
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier: S4Dnwmn3F+v4eEILsttMTpbmtOtrV0PJ8e8BJ8NIOQE=
Subject key identifier: DA:E4:D8:B7:DF:80:59:C0:26:F8:FB:9E:1A:31:3B:A0:06:BD:76:90
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number: 015F
Signing time: Wed 19 Aug 2026 05:43:54 +0000
Manifest this update: Wed 19 Aug 2026 05:43:53 +0000
Manifest next update: Wed 26 Aug 2026 05:43:53 +0000
Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: NAJWeFgxRLA1JzJP1bZujxvhz6HT7wQar6jPicFCSb4=)
2: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: am92Gr0MD4Jd5/4EoBAS/UqJDGiw/kv6GtuALWW7PUU=)
3: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Validity
Not Before: Aug 19 05:43:53 2026 GMT
Not After : Aug 26 05:43:53 2026 GMT
Subject: CN=6a85429a-6fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:d2:0d:68:de:a2:6c:c9:a3:b4:b7:4e:45:
36:bb:87:c0:7c:ca:90:06:d2:c5:bd:03:2b:a4:bd:
53:88:53:5b:1f:0d:16:42:2f:b0:33:dc:76:4f:df:
f1:36:63:0e:bb:be:9d:17:84:43:d6:3a:f6:9a:82:
37:5d:1e:aa:97:80:fc:fb:13:43:3d:35:4a:a5:e1:
44:9e:76:01:c5:d8:ff:16:c4:c3:81:8d:23:96:39:
fc:35:ce:b2:67:fc:4d:19:3d:29:34:db:c2:81:4a:
7c:80:27:66:7e:a7:2e:88:c8:c4:18:26:1a:45:49:
ac:c9:5e:79:88:66:ea:d2:91:ff:2f:69:fd:fa:af:
48:55:dd:2e:35:7f:37:8e:9b:77:56:d8:a6:8f:79:
69:99:f0:f3:0a:cf:09:dc:bf:b6:fa:7f:14:92:7b:
2d:25:be:6b:e7:6f:0b:4d:46:7d:68:e3:68:f8:a0:
15:62:fd:b4:f4:f4:2d:2c:71:cd:6d:67:15:c8:60:
df:7a:75:72:43:5f:9f:ce:45:38:87:a8:fe:cd:24:
d5:42:8b:72:a1:81:c9:67:23:2e:f2:e1:bc:26:ea:
04:a3:3e:58:f2:2b:1d:81:28:0a:22:53:ca:0b:7c:
a9:ed:8b:06:62:f1:f8:59:35:eb:3b:4d:97:f6:31:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:D8:B7:DF:80:59:C0:26:F8:FB:9E:1A:31:3B:A0:06:BD:76:90
X509v3 Authority Key Identifier:
keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d2:87:ad:4e:a0:5f:5f:d5:c6:92:42:a0:83:14:e6:81:c7:
40:35:36:03:49:b0:6d:3c:74:d6:74:35:97:f9:82:cf:60:d5:
a8:73:49:66:b3:8e:3e:d8:52:15:9d:16:02:dd:e8:9e:e4:0f:
75:08:ad:f6:56:23:08:af:28:70:bc:d6:08:d9:0e:27:41:3d:
91:da:78:7f:59:f0:0e:5d:3d:18:68:ca:4f:8f:c6:f4:c0:d1:
21:34:41:9d:ee:c4:5b:0e:f2:49:76:8b:de:cb:5c:31:53:55:
09:59:15:9c:f0:a4:f4:0b:cc:43:87:78:90:d7:72:8c:61:09:
f6:6e:ad:49:18:b0:c2:af:83:27:67:c5:bd:26:59:77:d7:5b:
6f:de:d1:ef:96:a7:ee:23:08:38:2d:10:21:7c:f1:f6:74:cb:
32:2d:b1:56:1d:1b:09:25:56:46:ab:0a:4f:44:35:70:11:94:
9f:dc:06:a7:65:7e:5a:79:ff:74:e6:26:c4:94:a6:ed:75:17:
80:41:84:26:40:15:c3:9b:b0:1f:72:c4:83:a2:07:15:61:49:
7c:ab:60:30:bb:aa:e4:d6:42:e8:03:29:7c:14:83:e6:25:a8:
60:8b:15:c5:ca:ab:63:0d:43:ec:52:5d:8b:0b:c5:28:22:da:
0d:25:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:32:35 2026 by rpki-client