
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: U6rtvsLVOiX4laOBe4HQjwhtsbyh8g5BK6n5tN9xCd4=
Subject key identifier: D2:52:1F:4C:C7:B1:7D:C2:7C:29:CC:49:23:1D:F7:66:8C:8C:76:82
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 0287
Signing time: Wed 13 May 2026 01:57:38 +0000
Manifest this update: Wed 13 May 2026 01:57:38 +0000
Manifest next update: Wed 20 May 2026 01:57:38 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: Haw2gysufAuI9n3kaYOSNrpS3AkCDhVthaYuwCCeuQU=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: May 13 01:57:38 2026 GMT
Not After : May 20 01:57:38 2026 GMT
Subject: CN=6a03da92-6000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:d8:e9:90:38:e1:9f:44:a9:97:59:5e:50:
07:8e:33:7a:97:c9:78:8d:fc:3c:9e:12:d5:b5:d4:
ae:f4:ff:6a:13:36:d9:3b:7e:5a:64:4e:ae:42:b6:
a6:d1:cf:8b:69:34:e0:ca:d6:49:26:b5:f6:4c:22:
62:b5:9d:1d:00:3b:2d:e7:81:ae:52:ec:bd:d7:50:
bc:b9:13:38:73:1e:e2:6b:13:ad:34:72:e2:ee:69:
91:d3:bc:b4:a6:45:55:11:e9:8e:a4:c3:b9:47:33:
37:13:c5:48:34:66:94:bb:cb:72:a7:49:b1:1c:df:
e6:15:e6:7d:1b:b0:9e:3c:83:dc:30:88:72:cc:31:
e9:1c:03:a2:f0:95:a6:cb:76:a3:f5:af:84:66:00:
cc:1a:67:bf:bc:9f:53:87:03:dc:26:16:8b:ac:7f:
60:42:8b:84:da:34:c4:64:6e:4d:1f:5b:c3:8b:52:
08:67:f1:19:73:4f:33:ba:b4:f8:2f:13:2c:76:39:
6f:8c:34:6a:7c:e1:44:60:8a:a8:df:7e:24:39:7c:
f6:74:c1:54:cd:72:80:70:61:59:e6:e9:9b:f9:c6:
7c:43:59:07:16:ee:3e:37:ff:d1:c4:d3:7c:20:2c:
ee:43:1b:06:00:c1:29:86:8c:1d:a9:82:bc:60:13:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:1F:4C:C7:B1:7D:C2:7C:29:CC:49:23:1D:F7:66:8C:8C:76:82
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:f9:70:04:80:4d:a7:7c:55:50:df:80:9c:37:87:55:ba:
4d:e9:14:84:b8:1f:1f:09:49:a6:e7:57:a6:77:e6:92:a7:6d:
82:ee:8b:ea:1a:85:59:7e:4b:bb:5f:55:27:85:ca:de:d7:06:
18:c9:66:30:48:fb:43:55:83:f9:a2:dd:0d:45:2b:1d:23:68:
32:55:dc:71:fd:be:95:2e:28:90:da:6f:0a:f7:e4:64:0c:77:
40:b0:0f:73:6f:4b:ab:2f:76:02:e7:f5:7c:df:ba:8d:31:2c:
50:d4:d9:b8:b9:22:bf:9b:ff:6c:12:78:04:5f:bb:39:d8:7c:
e0:2d:90:14:e4:22:27:b3:15:e6:85:75:9a:11:9b:20:cb:c6:
5c:a3:3e:6a:0b:96:2f:08:40:04:63:0c:25:14:95:00:e2:f0:
0a:ab:8a:00:34:f7:c3:c0:6e:c2:eb:0a:48:c6:e5:67:ac:49:
e9:0b:d6:66:55:6b:88:4c:23:6f:11:7d:7b:09:7d:88:e8:ee:
a2:80:5e:c0:ed:c8:a2:55:7d:f1:2b:f6:00:c4:5e:d3:29:5d:
34:1b:71:fc:34:77:97:be:d4:fc:7f:bd:c4:84:b0:93:89:1f:
58:47:83:01:12:fd:18:4f:a1:f7:66:b4:f9:25:d6:df:e1:68:
d6:1c:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:16 2026 by rpki-client