
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier: j1V51zSyyAkGh79fHcvLE0ucYSV5GboyZGoXluh34GM=
Subject key identifier: 11:B1:F3:DE:DF:F2:67:70:67:49:65:16:12:45:31:42:CD:98:A8:B4
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number: 016C
Signing time: Wed 13 May 2026 04:52:54 +0000
Manifest this update: Wed 13 May 2026 04:52:53 +0000
Manifest next update: Wed 20 May 2026 04:52:53 +0000
Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: NBoysA6+CJSQUkFtGUq568+1BIooCweh+ZAoIuj4nbc=)
2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: Ug9ILiDXqWcLa6yuD4ODzV/AkZeAMrnjdmuMuL/P0OM=)
3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: ooDmK99ixwmZHb01igd9edAZRWXI26i5vbPS7c6NFw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: May 13 04:52:53 2026 GMT
Not After : May 20 04:52:53 2026 GMT
Subject: CN=6a0403a5-398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:84:5b:0c:80:52:7e:8e:40:34:f7:53:10:
f5:49:91:e6:ec:83:e9:cf:e4:61:19:c2:a0:4a:71:
2d:44:18:c3:ef:b0:0b:52:67:bd:f5:6c:fc:7b:b0:
8b:4e:f4:ec:7c:f3:d5:98:f5:80:22:dd:0e:a5:12:
48:a2:d8:e5:2b:11:a3:b7:00:c9:fc:9b:a6:01:f9:
82:5a:32:12:ae:0b:b1:da:69:89:79:83:78:a3:d7:
5e:c3:44:cb:fb:77:77:4e:52:6d:21:fd:09:e4:4e:
22:88:cc:68:bb:37:f3:1e:9c:19:d8:6d:4c:3f:43:
7f:7d:75:4d:82:25:38:ec:80:af:33:f1:98:7b:b8:
a7:86:94:56:84:2b:e5:dc:4f:6d:f7:b8:2d:98:d9:
c6:c8:08:bb:6e:36:14:78:64:4d:aa:70:48:76:20:
2d:42:8e:99:6e:d0:ac:80:df:13:23:25:09:06:e5:
53:fb:4b:d3:5a:9d:db:11:ce:8f:9a:97:e6:7c:e9:
1c:16:6b:a6:b2:47:da:08:9d:8d:0e:60:36:66:73:
b1:92:45:26:dd:15:49:8e:3b:8c:0f:94:52:65:58:
89:11:d2:07:df:16:fb:be:25:84:b0:e1:0d:36:28:
98:e7:7c:92:6d:af:0e:1d:fe:3d:0e:b3:70:b6:12:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:F3:DE:DF:F2:67:70:67:49:65:16:12:45:31:42:CD:98:A8:B4
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:18:c2:c1:e1:bd:44:42:fe:41:e8:ba:7a:5c:d9:f3:42:
36:2e:86:81:f0:cf:f7:49:f1:38:d8:67:18:05:d4:03:e9:59:
a2:65:95:a2:ba:2d:97:2a:e9:c4:00:89:13:e8:40:25:1a:db:
5b:d6:44:94:54:15:4e:03:e9:65:4a:76:e1:73:46:c2:76:71:
64:84:46:d1:01:b8:78:e0:c3:93:70:6b:29:d7:f0:2f:5a:15:
30:6b:11:00:79:ea:18:93:27:e2:f7:2a:a1:02:42:66:4b:0d:
15:e8:fb:02:48:b9:a9:44:0c:d1:5d:da:d0:dd:4a:28:cd:85:
42:6c:a1:82:17:27:d8:54:27:fb:a3:96:f0:fd:48:63:f6:1f:
c9:c6:a8:4b:78:ef:e8:9b:4c:8d:d2:ed:d2:b7:72:7b:bb:18:
2c:5b:74:04:b1:8b:ba:11:78:c5:20:3e:bf:ab:da:32:14:f3:
2e:b3:da:1e:6e:2d:cc:f0:74:9c:b4:80:ae:b5:9d:1c:fa:51:
ef:2f:da:82:a0:c1:43:01:cd:b6:b9:37:20:1e:e3:47:db:76:
34:f3:0f:c4:c6:bc:5a:03:04:d7:a5:2c:6f:b4:63:88:0b:ae:
1d:f2:13:eb:7d:c8:7f:fa:91:d5:de:4f:53:81:5d:25:59:22:
17:a0:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:59 2026 by rpki-client