
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: RqNSVaxKN7YFgKvBrc4D/C6yPfHxkot7scOeSc5fN8c=
Subject key identifier: 5B:81:1D:3A:11:2B:1B:34:D6:C0:CB:AE:60:85:A4:29:36:1D:BD:95
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0BE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0BDC
Signing time: Tue 12 May 2026 18:57:19 +0000
Manifest this update: Tue 12 May 2026 18:57:19 +0000
Manifest next update: Tue 19 May 2026 18:57:19 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: WMJnJFiiu7foNMGm/WghoBZUm+YOB3hVU7WjD3WkgzY=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: SCXjTUPrR9d678oR+OWQXH7H0AUB5NbQ5rZ/IrsYFNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: May 12 18:57:19 2026 GMT
Not After : May 19 18:57:19 2026 GMT
Subject: CN=6a03780f-fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:65:be:be:c3:41:a0:e8:7f:2e:62:d6:6c:
14:f0:24:7e:a0:18:1a:7f:46:de:92:bc:3c:6e:e8:
4a:b3:eb:58:e5:91:30:70:2c:7f:4c:34:21:ba:14:
c7:f4:3e:14:40:e5:8e:4c:e0:ce:f0:9d:eb:2d:13:
bd:68:ef:f3:17:5f:a5:14:2c:1e:06:85:8f:4e:0d:
59:0c:cd:35:8a:4f:7f:2b:02:16:71:a6:3f:7b:a5:
36:7d:3e:14:02:f4:bb:f7:8e:79:7b:47:c6:0d:ad:
46:06:f6:3f:72:2c:45:ce:24:04:e3:94:1f:c1:03:
bf:39:ee:bc:83:04:28:f9:a8:2b:c9:2e:cb:c8:bd:
a1:80:c4:8d:88:e5:af:83:41:93:32:67:f5:5a:80:
50:bd:76:f7:85:75:d7:03:9c:b3:ca:05:bd:d4:7a:
89:26:e7:d7:94:d0:77:ca:19:76:8e:e2:01:94:d7:
7c:58:1f:5e:5a:0f:f0:b1:0c:8f:ca:52:91:f3:7f:
ae:12:da:9a:8d:8e:d4:89:f6:c6:07:c6:5d:4b:f8:
31:ec:07:0b:82:50:ec:12:38:02:b5:43:e6:14:76:
01:df:5f:00:28:7a:f1:a6:6f:39:26:cd:9d:5d:1e:
94:77:30:33:d0:8e:d7:2a:0a:5b:26:e5:7d:cd:65:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:1D:3A:11:2B:1B:34:D6:C0:CB:AE:60:85:A4:29:36:1D:BD:95
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:8d:b6:12:68:b6:c6:fc:5b:10:2d:28:92:27:d2:7f:aa:
e7:40:09:32:21:93:ff:d2:b6:b4:0d:0c:71:17:30:37:ea:23:
70:99:30:48:8d:45:ea:ac:b8:33:6a:5d:10:6a:dc:84:2e:8a:
a2:92:15:e0:7d:58:32:0c:7d:6f:45:32:96:64:1a:68:24:a5:
68:1e:7c:dd:72:51:8f:d7:40:ce:ee:03:7d:72:ce:03:98:ac:
6e:2b:6c:30:e3:49:c4:59:99:07:66:dd:b0:34:3c:d8:6d:0e:
a0:b8:94:e2:47:32:f0:1b:70:66:e3:07:e5:42:48:d5:84:ba:
0e:87:84:95:bb:c7:7e:83:6a:bb:19:e2:8f:4e:7c:f1:8d:e9:
f0:37:ee:06:14:3b:d5:17:22:5c:43:8b:37:45:4c:ac:4d:39:
88:4c:69:7d:75:08:40:cb:04:b5:2b:97:1d:3a:ae:d4:38:cb:
6a:22:f6:8b:b5:47:59:26:8b:63:a7:3f:1b:a1:59:44:9c:ca:
30:79:75:d3:00:12:77:44:7f:fd:22:97:d4:48:fe:6e:1c:54:
3d:ab:79:6e:ee:ca:78:e6:87:20:4d:9b:be:79:00:b5:1a:d8:
b3:11:0d:64:12:7c:03:c8:ee:43:33:56:2e:6e:dd:91:74:5a:
f2:e7:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:16 2026 by rpki-client