
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json)
Hash identifier: uuUA6mNnzfDt4HIqz0Pc4Tsge6R2Pp+XkBLGo6ChmPc=
Subject key identifier: D7:8C:CD:50:35:6B:D5:50:96:C3:8D:65:21:EA:D6:1F:A7:A6:90:6E
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
Manifest number: 01A6
Signing time: Mon 11 May 2026 04:11:38 +0000
Manifest this update: Mon 11 May 2026 04:11:37 +0000
Manifest next update: Mon 18 May 2026 04:11:37 +0000
Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: EH+mpW+YTbZCCaP0vzyVa+MdW8R5frMP+qX0X6rayak=)
2: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: MtMRVhbm/GKcyIVSZCGW9MQoyNNx6WEtE4Sni66kFt0=)
3: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: yPDy0xgT7qOMVChc0IeYdh84zKZ/Q4OPSOxME4uNSX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Validity
Not Before: May 11 04:11:37 2026 GMT
Not After : May 18 04:11:37 2026 GMT
Subject: CN=6a0156fa-790d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:74:f2:2a:d9:eb:fe:d2:7c:e3:f8:ed:0a:
7f:1b:9e:70:bc:ca:e3:dd:8a:3a:cc:e4:19:9e:a7:
24:0a:62:96:31:cc:9c:2b:d1:71:5c:ec:30:b5:0f:
0c:ca:ae:85:31:5d:7b:0d:f7:53:41:03:6f:a0:2e:
82:4a:52:a5:1b:71:d1:e7:26:6b:ba:37:9e:d5:81:
23:83:19:92:7e:5b:0e:98:a6:94:01:e8:89:87:8d:
2d:c6:74:34:51:49:89:95:b7:05:3a:8b:eb:40:d3:
92:59:57:b6:36:8c:32:0f:aa:b2:77:e8:50:31:63:
13:12:c9:5a:8f:ba:29:dc:8e:cb:7f:c0:58:98:0a:
55:af:ae:12:d0:db:ef:da:5d:ba:7a:f5:3d:c0:36:
62:ac:56:60:fd:0b:a1:96:1e:de:6a:94:e8:f0:d0:
74:25:cf:cd:3a:eb:da:93:16:40:ef:c2:55:96:53:
ff:7d:c2:b7:21:d9:c8:a9:a4:38:26:74:6a:f0:b0:
68:87:44:47:d9:ff:f2:6c:30:c1:b3:14:08:98:f6:
b1:8e:cb:56:da:9a:23:1b:ff:72:a3:09:6c:ce:9a:
fb:10:7c:05:85:99:6c:13:9d:c4:e4:fc:a9:b6:f6:
7d:5d:91:f4:2b:1e:ee:13:cd:96:9e:e5:48:f9:57:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:CD:50:35:6B:D5:50:96:C3:8D:65:21:EA:D6:1F:A7:A6:90:6E
X509v3 Authority Key Identifier:
keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:f3:26:1c:fa:e3:82:f0:1a:5c:69:bd:6b:56:29:d0:90:
eb:7c:10:70:44:04:84:69:36:d7:bb:09:bb:68:5c:4b:e0:69:
cb:da:8c:42:1c:51:ee:d6:7b:22:8a:6a:f0:d4:0a:82:ec:f6:
9d:69:12:b1:79:57:cd:0a:db:03:2b:c6:a9:cc:82:cc:5b:07:
d7:77:99:ad:9a:d4:b4:b5:5e:18:5c:14:17:e7:ce:9f:56:e0:
83:cd:bd:53:7d:34:6c:4f:59:4a:22:50:a9:23:e7:e1:ec:48:
ff:82:35:73:ee:72:61:ac:36:ce:14:8a:28:48:32:d2:60:56:
ad:6a:b7:20:01:d1:8c:f5:8b:f4:8b:5c:27:cf:36:eb:ad:63:
a4:e1:cd:ff:65:12:f1:e1:82:2c:96:a5:f0:53:41:55:76:55:
67:27:de:ea:65:8f:bf:83:13:b2:91:46:b0:32:f3:74:8b:79:
9a:a3:cd:61:49:23:23:ec:f4:37:b1:d1:6a:42:52:9a:a6:74:
0b:92:ca:5b:2c:5d:7e:b4:9a:21:a7:cb:27:0c:78:91:c8:1c:
f5:5b:e4:77:86:b0:79:b0:3b:37:38:b8:83:62:d4:ee:a3:13:
d3:8a:e0:ef:03:32:44:9e:13:12:4c:68:3b:76:01:b7:f1:e9:
63:60:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:28 2026 by rpki-client