
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: InJYgrImwcq/YN6iPKdvKN3sytD1+L741Ln8kbAsDvs=
Subject key identifier: 50:32:FA:D6:AA:72:FD:64:F9:FE:B5:A4:74:1F:C1:A5:CD:C0:A4:59
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: 99
Signing time: Thu 23 Jul 2026 09:13:18 +0000
Manifest this update: Thu 23 Jul 2026 09:13:17 +0000
Manifest next update: Thu 30 Jul 2026 09:13:17 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: qMzFKRu9G2cSR+QMEjF6LbViy0gJnw1ISvQAhezNBUU=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Jul 23 09:13:17 2026 GMT
Not After : Jul 30 09:13:17 2026 GMT
Subject: CN=6a61db2e-92f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:8d:3b:ef:81:c8:75:62:d0:b3:d1:19:a8:
4d:ad:14:c0:bc:17:20:cf:69:a6:b5:c9:b0:af:7d:
63:df:f6:fb:8e:2c:4a:80:6a:3e:5d:81:fd:9c:67:
e9:29:42:e4:7e:0b:48:69:f1:b2:29:f3:07:18:dd:
c2:99:c0:d3:e5:2c:a0:68:26:df:b3:67:8e:d9:57:
ce:c2:1d:9e:9b:51:1d:5d:fc:61:58:6c:30:ec:2a:
f9:99:0f:7b:17:92:03:8f:4d:33:96:d7:12:54:45:
84:04:1a:3c:df:5a:a1:39:be:e0:26:56:41:6c:49:
4b:d7:ae:4e:7b:4c:6d:6e:ea:fc:52:17:25:ed:fd:
bf:15:52:e3:2c:1d:28:7a:dd:f4:0f:da:f8:a6:d9:
0c:31:ad:2b:27:14:40:ab:92:09:b8:10:23:91:d2:
33:91:ec:65:bc:c2:f1:66:b5:94:5c:1d:65:73:59:
2c:18:de:0a:18:76:6f:1b:00:7c:39:e6:3a:2d:da:
91:f4:bc:8c:7d:26:8b:76:93:b3:6b:08:96:90:88:
b7:a3:19:ef:dd:bd:4b:15:42:d7:af:f4:13:76:83:
fc:02:4a:d6:51:3c:ed:f4:a2:c9:98:ed:60:da:51:
c5:04:89:a6:9b:3e:d9:bf:68:af:8a:06:51:00:25:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:FA:D6:AA:72:FD:64:F9:FE:B5:A4:74:1F:C1:A5:CD:C0:A4:59
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:59:3b:30:a4:70:36:e9:49:ad:70:3f:52:68:aa:6e:13:e2:
75:fb:74:a5:d2:80:3d:5b:1a:cf:e4:a8:ea:c8:45:95:cb:5a:
85:22:8d:d2:b8:93:c6:75:17:b1:81:07:22:78:e9:e2:85:61:
48:ed:47:8f:94:81:f5:6c:35:89:3d:69:a1:8a:3c:fb:db:f3:
d8:7f:47:da:63:cb:d1:87:e3:81:d7:d2:1b:44:d9:63:12:2a:
f3:a9:7a:d4:44:74:14:a4:40:ae:f6:88:eb:e4:f3:50:4d:c9:
92:02:58:25:60:8a:61:24:3f:2a:f1:0a:d7:54:09:38:18:99:
3d:aa:99:eb:45:3e:51:a7:cc:7a:2e:dd:60:fd:6e:d6:a6:7a:
a9:78:b6:6f:77:41:3e:5b:e3:18:7b:30:52:91:c4:0e:d7:f7:
77:8b:51:77:5e:b5:97:64:72:7a:58:ac:d2:ee:d8:9f:64:b2:
3c:59:44:32:1f:30:a2:57:4a:f4:07:00:dd:0b:12:f6:e6:35:
fc:ba:d2:0b:09:19:75:62:d7:e3:40:cc:59:7a:76:51:ae:cc:
81:5a:f0:d3:b4:4d:ae:50:4c:e6:b1:af:88:57:21:2f:b8:38:
91:93:b1:4b:20:b7:83:55:e8:70:14:83:d9:22:fe:37:ad:8d:
50:ca:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:29 2026 by rpki-client