
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier: Cc3OJF4WIlIHsv/B3KfuncAhLkpeu64cG8+AaMQoun4=
Subject key identifier: 2A:60:B2:E4:65:D2:6A:97:EA:67:DD:E1:DA:FF:0E:4B:51:B2:AB:03
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number: 0265
Signing time: Thu 23 Jul 2026 03:31:59 +0000
Manifest this update: Thu 23 Jul 2026 03:31:59 +0000
Manifest next update: Thu 30 Jul 2026 03:31:59 +0000
Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: djGYfO1/m7Hd9VXQS+UGzMVOZiEcxSUqXnW0z0gEVmM=)
2: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=)
3: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Validity
Not Before: Jul 23 03:31:59 2026 GMT
Not After : Jul 30 03:31:59 2026 GMT
Subject: CN=6a618b2f-03ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:7c:59:66:1d:e8:b0:5c:43:cc:08:40:03:
54:5a:7c:38:a5:4e:31:7f:83:b3:a2:c3:fa:57:05:
35:20:a4:f5:fd:6a:e7:59:2a:bc:1c:33:75:f4:91:
da:2c:6c:18:10:bc:fb:95:78:e6:b0:8f:06:e4:12:
43:cc:f3:dc:cb:54:3e:24:12:1f:d6:89:73:b3:88:
86:a8:54:7c:35:df:fc:f9:5d:0d:c4:f8:b8:44:d9:
ae:a7:d9:5c:73:69:c2:3f:fe:a7:b9:aa:16:3c:15:
98:83:0c:c7:f1:e6:43:ef:36:ee:6d:8b:9c:bb:98:
5a:99:93:a0:01:b6:74:c9:f7:0e:fa:7b:c7:89:44:
d9:35:aa:9d:b6:49:50:11:96:5c:25:9e:66:0f:0d:
52:7a:f7:e9:95:5a:18:6f:ed:17:9f:05:06:0d:4e:
bf:e8:1f:8a:10:a6:3b:16:5a:75:7d:86:0e:06:76:
f8:09:e6:70:d7:1a:df:4d:6f:ff:2c:eb:8f:b2:7c:
f6:c5:72:ee:f1:44:fa:5f:a4:04:41:16:0c:07:d0:
52:e5:88:3c:3d:aa:09:74:82:2a:20:fa:42:ed:2d:
3d:35:62:db:63:3b:2c:d3:1d:36:d5:92:54:9f:4e:
0f:a7:13:22:f0:4f:d5:2f:0e:86:8f:c4:a9:b6:db:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:B2:E4:65:D2:6A:97:EA:67:DD:E1:DA:FF:0E:4B:51:B2:AB:03
X509v3 Authority Key Identifier:
keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:d2:f1:53:f9:a4:6b:53:b1:a4:5e:b3:5a:c0:cc:b8:28:
8e:8f:4b:c8:50:9f:11:b4:c7:9a:af:4a:81:ce:75:f7:56:7c:
d3:1c:74:5a:c8:7b:67:c1:b5:a5:bd:d8:82:2e:95:25:47:e9:
7e:c6:c2:4e:6a:79:3b:b8:31:8d:33:a7:ec:58:2b:4f:1c:54:
7b:41:e3:67:e9:62:f8:95:f4:d7:f1:0a:87:c0:80:80:58:cf:
7b:bb:74:ea:78:76:79:c7:06:e2:5d:d7:6b:1c:0c:24:ef:1d:
22:87:fe:b3:04:a8:49:38:fd:de:ee:b4:4c:bc:85:9c:cd:20:
dd:0a:3c:45:1b:ab:53:8e:e0:fe:4c:cf:50:6a:f8:75:d2:37:
f4:5c:90:15:5f:6e:44:11:28:05:f0:01:3a:ed:09:ba:d4:08:
96:2f:aa:e1:d8:aa:c9:57:ca:df:d8:f7:79:2d:41:6c:32:7f:
cf:b0:87:0d:2b:7d:72:e6:96:a5:fd:ba:7d:ae:2f:8d:91:aa:
5d:4a:3a:e1:e9:9a:79:87:b2:37:3a:8e:07:11:e5:81:a5:66:
0d:8a:10:34:55:82:66:98:ad:5c:61:d5:1f:3e:21:a6:2e:cd:
9b:7e:05:77:06:d3:e0:a5:ad:b9:7c:10:b7:8b:71:1f:76:17:
73:5a:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:37 2026 by rpki-client