
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json)
Hash identifier: 2d5t3BicRIftUFVfNxvyifL3ixzBmqvxWW2rkRgefuM=
Subject key identifier: CA:61:5F:35:29:64:CA:85:BA:8E:0F:DF:5F:C8:AA:43:47:18:7B:33
Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
Manifest number: 58
Signing time: Thu 23 Jul 2026 10:13:52 +0000
Manifest this update: Thu 23 Jul 2026 10:13:51 +0000
Manifest next update: Thu 30 Jul 2026 10:13:51 +0000
Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: Vu9xXzXlXB71e81HosaYa7beOSa07lUDetqQTEXaxpc=)
2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Validity
Not Before: Jul 23 10:13:51 2026 GMT
Not After : Jul 30 10:13:51 2026 GMT
Subject: CN=6a61e960-4fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:c8:98:86:bb:d9:d4:90:31:4f:f1:b8:3a:
3a:d8:35:19:1e:96:c4:15:a4:88:be:73:d8:e6:45:
aa:6f:18:72:1b:37:85:83:1a:a6:27:85:de:03:de:
e8:f5:03:0e:b1:c7:15:27:37:d7:9e:8f:d5:63:1b:
4e:09:84:69:78:46:ed:cf:a7:8a:db:95:6d:aa:60:
0e:89:1a:3d:79:12:bb:50:c0:9e:34:2e:ae:1c:2c:
ca:e8:b1:3c:26:50:20:bb:53:33:e7:57:9a:88:dd:
e8:78:85:ea:96:b2:2c:52:29:80:50:4d:c7:71:63:
47:02:67:81:71:e9:fb:5a:8c:00:35:31:a6:ee:60:
59:eb:ff:76:70:9d:16:c3:91:d4:87:48:2f:e6:dd:
27:e8:b8:d4:96:8b:dd:2f:f9:2d:df:63:ee:96:64:
39:14:07:54:79:0c:76:93:9a:1b:03:78:18:9d:65:
c9:ea:bf:a6:93:1f:bb:0f:e2:36:c9:ec:56:f1:9a:
c0:29:2d:7f:2e:8e:37:84:17:e0:32:2f:ef:07:b2:
4c:e7:6b:e2:e3:71:c5:51:53:1c:3b:c2:c3:48:f3:
d2:d2:eb:29:32:25:46:52:cd:c1:9b:e7:78:e4:27:
04:01:00:62:d7:e6:75:8d:8f:5d:3c:16:c9:8f:37:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:5F:35:29:64:CA:85:BA:8E:0F:DF:5F:C8:AA:43:47:18:7B:33
X509v3 Authority Key Identifier:
keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:97:bc:3c:91:7b:d4:d0:7d:a3:5a:a4:e4:df:45:0e:7b:77:
3e:e7:be:96:54:53:a9:2b:aa:d3:d9:04:64:6d:3e:6e:cb:c9:
8b:58:5c:08:3a:2c:94:2e:4a:7c:ec:6c:01:ea:70:13:e7:1c:
bb:1f:24:9d:68:1e:bd:5c:02:13:1a:3e:13:67:7f:f6:f6:10:
89:79:f3:9f:8a:1d:c7:c7:1e:76:c6:ed:65:58:ac:61:86:30:
9a:df:5e:35:53:56:d8:ec:83:79:ce:ab:fb:2d:a5:1c:92:92:
d0:dd:f4:94:22:d1:8d:28:c4:9a:23:b5:8b:2a:9f:dd:8b:c1:
24:0e:e0:16:c4:ab:f0:32:6a:36:b2:4f:1c:f2:3c:de:34:a2:
ce:23:25:b1:f2:48:e7:9c:d1:41:25:22:45:2b:d1:39:22:e2:
39:da:08:0a:d4:d1:45:56:ba:f5:5c:14:db:db:1f:42:f2:17:
56:a7:84:b7:95:3e:0d:f1:87:b8:25:d7:d2:4f:5c:1b:40:e5:
05:58:c9:8c:a9:e9:eb:9e:21:cb:60:29:83:ff:e3:c6:ce:fc:
c2:fa:37:25:d6:83:af:92:bb:b4:49:a0:0b:5e:d5:68:5d:e0:
9b:de:a4:19:3a:17:47:5d:bd:48:fe:a1:54:1a:89:ea:84:bd:
62:26:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:24:03 2026 by rpki-client