
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json)
Hash identifier: EZI/D7Igtg6/1QW35E3PUUMO3guqLFgX5FJJq5lZBOE=
Subject key identifier: 0A:D5:D4:03:FE:08:68:FA:D4:3E:4F:99:86:5C:88:02:73:3A:33:33
Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
Manifest number: A7
Signing time: Thu 23 Jul 2026 09:03:33 +0000
Manifest this update: Thu 23 Jul 2026 09:03:32 +0000
Manifest next update: Thu 30 Jul 2026 09:03:32 +0000
Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: 4po4KEe458jZme7wWh1U3MVh2k9P+jDfvyPj9HH6vKs=)
2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Validity
Not Before: Jul 23 09:03:32 2026 GMT
Not After : Jul 30 09:03:32 2026 GMT
Subject: CN=6a61d8e5-da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:6b:4d:4b:b6:48:f4:86:97:5f:59:31:c0:
da:ba:0d:7b:1d:e1:70:fe:0e:6e:eb:d6:15:89:d1:
99:72:39:1f:de:9b:4e:e7:62:7a:fc:fb:9f:6d:46:
a1:37:eb:65:0c:a8:09:46:f1:2a:e6:ad:87:50:3c:
6e:e0:01:01:ad:76:01:38:59:ed:b2:b9:d1:13:1a:
a8:da:6b:99:57:ba:57:28:d9:d4:cd:bb:a7:22:b3:
3b:1b:f1:15:14:4e:94:05:02:c3:08:d3:ee:e2:ae:
c2:dc:98:1b:20:e1:8a:be:77:24:41:25:58:5c:8a:
1e:14:a9:eb:ce:76:f6:0b:c0:fb:be:a3:05:b3:ec:
a5:50:43:e4:8e:37:8c:77:eb:0f:6a:e7:46:ef:d6:
25:44:62:6a:a1:4a:43:4b:fe:9e:f4:89:ec:df:9c:
86:e9:fb:64:ac:45:76:cd:35:ec:1c:a0:4c:f1:26:
c0:fc:0c:e0:d6:29:3c:12:37:2d:95:84:b4:ab:52:
b1:02:e2:91:9e:24:5a:c7:b8:f2:c2:18:de:6b:7e:
6d:f5:da:ff:91:c9:8e:4f:76:dd:4d:72:47:13:50:
93:49:f7:72:8f:38:94:62:a9:7a:2e:08:79:8e:a4:
27:51:fb:57:57:23:d9:35:7a:00:cb:25:d1:66:8a:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:D4:03:FE:08:68:FA:D4:3E:4F:99:86:5C:88:02:73:3A:33:33
X509v3 Authority Key Identifier:
keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ef:c3:e6:47:52:4f:7c:06:92:ae:a2:e4:1b:da:5c:17:67:
b7:0d:17:7d:c1:d5:22:a3:58:62:a1:39:da:90:08:6c:e2:b7:
61:12:66:19:4c:e6:4f:47:79:d3:bb:67:03:76:42:b7:cd:b4:
f0:f7:1b:71:d0:5d:c6:cc:c7:64:23:94:1b:7d:bf:35:7f:fe:
89:94:b4:eb:12:65:b2:9b:9e:a6:d8:3b:67:8c:ce:fa:a1:80:
35:89:51:4a:a5:55:99:89:7c:4e:35:a2:d1:41:82:ae:99:a8:
2b:d3:95:63:a7:6f:de:9b:1b:0f:51:12:4b:dc:09:76:83:d3:
88:f3:1c:fb:dd:ae:c2:42:9d:7e:ce:dd:1a:74:c2:84:01:56:
51:3b:cf:e6:ff:71:de:f3:83:c7:88:71:04:46:af:79:4e:07:
cd:c5:d1:35:6a:ac:fd:8c:c9:bc:b6:a9:09:08:6a:5a:0d:71:
72:29:5b:18:6b:85:3c:f2:dc:16:58:f4:ba:51:7c:9a:b0:6c:
e6:58:aa:ee:fb:21:5f:6a:af:d0:ad:85:f1:c5:86:21:06:56:
8c:4f:fb:fa:c0:0e:c9:61:9e:e1:6f:d3:d6:8b:34:74:b1:53:
ef:60:dd:90:9b:bc:42:74:29:0a:95:88:0c:8f:44:0a:7b:53:
04:37:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:57 2026 by rpki-client