
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier: o9MA8GMFv3Ky31zNMhkyPuV0GhlgPTnRwTRAnlpw9cQ=
Subject key identifier: 45:84:E5:EF:23:FE:1E:E3:6E:2B:0F:E9:D1:C5:51:6A:78:57:AB:FB
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number: FF
Signing time: Mon 11 May 2026 06:16:15 +0000
Manifest this update: Mon 11 May 2026 06:16:14 +0000
Manifest next update: Mon 18 May 2026 06:16:14 +0000
Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: CHz6Ma0z/4PeuvMC/NSczSK08WeSs45+gFy3HXSpJQY=)
2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Validity
Not Before: May 11 06:16:14 2026 GMT
Not After : May 18 06:16:14 2026 GMT
Subject: CN=6a01742f-a53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:94:81:7c:2b:9b:7a:18:86:0f:03:08:ca:
b3:34:ea:98:8a:8f:48:73:fd:7a:36:2a:23:d2:88:
08:92:d0:81:cc:a9:92:a3:84:2f:bc:20:a1:57:3e:
c7:7f:79:ea:e1:89:ca:3a:0c:d1:37:59:66:f3:a8:
21:0e:8f:21:5c:26:c6:98:ad:c7:51:25:5b:22:97:
e0:ec:2e:ae:ad:71:13:34:60:5d:66:88:f6:08:81:
84:68:97:9c:71:85:29:93:3f:54:a0:91:3f:d9:48:
b1:c5:d4:02:d9:ad:ab:84:16:9e:ce:86:c0:3d:a0:
01:59:30:ee:f7:04:f9:38:4f:fe:8c:aa:bd:96:dd:
62:87:b2:a0:97:19:81:22:b4:31:80:d9:e3:a4:4d:
77:7d:5a:19:29:08:83:4b:50:89:b0:fd:c0:87:0e:
c0:1d:cc:66:3a:fd:3d:df:17:3c:68:c9:4b:95:af:
de:e0:5b:0f:3b:c3:95:94:0e:03:b4:ea:5a:63:d5:
df:96:e9:1d:75:8a:2f:38:cb:67:d0:cb:49:27:81:
fe:64:1a:d7:64:bc:a0:2d:74:3a:8d:5c:81:f8:6c:
1f:45:d3:b5:78:6d:d1:9b:b0:87:12:07:58:b6:0c:
50:44:61:04:1d:82:48:bd:ac:1f:ea:da:1a:3b:e2:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:E5:EF:23:FE:1E:E3:6E:2B:0F:E9:D1:C5:51:6A:78:57:AB:FB
X509v3 Authority Key Identifier:
keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:2b:ac:cf:65:de:d7:f0:69:eb:35:bb:0d:df:ec:be:05:
a7:10:b2:cc:9b:69:d2:94:69:09:e9:18:ed:d8:09:cc:b3:94:
f0:11:5a:fe:aa:1f:b5:d5:5b:23:83:7f:a0:8f:1b:f0:d8:8e:
9f:c0:eb:ca:5b:bd:08:2c:b5:5f:a7:60:d2:7f:3f:9e:53:b1:
93:fd:02:b1:8a:b4:a7:7b:43:6d:c6:5a:24:83:01:40:2b:a0:
c7:7b:93:8d:18:77:c7:b1:44:91:69:19:75:df:a8:17:12:7a:
69:7a:8b:cb:46:22:3c:9e:ee:67:e7:c7:e4:44:46:84:8a:f4:
7e:75:36:06:0d:1b:67:3d:ab:17:64:d9:21:06:3b:0e:2e:78:
47:5e:57:c4:cb:72:e4:26:82:54:e0:8e:f1:0d:df:dd:2b:5f:
bf:64:07:0e:61:dc:16:63:d1:00:08:19:66:5f:7e:db:25:1d:
8f:7a:e4:9a:85:eb:20:7a:95:c6:a9:69:2a:50:01:f8:e0:88:
0c:ad:cf:76:38:30:e3:c1:33:65:78:38:cd:72:f6:b1:26:65:
b9:f9:aa:22:cc:81:86:51:dd:f2:17:4f:6f:52:7c:46:39:a6:
81:68:be:7a:92:dc:dd:a0:01:38:6f:ac:fe:2a:4f:45:d9:47:
d7:7d:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:54 2026 by rpki-client