
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier: 08i1S3STY8I0m2Vgv8dle0GG5yQk3QAbujAjk9DzGNA=
Subject key identifier: 93:FC:A6:7C:54:8D:C2:41:51:F8:30:DF:BF:EE:50:63:25:6F:B2:38
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number: 89
Signing time: Mon 11 May 2026 07:42:54 +0000
Manifest this update: Mon 11 May 2026 07:42:54 +0000
Manifest next update: Mon 18 May 2026 07:42:54 +0000
Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: +shJSnj2dIVDIL2Ye4JdIVKPQ4FYjskDFLpbieITWU4=)
2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: b8E22OnaIEiCrA4yJOZi7F0AFzWqNO6MaNrnTrS8sIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Validity
Not Before: May 11 07:42:54 2026 GMT
Not After : May 18 07:42:54 2026 GMT
Subject: CN=6a01887e-d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:cc:50:9a:3e:bc:0b:9f:ec:83:1c:02:04:
c7:5c:43:84:50:45:52:78:1d:4c:6a:e8:69:b6:8b:
89:d0:f9:84:3d:c1:19:26:ef:37:c3:e8:17:99:d0:
05:0c:e4:57:9f:67:de:63:31:b3:ea:c3:9e:97:23:
d2:a3:3b:fc:b5:24:50:12:38:1d:bb:70:8a:db:d1:
05:37:b6:b4:7c:d3:cb:90:2d:c9:78:79:8c:f1:5c:
ca:c8:45:9a:b5:e0:a2:ef:81:80:c4:85:27:be:43:
10:37:ef:7e:48:8c:bb:2f:69:18:20:2b:0a:d2:ad:
24:a8:af:f3:9e:b7:12:d2:54:c9:37:71:9a:0b:85:
23:36:6e:e0:98:1b:7f:60:93:95:ce:05:e5:c9:be:
ac:4d:5b:ce:05:97:04:52:16:28:b8:a8:5f:5b:39:
fa:fe:aa:f9:e0:3a:ca:3d:24:3c:3e:f6:65:76:cf:
4f:27:07:6f:97:2e:a3:61:26:21:e6:f2:f5:15:e0:
95:69:02:27:a1:5c:47:ee:1f:3c:15:27:50:31:04:
41:9f:90:16:16:77:b9:eb:3b:4c:f9:7b:59:b5:1d:
85:1b:1f:2f:97:79:22:e2:16:10:0a:a1:1c:89:65:
e9:db:4f:98:b6:72:99:d6:66:dd:fe:0a:21:e6:0d:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:A6:7C:54:8D:C2:41:51:F8:30:DF:BF:EE:50:63:25:6F:B2:38
X509v3 Authority Key Identifier:
keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:33:93:7b:61:dc:d9:d3:01:c1:ff:d9:ca:23:75:7e:4b:e5:
4c:f4:99:61:99:b1:5f:9e:c0:78:9f:72:c8:6e:2e:69:a4:6d:
7d:73:cd:2b:90:e3:b2:e0:c6:37:d7:77:23:99:13:f2:83:31:
15:ee:4d:c9:bb:12:bb:cc:01:97:17:b3:ad:c1:08:60:d3:dd:
0b:0c:80:72:9f:dd:64:0c:9e:4c:8b:49:fa:53:e1:97:f4:fa:
d4:01:2e:81:31:6a:6e:58:8c:e9:a7:e3:89:bb:4d:66:60:57:
9a:ca:d2:b3:c9:7f:fd:be:e1:79:e5:5f:f7:81:55:83:d7:9f:
b1:aa:90:12:7e:bf:15:6b:44:42:37:66:bf:ba:54:18:1e:9d:
ab:3c:e9:bf:9b:bb:08:98:a9:e3:f5:08:ee:20:2c:23:50:cd:
b2:2a:17:e9:6f:e3:09:fa:fd:76:8e:24:52:ea:99:7f:99:b1:
04:cb:2c:6d:69:ef:82:80:68:bf:17:52:e8:5a:59:59:8d:9e:
fe:0c:67:62:e4:74:1b:cc:d3:64:99:5b:d0:d5:e1:a1:39:46:
e2:65:1a:ef:c2:d5:fa:6a:79:fb:85:d9:4c:05:a4:e8:a1:c1:
b7:cd:b5:77:a7:09:cf:8f:6a:24:fe:19:1b:3f:81:9a:3a:35:
fb:f3:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:29:35 2026 by rpki-client