
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier: UI/t0Cjp55CoemYwyfbO6VA9m0E/UFE2qxIvOqGCRHY=
Subject key identifier: BD:60:7F:2C:1A:CA:A5:BF:89:2A:C5:66:85:18:8F:C6:E9:88:0E:58
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial: 101A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number: 1007
Signing time: Tue 12 May 2026 17:29:06 +0000
Manifest this update: Tue 12 May 2026 17:29:06 +0000
Manifest next update: Tue 19 May 2026 17:29:06 +0000
Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: r2NYgfglsnFyq/sftYCHpqIXQuCC+67862/AfISoWQs=)
2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: GpIlPzjXhUM0zJ+cM7pnn7EyYVYFkBP5Hh3rm33qqKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4122 (0x101a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Validity
Not Before: May 12 17:29:06 2026 GMT
Not After : May 19 17:29:06 2026 GMT
Subject: CN=6a036362-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:eb:cd:d4:23:cc:00:6b:ea:16:d8:6c:79:
96:7c:8b:b3:80:fc:4b:6b:98:74:53:a9:61:90:a3:
c9:28:5f:b1:45:64:88:40:67:59:e9:67:ec:ec:f3:
44:1f:99:c4:f5:fc:c1:f7:69:bd:86:e4:f3:a3:f4:
bf:38:30:d6:48:84:d2:01:26:3f:db:d1:cb:9c:df:
4d:5e:0d:d5:65:14:e8:6a:d9:9c:a1:27:fd:f4:af:
d2:00:4b:a0:72:54:4a:69:d9:97:ec:63:ce:4f:2d:
e2:dd:e9:cf:b5:6a:94:f0:3f:6b:b3:1e:24:98:23:
ff:69:33:c9:84:f7:d4:d2:44:3f:77:f8:ae:e8:bf:
f8:6f:1c:57:e7:80:e6:fd:8f:d2:9a:d3:e9:ca:04:
07:76:44:91:8f:a5:3a:a3:21:88:e7:6e:40:7f:ad:
e7:87:58:91:c6:c5:05:2b:9c:c5:8b:2c:44:26:6a:
5c:9e:8b:e4:32:40:46:3c:b8:bd:bc:ce:88:95:e9:
b4:04:a3:c1:fa:87:c5:02:10:c5:dc:3e:60:90:63:
ee:10:78:86:bd:69:1e:15:7d:cd:6c:e8:ad:30:64:
0d:d4:dc:f2:ca:62:70:a9:4a:12:78:56:16:15:26:
57:50:ff:76:62:59:c4:fb:4d:5a:0b:0e:b7:d9:40:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:7F:2C:1A:CA:A5:BF:89:2A:C5:66:85:18:8F:C6:E9:88:0E:58
X509v3 Authority Key Identifier:
keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:9c:7f:7f:c6:c4:f9:9a:a7:ef:98:86:46:bb:ab:aa:f4:
54:40:ab:a8:eb:e6:d5:55:ca:ef:31:7c:a3:6f:57:40:ca:e5:
f3:e9:fd:73:df:b1:eb:d1:2c:db:80:1d:54:ad:70:38:01:6a:
1a:ce:e1:36:be:ed:01:03:1e:83:f1:66:e3:b5:02:eb:9b:43:
bd:0a:fe:e3:f7:cb:69:dd:68:77:5a:b0:52:54:85:e8:99:9a:
7f:41:c6:e4:4f:f6:ea:c2:a0:07:42:fb:5e:d5:49:8d:64:6b:
47:b2:6e:7e:1f:e6:08:08:af:6b:e9:f0:3a:e4:91:36:f4:f9:
c7:f6:6f:c8:e2:2c:bd:c7:3e:0c:0f:72:bd:5e:c7:73:c6:0d:
7a:36:96:f7:47:f6:d9:62:8e:29:9e:f8:d1:b3:bd:cb:03:f3:
2e:02:3b:43:59:fb:f4:54:cb:a0:b5:0b:d3:c9:e6:8d:23:28:
3d:8a:fa:6f:64:44:ef:b0:07:ee:1f:be:6c:39:d4:cb:73:7b:
6e:cc:90:33:82:43:6e:90:0e:52:0b:c8:ad:90:bb:14:de:60:
f6:f7:ac:1b:b8:46:76:67:4b:d2:6d:0d:cf:06:e9:cf:f1:0d:
2f:64:d7:29:75:d3:e8:3b:b4:60:9d:15:a4:7e:b9:a7:16:af:
84:c0:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:13:04 2026 by rpki-client