
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: O2Hu52JupnkGvyG29QAKb0KTCP2YCfTT9s3wuL3gJ6E=
Subject key identifier: BD:87:A2:34:D3:70:75:DD:04:29:79:29:3C:55:BC:44:DC:06:6E:B3
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: 75
Signing time: Mon 11 May 2026 07:55:41 +0000
Manifest this update: Mon 11 May 2026 07:55:40 +0000
Manifest next update: Mon 18 May 2026 07:55:40 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: EQMfd0WIg3B8MrqFX8dGnkCxAr0ZJ/A8gIIb3vPEXmA=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: May 11 07:55:40 2026 GMT
Not After : May 18 07:55:40 2026 GMT
Subject: CN=6a018b7d-4cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:b6:20:87:ff:76:13:e9:31:87:3c:0f:29:
ca:77:e2:e1:a9:1a:4e:d3:88:2b:f2:8a:63:cb:96:
6b:8f:4f:d6:f2:e1:b4:5e:e4:cd:d4:67:37:02:77:
93:9c:7e:e8:2b:92:38:28:2e:24:bc:b6:fb:9c:ea:
a1:64:78:5e:3b:77:b6:4c:87:c5:66:0f:49:e8:1c:
7e:5b:37:c2:40:a1:88:ce:b6:f1:2c:59:c5:7e:ff:
0e:3e:47:95:12:43:f6:de:da:cb:16:3f:f0:19:3b:
8b:25:4e:27:4c:db:7b:a4:10:7f:2c:e6:8f:33:3f:
f1:0d:b9:6c:a0:bc:54:5e:41:2d:ef:a9:7d:79:f6:
c9:e2:16:4e:d2:0c:cc:55:c4:ba:d4:2b:1e:81:2d:
2e:f8:29:69:a5:51:4c:40:33:ee:4c:61:34:4c:42:
d5:f4:7b:38:3c:d1:c4:38:38:0b:f4:37:52:76:c7:
f4:e9:83:df:1f:e4:d3:cf:bd:0d:ba:78:e2:f3:7e:
55:96:37:f9:26:04:15:a6:cc:de:49:45:c9:3c:5b:
ab:44:f9:60:12:39:ee:8c:a6:b5:15:b6:c5:16:6e:
47:31:54:43:79:97:1b:2b:61:c2:10:b7:92:64:25:
6c:4d:15:17:06:ea:d4:c1:e5:78:60:84:c5:cc:69:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:A2:34:D3:70:75:DD:04:29:79:29:3C:55:BC:44:DC:06:6E:B3
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:4e:58:ab:3d:2f:b4:6a:d9:a0:a5:99:3e:9c:21:fa:e4:4d:
18:81:8d:cc:86:ae:44:26:4e:30:07:8b:c0:4f:19:b9:16:2e:
7b:32:c1:00:96:27:a1:cb:46:45:58:af:eb:7f:4e:62:ab:6e:
83:14:20:5c:8a:23:7b:41:37:2b:e4:6c:f0:5d:ef:c2:9e:2f:
dc:f2:78:d1:eb:eb:7e:09:18:c9:17:82:2a:23:95:6f:eb:cd:
90:36:e0:aa:fd:4d:44:86:51:9f:13:26:59:52:c4:b7:58:c4:
e5:16:6d:3c:88:33:46:9d:0e:5b:d2:d3:6e:84:e6:8e:af:68:
4b:12:bf:3d:47:52:f3:e5:43:85:1d:4e:51:20:f1:c5:9d:f1:
dc:e8:7a:78:f9:3a:51:4b:a5:c0:a0:ca:7f:77:01:33:33:53:
ed:cb:95:15:f4:49:d7:17:ed:50:0c:71:b7:6d:cf:27:88:ee:
01:c3:a6:f3:1c:25:61:fd:9a:b5:77:e1:e0:07:91:91:4a:90:
ec:27:a2:ab:02:b8:b8:70:63:a4:b1:e2:a7:0f:9c:99:ed:a0:
04:f9:a2:73:54:5c:b7:21:90:26:15:1e:80:1d:73:40:41:3e:
e1:a6:7e:59:26:1f:58:b6:d7:e2:9b:26:95:12:f5:45:49:86:
05:ef:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:08 2026 by rpki-client