
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json)
Hash identifier: HAgqI8usCV8M9TBJGFsT0Bcc62hzguDUOal6utWSbco=
Subject key identifier: 44:10:AD:4D:64:3C:DC:56:EA:4E:47:03:C1:39:9B:AE:4C:9C:09:1D
Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Certificate serial: 0488
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
Manifest number: 047A
Signing time: Mon 11 May 2026 00:08:48 +0000
Manifest this update: Mon 11 May 2026 00:08:48 +0000
Manifest next update: Mon 18 May 2026 00:08:48 +0000
Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: VtiSp3XXtUnN/zR1M65dDFLhX6eSEbZwBsJS8G92U4s=)
2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=)
3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Validity
Not Before: May 11 00:08:48 2026 GMT
Not After : May 18 00:08:48 2026 GMT
Subject: CN=6a011e10-74f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:1c:aa:ab:6a:00:7c:8f:8c:77:1e:07:f0:
ee:67:70:2a:b9:ed:61:f6:54:1b:eb:be:43:a4:8f:
d6:f9:f8:8c:a6:17:5d:96:ea:36:0d:a6:58:aa:5a:
e8:09:f8:fc:ca:7d:ef:f9:77:1c:eb:a8:da:31:1c:
5b:03:e9:c2:99:ad:f0:83:a8:8d:ce:13:7e:51:61:
ad:47:7c:eb:28:ba:b6:39:ff:61:8c:78:15:72:3c:
9f:99:32:0d:18:d5:0d:59:9f:61:25:75:52:cf:e8:
3a:56:7c:d0:36:bf:00:49:04:43:05:34:21:73:04:
c6:13:fb:58:f1:2e:00:47:1c:e5:bf:15:56:da:fc:
3c:75:7b:7b:e6:33:69:7a:84:19:12:0d:76:e0:2e:
fa:24:74:8a:02:12:51:7a:c9:4a:75:f9:c8:47:72:
55:af:35:7f:45:80:68:87:3c:cf:b1:51:b8:9d:f9:
83:03:4f:dc:4c:16:e0:ee:0b:a7:26:3a:64:67:9a:
f8:a3:2c:aa:fb:a8:64:32:f8:cf:7d:85:68:c1:70:
9d:35:3e:8d:6a:37:9f:51:7d:7b:eb:29:79:9a:83:
dc:c3:0e:d5:b9:d1:96:6b:de:22:22:3d:e0:31:2f:
fd:cd:f2:34:7b:f3:17:d0:e9:1a:e3:75:ae:cd:ee:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:AD:4D:64:3C:DC:56:EA:4E:47:03:C1:39:9B:AE:4C:9C:09:1D
X509v3 Authority Key Identifier:
keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:5a:86:b3:60:2c:72:a1:94:35:66:43:25:6c:3b:fa:60:
48:af:e7:2b:e5:8d:ff:07:0b:ec:1e:da:1a:bb:ba:4f:96:6a:
a3:c1:90:c4:05:cd:ba:4b:93:2a:d7:6d:67:d0:3c:60:dd:f0:
0c:09:21:ec:0e:e2:a7:0a:14:d8:b8:e6:2d:cc:c3:96:f0:2e:
14:82:76:fe:86:9e:f6:ed:b6:bf:50:69:f0:a2:54:76:8d:5b:
85:46:f9:7c:68:34:85:34:e1:65:52:c5:bd:b3:2b:ab:7a:65:
6f:7a:b2:07:06:0e:77:aa:43:7e:84:6b:2b:c7:8c:12:93:2b:
ce:9b:fe:7a:46:fa:20:92:4a:59:c0:13:99:d0:46:9b:5b:cd:
e5:2a:68:17:1f:dd:9a:ab:c1:bc:32:74:20:fb:86:44:30:95:
13:08:8d:a2:71:e2:00:2d:e5:bd:9c:14:90:90:19:d5:2f:6a:
37:f0:e1:d9:79:ef:44:c8:ef:3b:f7:83:18:47:20:30:01:c4:
6b:84:63:e0:5f:14:78:04:9b:97:c4:5d:ab:ed:fd:7b:ac:06:
74:4f:24:76:e4:d6:02:38:a8:6f:45:b9:77:fd:68:04:99:49:
af:2f:df:38:df:64:fc:5b:69:23:e5:26:11:0e:a9:1d:24:46:
03:fd:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:05:17 2026 by rpki-client