
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: QBqPK20ygkAJoZ9jq9zHVFhSBD5BC2rRKdyWcXZdYyw=
Subject key identifier: BD:2F:39:EC:E1:52:B9:E5:78:E3:08:5E:69:AC:44:8D:A6:CA:22:E7
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: 01B5
Signing time: Tue 12 May 2026 23:48:56 +0000
Manifest this update: Tue 12 May 2026 23:48:56 +0000
Manifest next update: Tue 19 May 2026 23:48:56 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: u3itg4RvJsydj8bwpAy5+NGH69523Mzstca5iKXfGlU=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: BTujCOzweyrlwkqHtVbjQnXK728OLdZVZlAKuLvnySY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: May 12 23:48:56 2026 GMT
Not After : May 19 23:48:56 2026 GMT
Subject: CN=6a03bc68-02e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:72:9c:2b:a2:eb:f2:d1:df:53:c1:66:bc:
72:d5:94:8e:e2:e9:ce:5d:64:ce:9e:55:97:e4:3e:
37:92:3c:30:ef:73:d5:a8:12:db:d5:b1:54:76:a4:
b5:97:54:b4:8a:96:a1:fc:92:d3:d8:09:03:03:58:
24:41:d0:b4:6b:19:da:9c:62:3a:af:df:3e:18:f6:
c0:2b:72:a6:f5:d3:9f:72:ca:e3:f8:7f:21:04:b0:
fa:74:75:61:41:22:37:0e:c9:f4:86:8c:1a:8c:2a:
a5:d6:5a:c3:ca:23:24:26:46:43:79:c5:6a:21:d7:
18:04:d2:05:27:f3:c9:66:e3:34:e8:41:f2:3c:39:
d9:8c:e6:e3:7b:99:c3:42:db:d0:a1:ab:36:64:ce:
d7:ef:44:2d:53:22:6d:3b:f6:21:6f:ae:b0:94:16:
7f:bb:6e:d1:d3:6e:77:bd:c9:d0:b0:10:4f:cf:20:
86:a3:22:14:36:b1:17:4d:5c:13:ba:ec:7a:a0:d0:
90:cb:47:5d:85:30:f5:5b:9b:0f:b0:3e:7e:1d:9f:
3a:18:d4:cf:23:d9:d0:78:a6:18:3a:c7:3c:31:5f:
64:db:94:46:2f:e7:79:99:f8:95:ca:12:b0:d0:34:
b9:0c:f6:ba:17:17:70:dc:73:2a:45:76:61:4a:c6:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:39:EC:E1:52:B9:E5:78:E3:08:5E:69:AC:44:8D:A6:CA:22:E7
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ea:89:20:40:19:38:8f:38:25:e3:ad:ef:6f:fe:89:33:95:
cf:28:ab:b2:8d:74:43:85:7e:0d:1b:bd:13:8f:62:46:63:d6:
61:e8:0e:8c:6a:ed:c3:cd:8e:a8:7f:57:b9:ff:3b:26:9b:e8:
cb:a7:dc:8a:64:f1:b4:1a:85:2c:a9:bb:70:1e:ca:99:61:6c:
fe:d5:5b:65:bc:17:28:8b:84:3d:84:06:b2:76:eb:83:e6:81:
d3:3c:e7:5e:83:b4:85:60:79:f2:27:37:4e:37:f3:cc:ee:5f:
4f:d0:4d:d7:8b:c7:11:8b:17:50:2d:52:0b:6e:4a:bd:39:c9:
0e:01:39:41:6b:cc:b4:3f:76:07:a7:58:bc:a2:b1:66:7b:15:
b9:23:00:94:8e:67:04:87:a8:21:a3:7c:8c:f5:29:b6:1b:3f:
30:d6:57:ed:1e:56:29:67:14:8d:4b:d0:32:ba:41:cc:41:29:
18:62:17:31:62:41:f2:4d:d0:12:e7:64:1e:89:8c:10:b4:16:
ec:b5:a2:64:8c:37:81:95:89:dc:4b:fa:0a:2c:03:d5:b9:b9:
c5:8b:bd:b1:00:ff:52:10:03:60:74:e9:af:d3:ef:8a:82:67:
ea:7f:95:8d:7a:7b:c0:9a:6e:b1:20:5b:dc:7d:60:88:bc:a9:
a8:a7:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:04 2026 by rpki-client