
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
File: C7u50Awy3Cf2uMqAHgDtKYM59qM.mft (raw, json)
Hash identifier: 9OqBN+HNbhXk4PrN0CTdW8lW7FPWb1zSUnUARqhfIy8=
Subject key identifier: 7A:6A:B8:B0:F2:3E:75:5B:13:53:EB:CD:2E:D6:9F:16:71:79:73:08
Authority key identifier: 0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
Certificate issuer: /CN=A913CFCF/serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
Manifest number: 5A
Signing time: Thu 23 Jul 2026 10:11:50 +0000
Manifest this update: Thu 23 Jul 2026 10:11:50 +0000
Manifest next update: Thu 30 Jul 2026 10:11:50 +0000
Files and hashes: 1: C7u50Awy3Cf2uMqAHgDtKYM59qM.crl (hash: Ml65RA87MVU3pUSksGrUs6R0Onab/QmeJBFw9bjnmP4=)
2: 26942F4A599311F1A3FD8B8FB0833773.roa (hash: Nyfp+UfhPuOBRAh+qVq1O8Chs66uGMJ4g8HQphx9F7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CFCF, serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Validity
Not Before: Jul 23 10:11:50 2026 GMT
Not After : Jul 30 10:11:50 2026 GMT
Subject: CN=6a61e8e6-23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:79:6d:e4:45:73:c3:66:39:be:14:bf:e2:
07:f9:91:28:0d:99:78:65:85:fd:dd:e0:e7:89:66:
d1:c4:72:ac:43:04:e7:29:ba:b8:68:3a:a4:43:8e:
2c:5a:77:08:ee:6d:b2:02:2d:7f:3a:48:7a:13:48:
43:17:cd:c9:c9:e9:79:25:21:26:0d:bc:d6:5c:32:
ec:4c:59:23:b3:d2:01:48:42:55:93:0b:be:9b:8e:
ff:e7:e1:eb:ca:f0:e0:a7:55:77:6b:3e:6b:31:bc:
ce:a0:e5:62:9d:eb:e5:c6:d9:6d:44:28:90:05:5b:
5f:17:d1:17:cb:9f:da:bc:7c:cf:14:f0:ec:ed:f6:
81:b7:af:3c:9e:e6:66:88:78:8f:0f:1e:e9:2a:22:
97:f4:4a:b3:60:c1:0d:43:cc:0c:c5:fc:39:3d:2d:
2d:c4:f7:d9:91:8f:a0:6f:10:95:86:43:d5:a5:6d:
f2:d5:da:73:a8:09:9a:5d:6d:c9:e5:e4:52:8f:eb:
b9:0b:0c:8c:61:c6:dc:41:27:8f:2d:57:81:0b:6f:
86:1f:f1:a5:8f:df:e3:d8:3c:5a:35:7b:32:bc:e7:
fd:6f:a7:ee:37:a3:aa:6f:13:93:94:9f:24:98:79:
e9:3a:7e:24:a0:08:8e:ad:8d:bd:f9:96:a3:de:2f:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:B8:B0:F2:3E:75:5B:13:53:EB:CD:2E:D6:9F:16:71:79:73:08
X509v3 Authority Key Identifier:
keyid:0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:54:c5:02:45:2f:2f:ac:09:f8:42:1e:e1:c7:02:57:79:84:
93:09:2d:61:3e:6b:45:d5:8a:d0:fd:8b:15:43:0a:cd:9a:dc:
b2:16:c6:f0:42:85:c0:66:4e:4d:a7:74:d6:ba:a9:4b:67:89:
c0:f4:3f:63:6a:85:f0:4f:50:77:96:67:6f:08:5b:54:83:ee:
17:1e:46:c4:ef:55:d9:c1:c3:75:91:ce:b5:c1:c4:0e:c0:5e:
b8:ec:5a:35:09:0d:ee:be:a0:d0:67:b7:d9:12:90:bd:e1:0d:
cd:38:65:cc:f0:ec:8c:2b:f1:2d:9f:98:00:74:ba:59:3c:3f:
45:be:06:7e:34:4d:79:d9:23:06:09:56:88:04:0c:0c:f3:ab:
11:26:4e:10:5c:54:e7:a8:e4:b1:72:38:d3:62:da:7e:25:8a:
ad:91:37:e8:64:c7:a3:4c:91:fe:ee:cf:20:a4:43:a8:ff:b1:
51:eb:07:97:81:a3:88:67:73:33:cd:cf:36:d9:22:87:cd:fe:
84:81:cc:d7:08:45:ff:71:35:a9:f7:4c:f2:f9:19:92:95:ed:
5d:20:a4:07:64:39:9d:39:07:e0:05:81:ee:74:31:52:8b:b7:
19:77:68:0a:a8:ba:c3:13:d7:e9:92:69:75:6c:df:a8:63:d6:
0f:fe:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:57 2026 by rpki-client