
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: dp08P9ipmakF+5Cd1UM8BaO2jQmno8POEj7IWPdpGH4=
Subject key identifier: 3D:47:2B:CB:1C:81:29:22:87:1D:99:A9:C3:43:1D:2A:16:B8:95:00
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0C0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0C00
Signing time: Wed 22 Jul 2026 19:10:07 +0000
Manifest this update: Wed 22 Jul 2026 19:10:06 +0000
Manifest next update: Wed 29 Jul 2026 19:10:06 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: huzz7EcySnui77KtsWZj2uj0W5T5v8BBJVbxM1sH94s=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: SCXjTUPrR9d678oR+OWQXH7H0AUB5NbQ5rZ/IrsYFNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Jul 22 19:10:06 2026 GMT
Not After : Jul 29 19:10:06 2026 GMT
Subject: CN=6a61158e-2a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:f7:dd:0d:61:38:c9:78:72:d9:3d:46:8b:
b3:d8:35:02:7f:9d:25:2e:bd:1f:0b:6a:ac:71:fd:
6b:df:07:25:1d:7e:fd:42:16:89:7c:d3:a9:39:12:
5a:40:23:78:d6:c4:9e:6d:fe:58:85:25:7d:a5:60:
d7:81:59:13:19:66:38:34:9c:e6:f7:42:aa:ce:b5:
80:ab:f3:65:d5:82:8f:de:5c:a1:c1:2b:8e:7e:b7:
86:6f:f6:a1:c9:8f:41:4e:f9:1a:fb:83:e3:77:93:
df:07:e6:55:e2:12:27:a5:91:f2:82:43:22:e2:2d:
3d:93:8f:a4:94:0a:b9:28:f3:6e:63:29:47:70:fc:
7c:5b:cc:38:ac:66:85:8a:f2:84:cc:ab:51:29:b9:
db:82:1f:10:c7:9e:9b:61:6f:4f:29:8d:3d:ae:2b:
d3:9b:67:3d:f3:cd:97:ce:01:e0:dd:52:bc:1a:c8:
e4:69:a2:7a:9f:90:c4:39:82:eb:8b:84:b5:8c:ba:
d2:ca:27:47:c1:18:78:63:f8:87:51:53:c5:0d:fc:
7c:07:5b:a0:4d:31:31:29:30:a6:39:d0:d5:52:62:
0a:08:5e:f1:73:37:46:72:19:ec:58:11:20:b2:02:
c4:90:f4:1e:27:a9:d4:0e:06:fd:bf:f1:ce:26:f1:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:2B:CB:1C:81:29:22:87:1D:99:A9:C3:43:1D:2A:16:B8:95:00
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:d3:93:bb:f7:1b:6a:d7:b2:fd:5e:f7:60:f1:5e:30:08:
bf:ab:21:59:82:42:01:fc:90:b6:1b:d0:01:20:51:60:66:f9:
11:bd:9b:0e:51:72:24:b6:a2:dd:a7:2c:9e:41:50:4f:c4:d5:
ca:f4:8c:06:5a:16:34:ac:3e:81:48:c2:cf:72:49:07:79:73:
bf:c0:4f:1f:2b:c5:6b:02:3b:45:11:9b:fb:69:d7:6f:5b:e9:
2a:b0:3d:1b:12:8b:45:da:6b:a1:7e:3d:9b:cb:69:75:ff:86:
e0:4f:21:91:f9:c2:5c:29:e6:9f:97:e6:5c:46:4e:71:df:17:
d1:c6:7a:3c:3e:ba:de:eb:0b:c8:3a:bf:98:ce:83:4b:d9:e2:
b6:bc:d5:9a:a4:22:8b:46:ef:7c:3d:e9:7d:a4:cd:95:c1:e1:
ae:7b:0b:61:e5:6c:36:61:6c:28:30:04:86:aa:22:78:c6:cb:
ea:19:4d:ba:0e:38:a0:3c:d0:0d:af:56:04:27:aa:e0:85:60:
91:dc:e3:fe:f9:5e:08:c2:4f:1c:3c:d2:0c:30:01:2f:c1:58:
eb:e4:94:86:aa:c6:af:cf:ba:88:a7:13:d2:31:34:69:b4:0a:
58:c7:48:a1:3a:9a:82:11:fc:19:1b:6e:69:73:39:1a:70:0f:
2c:81:9c:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG
Njc2RENGQjIwHhcNMjYwNzIyMTkxMDA2WhcNMjYwNzI5MTkxMDA2WjAYMRYwFAYD
VQQDEw02YTYxMTU4ZS0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIn33Q1hOMl4ctk9Rouz2DUCf50lLr0fC2qscf1r3wclHX79QhaJfNOpORJa
QCN41sSebf5YhSV9pWDXgVkTGWY4NJzm90KqzrWAq/Nl1YKP3lyhwSuOfreGb/ah
yY9BTvka+4Pjd5PfB+ZV4hInpZHygkMi4i09k4+klAq5KPNuYylHcPx8W8w4rGaF
ivKEzKtRKbnbgh8Qx56bYW9PKY09rivTm2c9882XzgHg3VK8GsjkaaJ6n5DEOYLr
i4S1jLrSyidHwRh4Y/iHUVPFDfx8B1ugTTExKTCmOdDVUmIKCF7xczdGchnsWBEg
sgLEkPQeJ6nUDgb9v/HOJvEgHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1HK8sc
gSkihx2ZqcNDHSoWuJUAMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND
QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy
OV9yWmw2bTZqZVgyZHR6N0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARcrTk7v3G2rXsv1e92DxXjAIv6shWYJCAfyQthvQASBRYGb5Eb2bDlFyJLai
3acsnkFQT8TVyvSMBloWNKw+gUjCz3JJB3lzv8BPHyvFawI7RRGb+2nXb1vpKrA9
GxKLRdproX49m8tpdf+G4E8hkfnCXCnmn5fmXEZOcd8X0cZ6PD663usLyDq/mM6D
S9nitrzVmqQii0bvfD3pfaTNlcHhrnsLYeVsNmFsKDAEhqoieMbL6hlNug44oDzQ
Da9WBCeq4IVgkdzj/vleCMJPHDzSDDABL8FY6+SUhqrGr8+6iKcT0jE0abQKWMdI
oTqaghH8GRtuaXM5GnAPLIGcFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:08 2026 by rpki-client