
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier: uu3B9+CRRpZbnzz8bOVnX5X7IfJaEdj67bVh3KW87Xg=
Subject key identifier: C6:6E:AA:50:DE:D4:7D:0B:79:3A:A2:B0:69:0C:6D:42:02:F7:F3:45
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial: 03A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number: 0379
Signing time: Thu 23 Jul 2026 01:49:48 +0000
Manifest this update: Thu 23 Jul 2026 01:49:47 +0000
Manifest next update: Thu 30 Jul 2026 01:49:47 +0000
Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: uF+DvlJlEBwKParZ5GdYuXxED1TGKug4XsgA2Pnk2zg=)
2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: pu6SoMWB6txH7Ha4WwK43mwzGqVFweaoNNhIGVki79Y=)
3: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: ocfm0632GkIQFqFPtClJ7d+H9AJy5vbW5Lcs0qelByk=)
4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: MI7imB1oUQ+nBhE/F9pWSqwhaGqPvMCUwnO5mooHgWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Validity
Not Before: Jul 23 01:49:47 2026 GMT
Not After : Jul 30 01:49:47 2026 GMT
Subject: CN=6a61733b-c677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:ca:d4:57:3c:74:18:06:42:93:ea:be:0d:
21:c1:18:5e:97:22:b9:00:a0:42:9f:11:c5:59:60:
17:09:c8:84:dd:07:ad:9a:e1:43:b7:a2:60:4e:c3:
37:72:0e:31:69:4c:e7:a6:00:07:28:1d:4d:f3:d5:
30:ae:25:d5:c2:2c:78:85:de:f4:e3:97:74:e4:1d:
57:e6:c8:df:5a:aa:63:26:f9:cc:ac:81:fb:e8:25:
c3:9a:6b:d9:e2:5a:b6:7c:46:d8:b8:cd:65:88:74:
96:2d:6a:61:0f:c7:37:c2:f6:ff:79:5a:54:d7:23:
5b:4c:a2:49:51:e5:0d:c2:46:3d:4e:dd:87:33:c9:
84:5d:49:82:a3:c0:2f:da:05:e6:7c:b5:1b:00:50:
b7:dd:5e:83:64:b8:0f:54:7d:55:a0:85:b7:84:f5:
77:3b:bc:61:62:bd:71:12:df:bf:30:17:b5:04:65:
6b:17:c1:97:16:a6:ea:92:f0:7d:d9:b4:91:a1:f6:
8c:3d:63:8a:fb:e1:b0:cd:79:1c:f3:8b:f1:43:24:
f2:ba:5b:10:c5:15:e6:e0:4a:c5:4b:63:63:d8:a0:
17:56:53:98:1b:1b:90:7a:c2:80:22:db:5d:9b:77:
6b:ad:01:91:75:0b:7f:dd:5b:ca:a1:26:30:ea:7e:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:AA:50:DE:D4:7D:0B:79:3A:A2:B0:69:0C:6D:42:02:F7:F3:45
X509v3 Authority Key Identifier:
keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:89:05:62:79:68:00:7c:77:db:92:89:01:cb:af:53:c7:60:
2f:87:ee:df:d1:08:0c:2e:b0:a0:15:1c:f3:0a:36:ca:75:2c:
00:c7:a0:2b:65:1c:38:0f:14:c6:9a:06:ca:b4:a8:63:04:34:
9b:9b:38:c0:e6:31:6c:c8:46:48:57:9b:87:cf:51:da:c8:8b:
70:7d:c8:37:a3:18:c3:6b:a1:db:26:f9:5f:e4:b5:15:22:de:
24:53:dc:1c:ba:53:3b:54:90:ed:2a:f5:66:1b:7a:0c:64:e0:
0c:75:99:ff:43:c0:06:11:0f:c8:d4:01:19:b8:74:b2:d2:2d:
8c:af:43:7d:5b:de:ec:f4:c7:05:2c:b9:ff:35:b9:68:41:eb:
24:b2:50:83:ac:6c:93:0a:52:af:1b:6d:42:16:15:39:2d:07:
3a:36:48:21:21:83:fa:66:e9:ac:80:24:c8:c8:b4:bb:a3:88:
36:f9:9e:39:48:c3:34:71:54:98:34:a8:b1:f3:7d:fe:e5:6b:
6a:4a:bb:3c:3d:a2:bd:32:e1:e2:5f:c4:da:33:84:57:96:9a:
57:51:7a:b9:8c:84:57:fa:bd:e4:2d:1e:d3:33:ef:09:b4:be:
7f:cc:0d:13:97:8c:5c:ce:51:6d:14:97:97:d5:78:8b:fe:29:
ce:d5:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:02 2026 by rpki-client