
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json)
Hash identifier: F52IcDHddRFqgDfxOWuwuodSnsYo2FzggBYTYvVhJCw=
Subject key identifier: E8:11:8B:77:A4:18:6B:CD:2D:54:65:FF:23:AE:27:D4:A7:32:1B:03
Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
Manifest number: 82
Signing time: Mon 11 May 2026 07:49:06 +0000
Manifest this update: Mon 11 May 2026 07:49:05 +0000
Manifest next update: Mon 18 May 2026 07:49:05 +0000
Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: I+qsm4k7680FrK4PkXeAynSqffecy4tyMUsaHskfmug=)
2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=)
3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Validity
Not Before: May 11 07:49:05 2026 GMT
Not After : May 18 07:49:05 2026 GMT
Subject: CN=6a0189f2-48f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ee:c2:8e:39:0e:f4:48:93:3d:e9:9a:bd:6e:
8a:38:c5:68:32:98:03:21:90:06:1d:28:a3:7e:61:
ee:81:b0:fd:15:09:5d:5a:38:df:2d:24:ad:2b:53:
08:6f:5c:ec:f6:86:98:b2:43:51:05:8a:30:a4:24:
4f:69:4b:e9:d5:70:de:be:ed:49:6f:cd:a6:e0:fe:
32:5d:cc:32:a0:30:7f:8a:ca:fa:ba:30:3c:13:95:
1a:8b:fb:59:ee:eb:7d:8c:2e:35:8a:4b:90:82:69:
e0:73:13:9f:20:03:49:2f:41:ee:5c:2d:36:77:64:
7c:7c:3b:60:74:75:65:97:9f:af:37:fd:da:a9:81:
4c:77:a8:51:25:fe:0a:4a:29:b4:24:49:dc:58:99:
d4:88:31:59:28:92:cc:de:df:3e:79:54:46:ff:7e:
fc:59:0c:09:da:92:84:d5:e4:a5:62:dc:32:fd:aa:
96:78:63:27:06:ef:c2:b5:44:6c:9e:fc:76:f5:30:
85:82:29:01:3e:b5:ac:a2:c0:8d:fd:21:2c:23:3c:
85:97:b8:57:46:c8:d4:66:c6:bd:64:f0:da:b8:10:
02:34:df:a1:2d:3e:0e:0f:ee:61:4b:d7:84:31:b2:
4c:99:bb:38:b7:ad:6b:fb:14:b3:32:37:f1:de:32:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:8B:77:A4:18:6B:CD:2D:54:65:FF:23:AE:27:D4:A7:32:1B:03
X509v3 Authority Key Identifier:
keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e7:f8:f0:e5:bf:00:82:13:52:f2:5d:5e:67:b2:3b:1c:15:
9c:5b:a1:a4:74:70:38:7b:fc:a9:7f:9a:9e:98:bf:41:db:b1:
a0:51:d2:71:82:c6:a8:d5:50:4d:d9:f1:34:15:a9:65:95:2d:
31:24:d9:2c:2f:13:de:91:c2:9f:50:ac:dc:0e:6d:a4:07:90:
4c:4e:93:dd:de:63:79:43:12:0c:ca:0c:79:50:07:d2:6d:31:
ad:40:9e:f1:8b:32:7c:3e:20:3b:91:d0:57:47:7f:e5:3d:94:
a3:1e:c5:47:ac:d0:f2:09:3b:05:bf:02:3a:1b:84:04:62:07:
b3:03:60:a2:52:b7:1d:cb:0b:32:64:dc:e1:59:89:89:69:f5:
a8:7f:38:7d:03:1c:54:38:31:b1:59:93:0f:65:dc:a4:2c:b9:
47:b3:d0:b0:b9:01:b4:52:8d:4d:5b:10:01:64:97:59:ef:95:
69:5f:ff:8a:49:99:0f:a1:fa:0c:0c:ec:9b:bc:a1:c6:bf:73:
79:e6:7e:66:74:33:4c:1a:19:8e:53:ca:31:2f:a0:e0:9c:cb:
72:b7:4f:4d:82:50:ef:18:7c:28:5a:c8:ad:b4:4c:cd:7f:eb:
0e:5b:2a:a3:0c:32:1b:af:30:80:ce:ed:60:96:ee:45:4e:f9:
b3:8c:d1:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB
ODFBNTdBNDAwHhcNMjYwNTExMDc0OTA1WhcNMjYwNTE4MDc0OTA1WjAYMRYwFAYD
VQQDEw02YTAxODlmMi00OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8e7CjjkO9EiTPemavW6KOMVoMpgDIZAGHSijfmHugbD9FQldWjjfLSStK1MI
b1zs9oaYskNRBYowpCRPaUvp1XDevu1Jb82m4P4yXcwyoDB/isr6ujA8E5Uai/tZ
7ut9jC41ikuQgmngcxOfIANJL0HuXC02d2R8fDtgdHVll5+vN/3aqYFMd6hRJf4K
Sim0JEncWJnUiDFZKJLM3t8+eVRG/378WQwJ2pKE1eSlYtwy/aqWeGMnBu/CtURs
nvx29TCFgikBPrWsosCN/SEsIzyFl7hXRsjUZsa9ZPDauBACNN+hLT4OD+5hS9eE
MbJMmbs4t61r+xSzMjfx3jI9/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOgRi3ek
GGvNLVRl/yOuJ9SnMhsDMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF
MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf
Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWOf48OW/AIITUvJdXmeyOxwVnFuhpHRwOHv8qX+anpi/QduxoFHScYLGqNVQ
TdnxNBWpZZUtMSTZLC8T3pHCn1Cs3A5tpAeQTE6T3d5jeUMSDMoMeVAH0m0xrUCe
8YsyfD4gO5HQV0d/5T2Uox7FR6zQ8gk7Bb8COhuEBGIHswNgolK3HcsLMmTc4VmJ
iWn1qH84fQMcVDgxsVmTD2XcpCy5R7PQsLkBtFKNTVsQAWSXWe+VaV//ikmZD6H6
DAzsm7yhxr9zeeZ+ZnQzTBoZjlPKMS+g4JzLcrdPTYJQ7xh8KFrIrbRMzX/rDlsq
owwyG68wgM7tYJbuRU75s4zRFg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:35 2026 by rpki-client