
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier: ou6uWgdXyfgIZp0hTnIJCIx9yjCu+MlBab6Hs4RFQ9k=
Subject key identifier: B3:BF:58:FD:D5:D6:BF:7B:1B:70:C6:8E:95:EA:00:F6:2E:7F:EE:C7
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 22AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number: 2289
Signing time: Wed 22 Jul 2026 15:55:59 +0000
Manifest this update: Wed 22 Jul 2026 15:55:58 +0000
Manifest next update: Wed 29 Jul 2026 15:55:58 +0000
Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: vKLWXPX79mgJcCo/bxwiIzjOi/JZvPHa/pIllDRsGE0=)
2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: JN5MdgQyOnCl7sTnuuhfSC+dcJigA58t5/ie8y0Mx7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8877 (0x22ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Validity
Not Before: Jul 22 15:55:58 2026 GMT
Not After : Jul 29 15:55:58 2026 GMT
Subject: CN=6a60e80e-a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:6f:72:b9:be:34:df:f5:49:66:d0:61:62:
8d:8d:3f:0c:55:b6:34:8c:64:6f:fb:ae:86:25:b3:
73:31:0b:c7:1c:7d:f5:de:db:e4:17:4c:84:1a:41:
ce:1b:46:69:0a:0c:d1:7e:bd:69:6e:74:a4:3a:be:
24:fe:49:af:0b:09:68:fb:29:5d:f0:64:d3:f1:31:
be:4a:a7:2a:78:a3:35:15:22:5d:c7:36:b5:fe:12:
e1:3f:80:1e:03:16:bd:be:1b:b3:5a:ca:0e:93:9a:
15:44:b3:b6:5e:20:06:88:6a:8e:8c:84:cb:9c:6d:
d6:a0:86:9b:56:cf:26:c8:f3:c3:34:db:24:e0:fc:
21:8f:a8:7d:23:1e:6b:53:02:98:36:29:6e:67:71:
07:25:a5:56:a9:f1:b1:fd:1e:0c:f0:a6:ea:c8:0e:
3b:5e:15:50:93:b0:07:31:ec:ee:6a:8a:de:b2:62:
f0:4a:c7:c3:90:f0:4a:b3:fd:12:d5:ad:00:01:3e:
f3:8f:4c:d5:ae:a3:53:45:a2:b5:04:80:fe:10:b0:
ff:16:ae:f3:af:7d:96:a4:6b:4f:ff:6a:59:e6:e4:
1e:95:e9:d9:10:89:2e:9b:3f:f1:bf:22:a9:cb:db:
f3:e9:ec:e7:ef:12:86:d2:f2:0a:3e:0c:78:b3:8e:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:58:FD:D5:D6:BF:7B:1B:70:C6:8E:95:EA:00:F6:2E:7F:EE:C7
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:72:a1:70:d5:6c:c1:fb:bf:d4:e5:da:42:fe:57:ba:61:
67:9c:16:e7:d6:06:89:ce:fa:77:37:cd:fc:ad:f3:f0:52:26:
76:c1:80:dc:01:47:40:fe:8e:23:5d:ef:53:33:66:30:f6:cd:
5b:e1:a5:64:a6:fc:46:6f:f6:53:90:be:89:76:6d:95:0e:e7:
ce:3c:ca:c1:8e:0e:b5:e0:0b:64:9e:00:34:f6:73:bf:ad:aa:
40:30:16:00:05:98:85:9a:4f:14:cb:bd:f5:72:5c:50:81:9b:
25:e5:77:64:a2:bd:14:ad:61:d4:c8:b0:bc:3f:7a:ff:d0:ef:
f7:65:58:b5:d2:72:8e:ab:02:6e:ec:37:9b:fe:7f:8c:f2:a2:
9a:bc:a6:16:b4:4f:f2:d3:e6:31:ef:2b:d8:00:a9:fa:96:8a:
22:51:cd:55:4c:47:67:de:6f:9a:dd:31:ce:06:85:24:1d:ca:
28:84:99:a0:22:48:95:29:e8:2a:2f:41:fb:33:9e:d5:c7:9b:
1f:a5:2f:a4:86:61:dd:03:65:2a:31:7c:ae:5e:3a:db:49:06:
47:5b:26:2c:3b:19:86:e7:f0:ac:2e:3a:fb:14:2c:c7:06:5b:
3f:8c:1a:ed:d2:7b:f6:85:5c:e2:5b:92:bf:da:68:db:25:40:
d0:6f:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client