
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json)
Hash identifier: xD6HIv/xGqGAqm/HgornZkqA3M9JEU7pPfYU1oix/nA=
Subject key identifier: DA:C6:CE:2A:D8:9F:E1:E8:14:98:69:AC:39:2C:16:84:28:BD:BF:7C
Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
Manifest number: 2D
Signing time: Wed 13 May 2026 08:53:42 +0000
Manifest this update: Wed 13 May 2026 08:53:42 +0000
Manifest next update: Wed 20 May 2026 08:53:42 +0000
Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: iKU+qEHrG7O5HW8VMwltFKePO7kdSqw1qdDiPxPwjBo=)
2: 964C388611F511F1B1F03794113D8C67.roa (hash: aDJ1T/8negVg13w36W/uf7MN9f6atZcUX+4QUHdvnVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Validity
Not Before: May 13 08:53:42 2026 GMT
Not After : May 20 08:53:42 2026 GMT
Subject: CN=6a043c16-5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:96:76:b7:32:51:25:5c:f5:3d:a7:2a:23:
42:54:f7:7d:8c:bf:91:a3:05:9b:03:f2:bf:5d:81:
b8:65:61:4a:41:f9:1c:ac:78:76:a0:b0:b3:44:de:
58:29:9c:01:94:90:79:5f:64:9a:59:90:b8:70:b1:
4f:8b:ca:63:85:a5:a9:1c:87:7e:f6:76:cd:10:c7:
80:cd:79:79:2b:59:e9:78:ca:d8:4d:83:18:a7:53:
77:63:48:e8:5b:ce:ea:cf:72:d3:36:e8:b6:71:73:
2a:84:52:06:a8:94:fe:8a:94:b0:f2:e8:73:89:1d:
09:ef:fb:0a:20:39:d8:f5:f7:ba:0f:cb:8b:21:54:
f7:f6:98:72:79:ee:8b:71:42:d3:2b:10:5c:ab:fb:
3d:77:16:fa:67:0c:25:a9:45:8d:38:b5:0c:24:d5:
7b:9f:b4:9a:2a:d5:91:a7:41:de:36:e4:4c:14:c7:
33:a7:cd:50:ab:3a:2e:6c:03:2f:20:1e:74:9b:57:
1c:76:30:48:f3:69:5a:8c:a8:f5:3a:90:11:74:6e:
91:ae:08:f3:16:0e:65:20:19:26:52:87:81:3e:66:
55:b1:6b:94:f5:57:b4:27:40:f3:6f:20:de:b2:88:
ef:aa:27:a0:69:76:f2:13:fe:22:8e:98:96:ee:2a:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:CE:2A:D8:9F:E1:E8:14:98:69:AC:39:2C:16:84:28:BD:BF:7C
X509v3 Authority Key Identifier:
keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:be:7d:3e:d9:95:cb:c7:57:06:97:6d:82:15:ef:1e:36:1b:
bf:7e:be:4c:18:bf:f0:9f:ef:27:62:b8:d0:12:7e:a5:ff:a4:
e9:fb:17:60:57:14:ab:8c:2e:53:3d:2d:7d:be:5c:e0:a3:33:
80:49:c3:f8:1f:17:1e:23:4b:a1:a8:53:9f:e7:e2:38:d6:18:
9d:33:b1:bd:a6:e8:db:fd:27:b4:1f:40:b8:39:55:5e:75:a3:
2a:f2:96:ed:d5:e6:5a:72:b9:c2:2f:18:ef:0d:4b:fe:e4:36:
c6:61:7f:cf:df:95:ff:6d:a7:b7:bf:19:be:1d:ae:43:f2:bf:
8f:fe:de:b4:35:1c:45:a0:50:c6:e9:3a:2f:e7:83:15:97:0f:
c1:9f:1e:41:fe:fb:a9:71:b1:6f:b0:24:ae:54:9a:5e:b3:d2:
16:f6:2b:73:fb:2f:de:f2:63:f7:b1:be:92:af:0f:c5:ef:13:
b7:aa:d4:77:da:1b:4b:4a:e2:05:81:0c:d7:65:cd:0d:de:c4:
b7:07:ea:65:81:bd:96:c5:48:11:8d:1c:87:06:9d:27:6b:3f:
95:35:75:54:44:9a:35:4f:08:a3:4a:71:68:83:6b:92:6a:36:
52:40:93:b1:9f:15:d7:01:a7:16:48:51:2e:bb:00:e8:ca:3b:
16:5b:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:30 2026 by rpki-client