
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json)
Hash identifier: 5Xzwq/FMztrKc3qJcjyzQ7q85IF4JREA1APu8utXWTw=
Subject key identifier: AD:D1:2B:05:F9:50:CA:A5:1A:DB:36:1C:0E:83:5A:E0:3B:0C:48:21
Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
Manifest number: 049F
Signing time: Thu 23 Jul 2026 00:48:10 +0000
Manifest this update: Thu 23 Jul 2026 00:48:10 +0000
Manifest next update: Thu 30 Jul 2026 00:48:10 +0000
Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: cCJNS4Gq0mfv0joGyLNJB83aUkSsGtgJok/FqouWy6Q=)
2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=)
3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Validity
Not Before: Jul 23 00:48:10 2026 GMT
Not After : Jul 30 00:48:10 2026 GMT
Subject: CN=6a6164ca-f7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:a4:a5:ef:3d:57:00:44:34:27:b2:60:7c:
fd:f7:7b:ba:1c:af:31:99:12:c5:49:37:e0:59:31:
1f:37:66:70:1f:f2:db:a7:01:32:a9:99:91:1d:92:
c9:d3:7f:3e:b1:b2:ea:18:c4:0d:29:08:37:71:57:
f4:a8:3e:95:54:d6:f0:95:25:b5:2e:6b:2f:c3:5d:
91:34:1d:d5:0e:6f:ac:a0:a2:5d:46:be:89:18:c4:
98:2f:8f:d5:e2:47:f9:29:2f:d2:1c:a4:83:cd:94:
1d:ba:0f:86:92:ce:fd:d5:6d:a6:0e:c0:e1:bd:04:
4b:c1:69:e8:b4:50:73:2e:e1:37:e1:da:50:cf:15:
75:30:6a:5d:ae:2f:35:9b:76:44:cc:bd:76:82:3e:
db:eb:79:35:ec:d4:fb:df:db:56:c6:8a:6b:75:4e:
1b:d7:4c:10:ee:7f:13:1a:0e:2c:54:74:93:01:74:
23:dc:5e:fd:62:a8:4d:32:8f:11:73:9a:5f:79:93:
ba:44:c0:74:fe:2e:06:05:7f:da:b5:4c:8e:1b:f8:
bc:90:cc:7b:97:56:c2:91:75:d8:04:09:b5:17:21:
14:75:2b:23:8c:bb:e3:46:d9:a4:f8:ff:8c:8c:7f:
f2:3a:ae:8c:16:07:88:3e:c0:e2:c0:3b:3c:9c:6f:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:2B:05:F9:50:CA:A5:1A:DB:36:1C:0E:83:5A:E0:3B:0C:48:21
X509v3 Authority Key Identifier:
keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:10:db:de:d0:66:b0:9c:03:18:e0:57:0f:57:af:0f:ba:
8b:0c:8f:61:82:a9:6f:3c:2f:e2:59:70:ff:01:2b:76:7f:bd:
76:a9:eb:05:79:43:e2:40:f5:51:8e:8b:f5:be:a4:7c:06:a3:
58:ea:a5:ad:1f:fd:6c:79:2a:23:fc:5f:a4:02:99:a0:4a:1b:
26:d8:37:ac:f0:d5:5f:c0:c9:c0:df:b6:db:08:bf:39:16:d1:
52:40:6e:8a:6b:0c:33:95:b8:0e:b1:e2:d0:b7:59:79:f9:6f:
63:13:df:d3:1c:ec:37:3e:53:40:d7:2d:e4:38:3f:76:9a:d4:
e6:8b:b3:a9:fd:c4:6e:c7:b8:b7:f9:e0:b9:b9:aa:b1:97:3f:
a1:94:bb:eb:5d:7f:98:e5:ca:21:59:1e:86:59:35:ba:3e:6f:
1c:9a:8e:50:36:d9:ef:82:eb:d3:fe:d5:fc:9b:23:21:21:41:
51:76:a0:44:06:87:f6:ca:0a:d1:ef:4a:5d:7b:8c:40:c9:9c:
1d:e9:1e:66:8f:fc:36:e7:c4:63:8e:df:95:49:49:53:d3:0d:
ac:aa:7e:0c:ff:e0:c3:0b:a8:64:62:04:aa:34:ca:2b:ae:ee:
83:02:26:5f:cb:c5:ab:66:36:99:c2:e8:e8:02:2f:89:2f:cb:
37:09:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:43 2026 by rpki-client