
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
File: d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json)
Hash identifier: 0Fec4rNamY9No6n10pno+J1xJuhsYLY6sqi5bLEqjcE=
Subject key identifier: 63:35:C7:91:A1:3C:9E:C0:A3:FB:4B:15:5D:05:75:3D:DF:6F:53:A5
Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
Certificate issuer: /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
Manifest number: 1E
Signing time: Fri 17 Jul 2026 10:15:48 +0000
Manifest this update: Fri 17 Jul 2026 10:15:47 +0000
Manifest next update: Fri 24 Jul 2026 10:15:47 +0000
Files and hashes: 1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: kxAsWOgacrf4PjY5028wviYPS7fERs3rwzhHjYWq/2w=)
2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B
Validity
Not Before: Jul 17 10:15:47 2026 GMT
Not After : Jul 24 10:15:47 2026 GMT
Subject: CN=6a5a00d4-9aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:46:f5:fa:18:4c:ed:3e:81:55:54:34:c5:
ca:2f:1c:b9:d9:a9:72:5d:d9:4a:62:ea:1b:3a:2e:
5d:04:6d:1d:ea:5c:53:a5:19:e9:ce:db:3a:8f:a1:
48:bf:75:5a:4e:d8:2c:d5:1c:bb:38:c6:a3:d4:bb:
d1:ab:b3:bd:21:fe:fa:fe:5b:8d:1d:16:36:17:48:
e0:95:bc:24:b6:69:47:38:97:72:17:76:7f:bf:35:
4d:c6:fa:8e:13:e0:9f:a9:9a:a8:e1:54:e4:17:1d:
c0:b7:6e:95:03:de:52:48:bd:29:32:5b:b4:ef:91:
a4:24:88:eb:f4:e3:75:0c:af:d3:85:09:42:a8:b5:
be:69:dc:4e:b5:66:25:9c:78:4f:38:2b:8f:d3:e1:
9e:fd:21:65:36:1e:38:56:ce:e4:b9:3a:7e:a7:11:
5e:4b:ec:9e:03:16:b0:53:ba:8e:c2:a5:5e:2a:74:
35:b6:a9:03:67:39:65:92:9e:f5:90:79:1a:80:46:
e1:49:22:5e:b1:7a:7b:b2:39:2d:7b:63:23:84:df:
78:8b:e2:7e:31:2b:fe:03:47:34:c6:1e:23:a8:ab:
b2:d9:2d:68:4c:09:a5:cd:12:03:91:bc:6a:ed:ad:
6d:77:6d:d4:b9:57:92:2b:14:d1:44:1b:44:93:89:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:C7:91:A1:3C:9E:C0:A3:FB:4B:15:5D:05:75:3D:DF:6F:53:A5
X509v3 Authority Key Identifier:
keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:0b:ae:6b:3e:4e:0a:4d:d2:1b:bc:a3:00:2b:11:9f:a6:
35:fb:0b:a5:80:05:41:35:ea:63:f0:4d:82:d8:1b:83:6d:16:
72:b8:e6:16:67:1a:db:07:fa:4d:8f:27:7c:1c:7a:2b:0f:f9:
67:18:73:4c:c2:77:14:77:2d:8b:0b:2e:0c:a5:a0:fb:9a:0d:
53:67:13:95:25:c2:6c:fb:f5:ca:67:10:a8:bc:4d:fb:09:8f:
eb:50:08:20:a1:d3:93:cb:ab:6e:1f:a0:3b:e0:cc:5d:5a:c4:
bc:88:a5:7d:c5:6f:6a:53:cd:04:41:79:8e:84:49:dd:b1:09:
5d:c8:9b:15:13:2e:47:72:90:f2:c1:40:a5:5a:2f:21:84:99:
45:86:1a:69:df:8a:2d:af:c2:7d:8e:63:7c:22:7a:e9:a0:8b:
b9:09:67:b3:48:26:14:32:4b:70:4b:45:76:b9:cb:e6:59:10:
a2:ea:98:2e:3a:97:f7:aa:2d:0c:57:68:55:c2:28:56:c8:0c:
4d:73:7e:f7:f2:2d:99:33:cb:21:75:3f:da:00:b2:79:82:cc:
58:02:39:dc:6d:51:34:06:74:13:3f:11:ec:a4:51:f9:c7:19:
d3:9f:89:00:dc:2d:17:3d:fd:1f:d7:5b:be:e2:6e:de:50:ea:
6b:cd:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:38 2026 by rpki-client