
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
File: o7CyBZyzB2t17aMkt2UH08KVUoM.mft (raw, json)
Hash identifier: l09DxcBVPpzRBbaZIz7bb09o1oODNfPMLdTAGHPC5Ew=
Subject key identifier: F0:91:02:98:A0:40:E9:79:AF:7A:9A:C8:63:4A:76:CA:9C:B0:16:37
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Certificate issuer: /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial: 0B0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
Manifest number: 0AFE
Signing time: Wed 22 Jul 2026 19:44:26 +0000
Manifest this update: Wed 22 Jul 2026 19:44:26 +0000
Manifest next update: Wed 29 Jul 2026 19:44:26 +0000
Files and hashes: 1: o7CyBZyzB2t17aMkt2UH08KVUoM.crl (hash: K9Tt6l2dgj2MNFjHbJfzplQCEj5GXVmRgqv4Qp8RQd8=)
2: 62B22A709D2511F092B08685C4F9AE02.roa (hash: DbJt5uAKex9huMofhvsxlPhtfALGiwZmq+7JtduRU3g=)
3: 631E45669D2511F092B08685C4F9AE02.roa (hash: oE0udGN+SutLxt/AfcTk4Go1StJ+DmNSlYRBs9ZP8J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2827 (0xb0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Validity
Not Before: Jul 22 19:44:26 2026 GMT
Not After : Jul 29 19:44:26 2026 GMT
Subject: CN=6a611d9a-477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:65:bd:58:88:fb:5a:1e:c3:f3:42:be:70:
95:64:cb:7b:de:e7:f0:9a:0c:21:b8:f1:1b:6b:e0:
c8:2b:dd:30:d4:9c:79:23:01:89:f0:ae:b6:bf:2c:
06:a7:09:66:cb:1a:3e:09:63:7c:4d:09:ea:40:b7:
dc:c0:2c:9b:9e:15:db:b6:cb:2a:77:03:b5:92:77:
79:5a:be:b4:08:43:91:75:aa:09:e8:d3:5c:c2:e7:
9f:78:c1:81:98:b6:15:f5:ac:4f:7d:78:af:4c:bb:
9d:80:98:ce:9b:c3:a1:0b:89:9a:21:37:83:9e:30:
56:ef:5f:24:d7:30:d2:3b:05:80:36:cc:92:f7:c5:
6a:8b:49:10:62:f2:65:54:12:dc:6c:e2:83:bf:e8:
e4:88:7b:63:21:44:6d:89:da:e8:f3:ff:f0:e6:4f:
fa:a4:91:74:cf:b5:d8:6d:9c:28:7c:e7:0d:77:f0:
a8:45:69:9f:5b:0c:7d:56:92:ed:00:0e:11:2a:39:
26:ba:78:c7:9b:a0:ab:9d:2f:15:c5:4b:38:bc:c7:
79:80:1f:96:db:22:77:f7:c7:f0:9d:58:af:dd:51:
1c:af:a6:79:1e:16:b2:5f:e0:3a:f8:2c:57:f6:82:
13:a0:91:32:2c:54:ec:43:00:c9:93:1a:cd:de:15:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:02:98:A0:40:E9:79:AF:7A:9A:C8:63:4A:76:CA:9C:B0:16:37
X509v3 Authority Key Identifier:
keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:af:af:a1:ae:7f:10:49:e6:78:84:e9:64:41:2d:dc:fd:
6e:e4:64:9e:ca:db:88:d1:7c:54:e7:e9:bc:df:eb:58:13:90:
9e:d6:df:39:29:8f:2d:cf:38:c3:ee:7f:b7:32:80:b2:11:66:
d7:e5:43:22:e2:88:40:72:ca:1c:5c:ff:8b:24:3d:43:4b:b9:
b6:60:b4:65:20:18:65:9b:ff:88:21:17:4d:db:86:be:65:fb:
8f:77:33:47:67:d1:e6:af:9d:05:83:c9:90:ac:bf:1a:61:89:
b2:c7:4c:6f:27:f8:c3:b0:76:3a:75:8a:86:0a:fd:93:f1:ac:
2c:32:8c:8c:94:9f:1a:12:60:52:72:ea:8f:a3:84:87:5e:6d:
a2:3b:f6:5e:cb:44:11:e3:af:d8:80:05:e7:89:55:39:b6:ee:
3c:4b:94:39:84:dd:49:5a:79:2d:81:ea:87:4a:6a:af:76:6a:
ed:53:14:28:d3:72:b8:83:9a:63:9c:f9:d1:b0:4e:6f:0f:b2:
34:f9:51:47:c1:91:e0:52:4e:40:2d:f9:7d:8f:a4:90:f1:eb:
24:63:30:84:2c:6a:b4:cd:52:1f:be:fb:0a:de:ac:11:e9:7b:
df:82:d5:6b:c9:0b:9d:45:fe:c4:44:bd:50:1b:b2:3b:cd:b4:
b4:9b:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:36 2026 by rpki-client