
$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
File: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft (raw, json)
Hash identifier: sGBVJHV8Y1IjHAlSMuDL9dRc+XJOLuBHVJ+aRhafVe4=
Subject key identifier: 6A:80:3D:1F:ED:8D:22:02:22:B5:22:7F:1C:C6:9D:A7:A2:FA:53:D8
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Certificate issuer: /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
Manifest number: 16
Signing time: Wed 13 May 2026 09:19:29 +0000
Manifest this update: Wed 13 May 2026 09:19:28 +0000
Manifest next update: Wed 20 May 2026 09:19:28 +0000
Files and hashes: 1: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl (hash: 82vzTBETvAPkXQxZ+wfMUtQRqxdG6+elR3+PDxHsvpo=)
2: 37D59058463A11F1B0300B15B1833773.roa (hash: zkd8cnuE5ZeeK9/qXH2yfVJdPNCk0HxLARMnjMSdtkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Validity
Not Before: May 13 09:19:28 2026 GMT
Not After : May 20 09:19:28 2026 GMT
Subject: CN=6a044220-6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:c4:28:32:bc:7a:82:12:63:05:fd:fc:7c:
58:ed:af:b0:60:b6:3b:7f:42:12:6a:f8:47:55:7e:
b4:fd:f9:42:96:fe:f0:1f:59:65:fc:da:13:9b:fe:
da:ea:be:54:7a:03:8e:b6:ce:e4:a9:32:1d:54:b6:
2f:82:fb:c1:30:44:02:1c:59:69:24:41:4a:48:89:
22:9b:b9:22:48:5c:70:0b:69:d0:a3:42:c7:64:73:
b6:08:05:7e:4e:de:0c:f1:99:69:6d:e1:34:c8:fe:
d6:10:3f:ad:59:4c:61:65:76:9a:58:d9:a9:85:37:
cc:21:33:a6:e8:a8:0e:3a:ef:46:58:c0:40:15:d1:
10:64:76:6a:d6:02:1d:8c:2c:f1:2d:c1:43:a3:c5:
d3:8f:33:0e:e0:27:93:89:01:9d:8c:98:ec:ee:67:
23:40:2c:21:16:2c:d2:00:e3:59:c5:33:00:8c:1a:
fe:bb:bd:91:88:b7:17:19:dc:14:da:91:5e:7d:75:
36:49:71:bd:a8:a2:1b:b6:8c:83:96:bd:6e:df:36:
a7:dc:82:3c:8e:49:06:a6:18:69:fe:ec:bf:ea:b5:
a9:de:15:65:2c:fc:a6:f5:00:c9:90:9d:fd:4c:3f:
8a:33:19:c0:94:1c:e4:2b:b9:c0:2e:d3:18:c1:b2:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:3D:1F:ED:8D:22:02:22:B5:22:7F:1C:C6:9D:A7:A2:FA:53:D8
X509v3 Authority Key Identifier:
keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5f:31:1d:8c:c4:5e:22:7c:a0:bf:87:2e:bb:cf:64:6f:90:
d0:47:ed:d7:08:b6:62:0c:32:92:9a:05:5f:ea:f3:f4:17:c7:
2d:21:01:cb:9d:3c:40:ce:1f:ad:0b:42:16:0e:75:b3:92:33:
56:f5:14:ba:67:7c:70:ec:46:ed:9a:e9:16:7c:cf:fd:b5:bd:
bd:85:65:73:73:1c:45:5f:b1:10:d3:1c:a9:ab:a1:93:0e:ea:
40:25:12:3d:f8:2d:af:91:b5:03:47:fe:5a:21:2b:0d:73:ea:
4f:53:81:de:2d:9d:38:11:04:89:f2:e1:fb:b9:06:13:aa:35:
2c:f6:b6:30:57:22:30:fd:35:5b:97:65:fb:9d:35:e9:cc:3e:
c2:a4:c4:80:3b:0f:d9:99:36:01:e1:0a:59:4c:35:79:09:07:
06:2e:68:01:6e:37:54:53:0e:55:5c:aa:1f:f5:0b:60:fd:3f:
ac:a8:60:30:9f:62:e9:09:56:e1:c8:e4:16:e4:cd:a4:e6:14:
35:41:7d:5b:86:bf:db:4f:55:e2:2c:f1:37:10:4d:35:c8:fa:
c0:d9:76:c5:c3:8c:cf:95:3b:04:42:ad:72:a7:0f:e9:1e:de:
62:89:a0:68:bd:1b:8d:6f:39:c0:47:be:12:47:82:6e:a1:5c:
48:f2:10:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NzZDODExMC8GA1UEBRMoNDdCNUIxRjMwQzZCQkRCQjExNjUxQ0M2QTA3OEZFQTc3
MjM3QTJFMjAeFw0yNjA1MTMwOTE5MjhaFw0yNjA1MjAwOTE5MjhaMBgxFjAUBgNV
BAMTDTZhMDQ0MjIwLTZhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCX5MQoMrx6ghJjBf38fFjtr7Bgtjt/QhJq+EdVfrT9+UKW/vAfWWX82hOb/trq
vlR6A462zuSpMh1Uti+C+8EwRAIcWWkkQUpIiSKbuSJIXHALadCjQsdkc7YIBX5O
3gzxmWlt4TTI/tYQP61ZTGFldppY2amFN8whM6boqA4670ZYwEAV0RBkdmrWAh2M
LPEtwUOjxdOPMw7gJ5OJAZ2MmOzuZyNALCEWLNIA41nFMwCMGv67vZGItxcZ3BTa
kV59dTZJcb2oohu2jIOWvW7fNqfcgjyOSQamGGn+7L/qtaneFWUs/Kb1AMmQnf1M
P4ozGcCUHOQrucAu0xjBshDJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaoA9H+2N
IgIitSJ/HMadp6L6U9gwHwYDVR0jBBgwFoAUR7Wx8wxrvbsRZRzGoHj+p3I3ouIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzJGOUIwMjI2NDRB
MzExRjFCREU5MEEzRkIxODMzNzczL1I3V3g4d3hydmJzUlpSekdvSGotcDNJM291
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUjdXeDh3eHJ2YnNSWlJ6R29Iai1wM0kzb3VJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3
NkM4LzJGOUIwMjI2NDRBMzExRjFCREU5MEEzRkIxODMzNzczL1I3V3g4d3hydmJz
UlpSekdvSGotcDNJM291SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCoXzEdjMReInygv4cuu89kb5DQR+3XCLZiDDKSmgVf6vP0F8ctIQHLnTxAzh+t
C0IWDnWzkjNW9RS6Z3xw7EbtmukWfM/9tb29hWVzcxxFX7EQ0xypq6GTDupAJRI9
+C2vkbUDR/5aISsNc+pPU4HeLZ04EQSJ8uH7uQYTqjUs9rYwVyIw/TVbl2X7nTXp
zD7CpMSAOw/ZmTYB4QpZTDV5CQcGLmgBbjdUUw5VXKof9Qtg/T+sqGAwn2LpCVbh
yOQW5M2k5hQ1QX1bhr/bT1XiLPE3EE01yPrA2XbFw4zPlTsEQq1ypw/pHt5iiaBo
vRuNbznAR74SR4JuoVxI8hBn
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:56 2026 by rpki-client