
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier: nvlUuy2bj2c/r31zwTEtMdbhfuoyHIyfzlB3LqOw8cQ=
Subject key identifier: EB:CC:BF:B0:49:02:9E:AA:22:AC:A2:6C:77:81:DD:BF:F8:2C:A9:3E
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number: 0240
Signing time: Wed 13 May 2026 02:45:48 +0000
Manifest this update: Wed 13 May 2026 02:45:47 +0000
Manifest next update: Wed 20 May 2026 02:45:47 +0000
Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: tQVmT6zmrUUAT8d1x/NYqTvKIlo5MByvQUj74w2I8tU=)
2: C5AFD098167311F0916F5435C4F9AE02.roa (hash: WF4BdfrjlUEbgLanwPar/SCOH9ZwGY05ZV/+90DJ4oY=)
3: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: gKGc9eS8Hon8n4wZkVMeLGUVuNuDd19Olmxzqv4FnNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Validity
Not Before: May 13 02:45:47 2026 GMT
Not After : May 20 02:45:47 2026 GMT
Subject: CN=6a03e5dc-e0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:fb:f2:c9:79:83:2a:ec:31:77:3b:4e:c4:
4d:6b:c4:98:a7:f0:1b:a2:20:40:5d:f7:06:01:36:
e0:0e:98:b9:00:0d:d6:19:6b:52:c8:c0:12:d3:8a:
ba:f7:e9:9f:e5:29:16:84:9f:c6:35:b8:3c:df:51:
28:a0:87:80:25:17:0c:cb:7f:4e:ba:e8:10:42:82:
16:86:13:7e:65:38:82:8c:a5:8f:f8:09:f7:47:b7:
dd:59:31:3c:64:40:1f:70:03:61:d2:9f:15:7b:83:
6a:89:00:cc:51:7e:b7:d0:68:c3:bc:fe:d9:59:3b:
4a:d9:4c:7c:a7:95:42:00:84:65:a3:74:6a:d6:67:
2c:8d:50:70:13:ab:f2:eb:02:87:d8:23:e3:a7:47:
58:87:38:24:8f:13:6e:18:bd:60:d9:61:c2:08:aa:
52:c5:d1:63:ae:bd:e9:91:07:41:ca:33:ba:11:2a:
09:ee:0a:be:20:8f:7d:82:ba:38:00:eb:4c:53:10:
10:cd:e3:1e:bd:a9:01:9e:46:80:6e:da:46:11:70:
6d:ab:72:40:19:e0:25:1b:b5:1e:b5:73:96:b2:e2:
83:88:c8:d9:97:ff:5a:bd:e2:ae:ad:63:70:a4:51:
a4:0f:af:50:03:66:cc:36:88:81:a7:fb:c0:6b:c0:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:BF:B0:49:02:9E:AA:22:AC:A2:6C:77:81:DD:BF:F8:2C:A9:3E
X509v3 Authority Key Identifier:
keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:95:2a:c6:9f:ab:06:4c:6c:5d:57:f7:bd:4f:34:80:a5:e4:
18:78:ba:df:9a:04:bb:f9:63:8d:ae:d2:4f:68:04:31:0f:9a:
8e:28:ee:cf:f8:c1:d4:44:4f:fc:4a:c7:62:8e:67:71:42:02:
c7:0f:b0:5e:f2:3c:24:c4:76:56:2d:cf:ca:41:a0:ba:0c:60:
b9:42:c3:9c:c1:a7:c1:6e:5f:fd:2e:e3:d4:1b:cb:86:33:95:
80:90:b6:a1:1e:62:df:96:8b:93:f7:3e:89:cb:c1:de:4d:01:
ca:9e:d5:e0:71:f1:0f:4b:ef:e8:e5:83:1a:65:29:8a:f4:d2:
c8:b3:aa:f6:4a:ba:81:72:99:f9:fe:a4:19:d2:54:ac:67:05:
44:61:99:be:1b:e6:0f:ca:4d:4c:8a:1c:83:f1:21:44:b5:93:
d0:72:01:1f:72:36:e0:6b:01:ff:b8:c3:ab:25:b2:df:eb:c9:
70:82:35:4c:d2:e5:14:83:83:f4:ea:32:09:98:5e:29:6c:37:
c9:40:06:9f:1e:b0:40:30:9d:bc:39:e6:b7:f7:38:85:4e:3d:
54:20:17:3b:66:cd:c0:4a:bd:ac:36:ad:98:63:de:a3:49:93:
ca:9a:e6:87:81:4a:c3:2a:0a:d5:09:0b:f0:be:6d:b2:28:b6:
0a:53:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:22 2026 by rpki-client