
$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: OQCQEAfxp1mN+hf49FVE+2BYgvt5bKsollD8NuuUP1s=
Subject key identifier: FB:F1:6C:85:4C:8E:6D:8A:9C:41:F7:07:4B:BF:95:58:FA:23:4B:B8
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 07B5
Signing time: Wed 22 Jul 2026 22:08:09 +0000
Manifest this update: Wed 22 Jul 2026 22:08:09 +0000
Manifest next update: Wed 29 Jul 2026 22:08:09 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: zWGCW+Bjc9WJVI0n1c+M9XTGjJlLA4vgT8ZyTiBnN1E=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Jul 22 22:08:09 2026 GMT
Not After : Jul 29 22:08:09 2026 GMT
Subject: CN=6a613f49-663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:20:4d:28:3f:35:26:d6:e1:4f:2c:9d:25:
2c:23:e7:84:98:9a:c9:1f:43:6e:e4:5d:fa:64:de:
e5:16:18:8a:7d:56:7f:77:ed:b4:41:91:3d:b6:2e:
ae:fe:d1:25:38:f8:bc:ae:77:fc:7d:3b:75:e9:12:
dd:f0:bf:f4:86:bb:ac:47:6b:c6:9b:0a:26:fc:a0:
93:86:db:bb:83:66:7e:ce:cd:ca:51:50:78:3b:07:
c0:c0:2f:42:b0:87:00:81:4b:90:16:7c:f7:75:9b:
10:73:88:e7:6a:1c:5c:b9:ba:a2:78:c6:ce:4a:d2:
91:43:1a:ee:ba:24:53:16:d0:ad:bc:81:ae:3e:c2:
0d:59:f9:49:9e:01:4e:93:78:16:a2:ab:d3:f6:49:
d8:46:54:37:66:63:06:83:dd:6b:a4:3a:36:57:10:
cf:45:02:a8:f0:fb:28:9e:4e:2d:5e:b9:bf:60:09:
e0:da:b2:b2:7e:86:0e:85:9e:98:d3:dc:2e:b7:04:
ea:1a:04:ad:d3:8c:66:08:4c:0b:fb:c2:9e:0d:7c:
b6:a6:ef:af:88:74:f4:c2:95:f4:26:96:8b:38:ac:
af:1f:9b:75:cb:60:19:01:dd:11:dd:2b:c1:94:b1:
9e:d8:c1:2f:e4:c8:e4:ba:ae:3e:d7:d8:d9:1b:45:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:6C:85:4C:8E:6D:8A:9C:41:F7:07:4B:BF:95:58:FA:23:4B:B8
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:e8:74:1d:6c:fe:a2:59:3d:76:8b:8a:b3:e7:c9:d3:f4:
27:6f:68:b5:8f:67:d1:b0:f2:41:d5:e4:b3:d4:5f:af:4e:12:
9c:5b:13:d9:ac:4a:26:fb:31:53:46:74:b8:f0:7b:0b:78:3e:
9c:88:d3:bd:3a:42:41:27:77:3f:04:e1:98:41:0f:04:44:8b:
d5:3b:c2:8b:2c:88:c3:ed:80:3d:eb:50:b6:7b:3c:e7:12:df:
7d:3d:a8:2a:b0:13:19:72:af:a3:16:cb:db:61:7e:b3:39:39:
7b:9f:12:2a:9b:93:2d:d6:8d:cc:06:c0:3a:ed:6d:ee:39:5f:
f0:f5:b6:0f:37:fa:f7:0f:5c:3b:53:a8:48:6c:16:16:8d:d5:
fc:fe:8e:3f:77:c9:e9:d6:f9:10:bb:8b:72:39:ff:b4:39:60:
d0:73:b4:0d:f7:99:74:c2:2e:bc:7c:49:8c:2a:54:85:50:e3:
1a:1c:15:69:0e:23:fa:ab:62:5e:fc:93:28:22:2b:e1:d1:bd:
bd:c8:52:b4:d6:5b:59:1b:21:e2:3b:1f:05:17:31:80:2c:1c:
ae:dd:b6:cb:77:51:49:c2:09:1e:e7:c8:b8:34:87:b0:72:8f:
b7:8e:ca:d0:b7:2e:cb:ba:cb:0f:dc:44:32:f8:fd:da:f3:80:
a5:2e:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:24 2026 by rpki-client