
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json)
Hash identifier: dpMuzO9OuPmlLBdJqnyCha++USWRktkIXbzXvDEa9Ss=
Subject key identifier: D8:0F:36:77:6F:D2:C6:38:72:C0:F6:5E:A1:AF:2F:86:5B:5C:6E:3A
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial: 0771
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
Manifest number: 074A
Signing time: Fri 02 Oct 2026 22:19:49 +0000
Manifest this update: Fri 02 Oct 2026 22:19:49 +0000
Manifest next update: Fri 09 Oct 2026 22:19:49 +0000
Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: YIcyLBZlJSEvNf3AzAC2dN1sq0D+Z+1zvPAohsX14kc=)
2: 68308CB6676A11F1A123F6DC8C47A888.roa (hash: rjnw9xhN4TOAHf+pOL+H3jcUSMEv/tbgJ/sLHrbBTj8=)
3: EEAAACE61BD311F1B0DCA9E21A3D8C67.roa (hash: EU9LbE/4rvb2T+HaPvE7PyoFd2uQJNQLGVcUmAgd3Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Validity
Not Before: Oct 2 22:19:49 2026 GMT
Not After : Oct 9 22:19:49 2026 GMT
Subject: CN=6ac02e05-59a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:19:ca:f7:a7:d2:5d:90:f3:52:5c:d9:b7:
ed:e3:09:db:e1:4b:d7:cc:8c:9e:7e:bd:5f:be:79:
52:68:04:06:31:84:d1:1e:f4:30:bd:2d:a9:eb:25:
07:fb:d1:15:57:14:d6:77:ff:5b:76:51:08:30:6c:
78:ae:d2:ab:d2:6b:ad:e1:6c:2f:09:66:6c:cf:27:
2a:72:95:00:cb:67:5b:dd:0f:a9:03:7e:7f:cc:89:
ac:19:c4:0f:f1:33:3d:09:99:5e:7c:ed:6c:33:79:
1f:00:e7:16:ea:90:e8:93:50:0f:83:55:14:60:48:
92:0b:32:63:e7:2f:2b:dc:4d:41:a3:45:6c:76:94:
54:21:75:9a:4b:a0:06:8a:8e:b9:12:34:19:85:21:
30:13:47:39:7a:4d:58:05:97:3d:58:a2:7c:58:ed:
50:c0:03:a4:01:29:01:5d:67:b3:8c:ff:1f:8d:d0:
fc:7d:2a:48:2a:38:db:ae:c6:5e:2b:f2:e4:d7:22:
8b:b8:a2:26:60:db:ed:93:c1:08:69:75:f5:87:71:
8f:ea:ef:5f:85:0a:c6:8f:28:c8:b1:71:08:76:77:
8f:03:54:54:7a:14:62:60:2d:25:e1:38:e5:1d:5b:
72:38:66:63:d8:4a:a4:8b:80:96:1c:72:22:4f:af:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:36:77:6F:D2:C6:38:72:C0:F6:5E:A1:AF:2F:86:5B:5C:6E:3A
X509v3 Authority Key Identifier:
keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:49:70:60:6a:0d:0c:90:82:3e:69:c0:af:4d:fd:70:7c:f9:
ca:3f:01:dc:c9:82:4a:7a:54:03:b1:a9:ab:a5:a2:0a:d6:8c:
a0:4a:44:58:d6:2d:d3:5f:c6:3e:3c:2b:98:8a:6d:30:3f:5e:
1f:83:ee:a3:97:f2:19:08:8a:95:dd:5a:63:32:ad:e4:26:ee:
6b:8f:d8:3b:4b:d6:c0:01:6e:32:03:9b:6c:d5:95:8f:10:b9:
71:df:15:90:19:b6:31:2f:84:f2:32:71:01:18:78:52:01:f1:
c1:ad:8f:f3:86:a4:06:84:1c:4a:05:2f:98:2b:9c:d0:89:27:
71:51:a9:53:b6:c2:01:01:1a:3e:01:41:1b:cb:5a:bb:81:bf:
a2:30:b8:20:bf:3d:bc:08:13:81:9b:e2:62:dc:43:d3:03:51:
9c:7c:20:ec:a7:47:96:76:9a:1d:93:b0:b2:9c:1b:21:f7:59:
6d:e4:f6:5a:d5:cb:79:16:b2:93:6b:96:15:1e:2b:80:2e:7a:
a8:a1:97:76:d7:98:2a:12:f2:d8:7a:87:a9:2c:ce:ec:10:38:
fe:48:a1:0e:28:2a:0f:21:83:b8:c2:7a:da:50:60:50:e3:14:
30:c1:74:81:83:5f:e1:8f:f8:22:a9:5c:d1:9e:f4:3d:dc:82:
cc:0f:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:15:47 2026 by rpki-client