
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier: kCorlCOUyA/L4M5Hu5bJTtwEke+a20SBdB7hmhhpJEY=
Subject key identifier: D1:45:A9:ED:00:EF:C0:1E:FB:A5:9E:F4:C0:C7:BE:51:AE:D9:E1:C9
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number: 010E
Signing time: Wed 13 May 2026 06:06:28 +0000
Manifest this update: Wed 13 May 2026 06:06:27 +0000
Manifest next update: Wed 20 May 2026 06:06:27 +0000
Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: 89vciph+c5z9rKDvKXiiohvKKzOajqfCnXpb/ICB/fs=)
2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: May 13 06:06:27 2026 GMT
Not After : May 20 06:06:27 2026 GMT
Subject: CN=6a0414e4-887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:16:bd:e1:2e:d4:89:35:e4:7b:62:97:aa:
2a:8b:1c:ee:4a:4b:6a:e2:fb:68:f7:7a:e2:e9:77:
7e:b6:d7:37:91:ac:5b:1c:dc:79:93:e0:5e:c0:04:
51:19:4f:e5:d6:28:ca:e6:b1:ed:d9:76:81:13:eb:
34:98:8f:05:6f:62:ca:3e:ed:d7:65:29:92:b4:6f:
92:b8:35:2c:eb:dc:77:21:c7:7b:d4:e1:bd:ed:a5:
0d:ec:6a:89:3b:ac:4a:4d:be:60:45:5a:f4:89:82:
bb:ba:17:a3:aa:e9:5f:11:41:83:79:c4:2c:a7:62:
35:07:7f:3b:a6:d5:6a:c9:4c:54:ff:57:d6:83:ee:
14:d4:ff:40:31:54:57:c2:df:7f:87:70:ee:56:fb:
3c:a0:0b:32:34:5c:71:70:b8:ac:3a:bd:6e:2a:c0:
4f:ae:05:d5:7c:b7:7f:74:47:04:c6:bd:a5:4a:ef:
e5:2f:42:7e:9b:f8:a4:17:d3:80:3a:2f:6b:06:bc:
4d:12:d2:92:f9:00:74:ae:4b:89:63:d6:48:47:b5:
51:68:82:57:13:63:b9:65:99:a9:3b:c7:ed:e5:75:
72:27:8b:19:b8:91:08:45:68:ba:72:06:90:3c:16:
c5:a2:16:ae:2d:f2:b4:5c:5d:2b:a8:5d:c3:b4:6a:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:A9:ED:00:EF:C0:1E:FB:A5:9E:F4:C0:C7:BE:51:AE:D9:E1:C9
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:6a:27:9a:7b:d4:8b:0b:dc:79:1b:04:15:b5:20:33:bc:
10:a9:ca:ac:c6:c8:11:08:5a:4c:2c:31:aa:1a:0d:5a:a6:86:
e7:ad:87:a3:52:7f:dd:60:e3:ce:e3:54:ba:02:ea:69:e0:9b:
7f:86:e7:af:ae:ad:6d:e0:d6:08:2d:20:8f:04:89:3a:95:7e:
62:89:95:3b:da:1c:cb:3b:d8:6e:a2:da:23:3f:37:4b:ec:bf:
a1:e5:02:8f:c3:8e:c7:49:71:32:fb:3d:cd:6f:09:d4:95:4d:
76:28:66:34:a9:da:00:34:cf:cd:3e:cc:97:c2:ad:34:51:69:
6e:31:73:39:40:3a:51:0a:49:b3:df:3d:40:ab:22:9b:04:2a:
f0:c0:d9:36:09:d4:17:9c:10:2c:21:99:8a:f1:06:79:a2:c1:
84:f7:72:8d:8d:2f:fa:d8:86:e0:f1:ea:24:fc:e4:82:e7:c8:
e6:01:ae:9a:35:ec:0e:a1:d7:ae:be:c1:7e:27:04:07:e3:4a:
39:66:d8:88:48:cb:9f:f8:83:fb:4b:f9:df:45:ca:00:73:06:
1d:a3:a0:5e:a6:36:24:50:07:ab:4c:cc:00:1a:9f:9e:22:55:
16:05:03:99:4b:0b:6f:e6:78:ba:0a:32:53:3d:48:5a:b4:ac:
2f:e3:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:33 2026 by rpki-client