
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier: DV7VT87KuctTIIKtWdwDJnCwzQbRCiQvjYgnUxXDsjs=
Subject key identifier: 1B:B5:EE:E9:3D:64:ED:9F:C4:DC:79:00:A6:7A:F1:FD:D0:8B:91:45
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number: 4171
Signing time: Wed 22 Jul 2026 14:51:12 +0000
Manifest this update: Wed 22 Jul 2026 14:51:11 +0000
Manifest next update: Wed 29 Jul 2026 14:51:11 +0000
Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: y0wcMSdzgIZH+OCqFMVMgYOgdDUk7Odo+noAMM6jT+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Validity
Not Before: Jul 22 14:51:11 2026 GMT
Not After : Jul 29 14:51:11 2026 GMT
Subject: CN=6a60d8df-2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:22:9e:f3:27:df:87:6f:2c:c3:97:df:dd:
31:42:da:7d:fc:84:62:49:7b:b8:db:99:9a:f1:1a:
cb:50:f4:bc:29:d6:40:43:0c:9c:ee:77:31:5a:5c:
66:9e:fa:13:dd:ac:23:a1:94:3b:a3:15:29:b4:bd:
df:79:9a:e3:a1:02:37:8d:37:f7:9c:4c:a4:05:9b:
fe:22:26:a7:ef:95:3c:57:28:89:07:65:42:c0:81:
0c:e7:17:4b:a9:44:01:80:19:ea:20:e7:a8:f4:f5:
d9:a3:6b:b3:70:bd:4b:09:64:13:d5:16:17:95:f0:
3b:19:3e:53:90:6e:97:09:1b:c6:85:ed:2c:a1:f3:
9a:35:ad:13:bd:37:42:49:69:71:11:42:3e:15:91:
30:f8:e9:59:93:6d:b9:15:bc:f6:7a:d8:13:40:1f:
ea:b5:13:5c:a6:4b:23:93:8a:72:6e:73:73:53:c3:
f9:ce:ee:53:82:bc:ee:66:ea:3d:f2:bf:bb:89:59:
13:49:98:d6:e3:7b:2a:be:d1:3f:5f:83:24:7b:93:
22:95:9e:b0:3a:e6:70:82:78:d4:5f:5d:e7:d9:f3:
72:75:ef:ff:d7:13:c1:61:d7:e3:36:fc:9e:b3:80:
22:5c:32:0e:b6:3c:af:fe:49:0a:0c:46:40:67:b9:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:EE:E9:3D:64:ED:9F:C4:DC:79:00:A6:7A:F1:FD:D0:8B:91:45
X509v3 Authority Key Identifier:
keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:9e:0a:0a:48:c3:9b:c8:37:b3:31:1a:e6:45:f1:92:ba:
fb:11:0b:8d:cb:cd:7a:c3:29:7e:47:6e:39:de:4a:b8:db:ef:
67:1c:15:4b:cd:f1:18:b3:fd:c4:70:4d:82:3d:bc:7f:fa:fe:
c9:ec:6d:1f:cc:f2:c0:09:a6:10:f0:a1:2f:c6:59:60:cb:da:
63:3c:23:96:e4:0a:4c:76:0b:f2:b4:c9:e9:ee:5b:fb:fb:df:
98:7e:80:84:cd:40:89:c5:e3:5e:fe:f3:ff:4b:61:98:a5:c9:
2c:ff:24:57:61:9c:8f:8b:22:29:c8:17:2e:dc:81:af:ac:fa:
da:b2:17:6e:7f:bc:42:d4:89:f6:62:60:22:26:f4:f6:ef:2f:
a3:56:6f:70:f8:75:26:6c:bc:4f:2a:7a:a5:a4:33:6c:28:22:
7b:48:8d:31:a3:4a:c3:24:f3:b7:a4:5b:66:fb:10:ff:35:20:
86:b5:e3:a1:0f:34:58:92:9f:cb:68:b3:87:29:d1:77:f9:10:
9d:54:20:26:ac:61:b6:ef:c7:87:eb:c6:ef:66:4a:70:2f:99:
46:07:30:21:22:92:b8:ca:fc:b8:c7:2b:97:ed:39:80:b9:22:
c3:51:a2:94:04:33:44:d6:06:53:48:5c:2c:58:65:ae:6e:9a:
bb:e9:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:39 2026 by rpki-client