:68:7b:08:64:
31:a0:3e:38:96:4c:83:65:6d:ab:4e:35:dd:e9:dc:
58:25:49:b6:27:e8:08:e4:e8:53:dd:c9:ae:7d:01:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:B4:52:E4:15:11:7F:D5:7D:14:7E:2B:4A:22:8A:12:FB:A2:79
X509v3 Authority Key Identifier:
keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:a0:81:70:5b:cc:0b:09:c0:4c:f0:53:47:39:ef:fb:90:
81:e1:ff:43:90:91:be:84:f9:8f:6f:c4:1e:55:b5:ec:0b:28:
fd:fb:b0:82:f8:cd:39:60:6b:71:5c:fe:7f:cc:8d:36:ea:d8:
2e:19:bd:8e:d4:39:76:ca:71:96:73:b3:ec:2b:ea:f1:f3:6e:
7d:62:90:dc:33:f2:69:13:9e:5a:c4:db:94:87:53:98:30:51:
fc:77:10:ee:34:4e:44:74:69:a6:4c:77:08:d0:9b:77:ae:85:
33:bd:e0:e3:b3:93:8e:f9:df:ec:6c:5c:47:0f:5d:53:2f:04:
c1:ce:40:7e:35:67:0f:14:33:73:65:3b:3c:d3:ab:66:00:f9:
e8:69:74:64:2b:2b:e6:f1:51:3e:9a:c6:e4:f8:3c:e1:28:82:
1e:ab:de:be:3a:45:bd:b6:4d:f4:1d:df:e1:42:a6:70:d9:96:
63:19:9c:e2:70:3c:7b:8b:dc:be:d1:8b:f1:51:f1:d2:e3:0a:
11:38:ba:16:84:fe:99:f6:47:3b:ae:f7:54:33:1a:f8:10:59:
18:08:ad:ba:3e:ac:aa:d8:11:62:f6:c2:32:c5:24:e5:bd:35:
4d:c9:5f:06:c1:9e:5e:22:60:3c:55:10:8e:97:66:e3:eb:1c:
95:4a:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:23 2026 by rpki-client