
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier: bBgdv6fNkRtjLKzvZZWoJ8Rm3juP2BmGpBt3E7Yhq6k=
Subject key identifier: 28:29:2C:0B:92:F1:81:49:5A:C8:71:20:58:61:69:8C:6D:52:34:14
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial: 0E61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number: 0E5B
Signing time: Tue 12 May 2026 17:48:12 +0000
Manifest this update: Tue 12 May 2026 17:48:12 +0000
Manifest next update: Tue 19 May 2026 17:48:12 +0000
Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: GBuvUkXhnaJ8xhgIA6aEUNMyLjEYSKGK9Ry4ZqciAAo=)
2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
Validity
Not Before: May 12 17:48:12 2026 GMT
Not After : May 19 17:48:12 2026 GMT
Subject: CN=6a0367dc-c17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:74:6a:3e:7c:ee:db:f2:71:c5:67:78:fe:
46:59:02:f9:26:d9:2b:02:1d:81:0a:49:c5:05:df:
ac:a3:a4:e0:17:0a:16:5f:24:7b:0a:fb:5e:ff:79:
86:1a:82:a5:72:10:35:9a:a9:65:ca:e8:97:83:05:
b8:69:00:49:ae:4f:60:cb:59:78:4a:c0:d7:85:1c:
4f:58:11:43:9c:33:e7:6c:87:b9:1e:b8:40:bb:64:
f0:3d:fc:80:74:75:06:64:2d:c4:ef:d3:ac:25:0c:
af:8f:b0:85:df:71:c1:00:5d:12:cf:af:8a:71:67:
79:ea:0a:24:0e:81:fd:74:bb:99:f8:dd:4d:75:4b:
39:07:27:d9:1e:3f:16:16:bf:b8:fd:df:0b:64:30:
14:b8:cb:ce:fe:1a:be:8b:46:17:30:3a:a7:71:ef:
87:52:03:46:9d:0e:c9:ec:08:fc:d5:82:39:f0:a3:
cc:61:ca:6c:42:d7:35:9e:00:02:02:4d:f7:ea:77:
86:b9:13:1f:fa:23:3e:63:73:18:d3:1d:f0:b6:3f:
e6:28:e8:2c:0e:32:bd:9a:ee:3c:3a:37:3b:8f:38:
0e:27:43:1b:06:6d:f1:43:37:31:94:5c:c8:34:d1:
3b:d6:5e:52:d5:78:62:d8:0f:a9:67:c2:68:9d:9f:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:2C:0B:92:F1:81:49:5A:C8:71:20:58:61:69:8C:6D:52:34:14
X509v3 Authority Key Identifier:
keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:ce:29:89:de:52:f8:91:15:4c:3c:7a:3e:48:51:73:36:
3b:cf:e0:91:95:e5:02:57:2d:88:23:d2:03:ed:23:4a:50:04:
aa:f3:19:da:48:02:37:ff:3b:76:88:fb:02:7f:ca:e6:b4:5d:
a1:3d:9f:93:fe:fe:41:f6:23:a2:71:eb:b1:2f:22:52:2c:4b:
4b:68:f3:b8:2c:ba:38:d8:56:3d:7b:4d:66:1f:12:f7:3c:30:
cc:4f:e0:8b:72:76:cf:d5:91:ca:72:f0:cc:0f:dc:f6:ba:01:
1b:4e:5b:3a:a3:2f:ed:67:05:c8:7c:cf:e6:6f:b5:45:7f:6f:
c3:51:dc:95:fa:a3:5c:d6:2a:12:5d:ad:81:e6:2b:d4:5d:6e:
9d:d3:e5:7b:29:14:df:cc:49:f6:8e:78:5b:07:24:eb:1a:61:
0f:ec:86:a4:08:3d:f7:fe:07:77:0e:1d:a7:0f:fd:12:23:ae:
40:03:a8:e5:76:05:e0:4e:40:dc:78:2b:d8:2b:b8:ee:09:cc:
2d:ca:6e:25:93:6d:b3:a0:6e:8e:f2:78:de:71:23:e5:2e:1f:
37:00:46:03:8a:da:76:dc:d7:98:7a:3f:a3:13:3c:db:fd:a3:
d7:0d:53:97:7b:07:dc:4b:a2:ad:10:14:71:e5:b3:ea:ee:a4:
e4:5f:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:40 2026 by rpki-client