
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json)
Hash identifier: 2YU2GTml2ByBoyE/aqDqpVuBhV45wD0FmUUFz5MSzLs=
Subject key identifier: 1A:F5:69:C7:95:61:75:D0:D1:FA:E3:F0:DC:F9:06:AD:FB:A9:A5:63
Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
Manifest number: A6
Signing time: Thu 23 Jul 2026 09:06:07 +0000
Manifest this update: Thu 23 Jul 2026 09:06:06 +0000
Manifest next update: Thu 30 Jul 2026 09:06:06 +0000
Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: dLcrG3CcCjWBDlexZm3q3tTDahaf0KmePzH0HFpMpHE=)
2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=)
3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Validity
Not Before: Jul 23 09:06:06 2026 GMT
Not After : Jul 30 09:06:06 2026 GMT
Subject: CN=6a61d97f-3c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:35:04:c0:44:1b:7a:c8:39:aa:7d:e4:15:
fc:be:3b:40:39:68:a3:32:b5:62:94:e5:29:85:74:
52:60:ee:50:b6:af:93:f2:ad:b4:9b:9c:c8:33:09:
ca:4f:fa:6f:9d:61:a8:88:7a:c8:cd:5b:91:a4:9e:
3e:cb:85:30:25:0e:85:7b:bf:58:b4:d4:66:e9:28:
2b:37:73:9c:a2:59:72:0b:e7:c2:e8:2d:d4:d8:29:
a7:63:dc:89:c6:38:83:b2:1f:f0:c3:3a:5e:65:1f:
71:30:d4:82:3c:ef:02:85:56:8d:97:e3:d8:b2:f9:
95:5c:45:99:83:55:89:8b:00:01:e1:28:4c:b2:ea:
e4:fa:a3:71:71:f9:13:0c:2a:69:47:c1:a1:5a:ef:
21:d3:e9:5a:e6:d1:76:ff:31:8f:37:00:01:4e:e9:
aa:b9:ab:1b:74:5a:ae:6e:4d:c1:c8:b3:61:05:da:
34:69:85:80:c4:33:6f:71:49:9e:83:8f:a0:1c:bd:
71:0f:bd:dd:38:cc:45:42:4a:ce:7d:aa:79:75:e1:
73:28:f6:d9:5b:64:68:56:2f:33:80:e0:01:d7:2d:
2a:fd:96:0d:e4:82:77:94:9e:df:57:df:b2:df:ad:
3a:a8:0d:33:bf:13:27:56:3c:59:4e:55:84:82:44:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:69:C7:95:61:75:D0:D1:FA:E3:F0:DC:F9:06:AD:FB:A9:A5:63
X509v3 Authority Key Identifier:
keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:cf:50:9b:59:64:1a:0c:cb:b8:cd:3e:0f:0d:0b:fb:94:18:
d2:93:21:94:51:d8:43:02:2b:b9:7f:d2:ed:e3:89:b3:49:cc:
e0:68:13:ce:3c:65:e8:51:23:cf:8d:92:2b:97:22:84:7f:d6:
bc:21:d8:35:35:25:f7:5e:e2:df:8c:53:be:60:8d:d3:24:cc:
23:bb:ac:3e:15:b1:a1:96:dc:6b:c3:97:eb:d5:00:68:e5:2b:
0d:c3:55:55:e8:29:54:1c:c0:16:4e:f6:30:b3:68:04:3d:e9:
3e:39:b3:1b:d9:57:5b:2b:1d:2a:69:27:f7:c5:69:65:22:64:
1d:c0:03:f3:01:ea:d7:ae:04:48:61:fd:ca:9f:f5:7a:70:70:
7d:5f:e5:19:9d:45:54:31:56:2f:75:c8:46:39:a5:cd:e3:e2:
7f:9a:cc:c4:40:e5:f9:dc:65:76:e7:fd:2b:8a:61:89:08:fe:
c2:77:f7:94:03:55:08:22:47:eb:00:4c:e7:a5:de:dd:ec:83:
00:e2:12:15:26:0a:5e:39:e4:f6:68:27:61:ea:a5:1a:d3:42:
3e:08:02:00:23:fa:a0:e9:db:e6:64:ac:7b:b3:15:9d:e4:4e:
a1:d4:49:bf:bb:50:c3:36:21:94:0c:1f:5b:d9:05:8b:71:11:
f5:67:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:31 2026 by rpki-client