
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: USNPwkBlTNBWUK62c4F7SDQVdv8DaeMHwE1vtH4/QoQ=
Subject key identifier: 76:E3:F3:4E:43:22:02:6D:4A:E9:00:A3:CB:D3:D4:18:B9:C1:1C:21
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 02C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 02B4
Signing time: Thu 23 Jul 2026 02:28:34 +0000
Manifest this update: Thu 23 Jul 2026 02:28:34 +0000
Manifest next update: Thu 30 Jul 2026 02:28:33 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: YbYxsj+SP6Gs+AncBjze02CYDPBvzxf/apsHh03xO5E=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Jul 23 02:28:34 2026 GMT
Not After : Jul 30 02:28:33 2026 GMT
Subject: CN=6a617c52-27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:a0:18:12:22:f0:65:72:7b:cc:69:91:d4:
c0:8e:af:e6:3f:7a:d1:38:58:c9:96:47:04:7d:e9:
72:3a:c7:bf:ca:36:ca:8e:47:46:7c:09:59:ae:73:
21:c9:7c:66:31:2e:9b:53:97:42:17:b6:b3:2b:63:
25:4f:fc:57:d1:c3:01:26:93:a4:06:d1:8b:c1:da:
ef:8e:f4:b7:b5:11:e4:1b:e0:7a:ff:16:8b:9f:c4:
3e:5b:90:6b:19:61:6c:c9:d5:1a:f2:61:2c:2f:cb:
53:71:9e:ab:2e:0d:ae:46:d5:f2:e8:c8:13:26:bf:
07:a9:b6:eb:65:a7:15:20:63:33:f1:10:8c:96:e5:
ed:63:04:4c:71:a3:a5:e6:2f:04:1e:4c:89:a8:23:
9c:01:54:ce:ae:0c:fc:76:ad:d3:98:a1:68:00:95:
10:24:8b:5f:6b:48:71:9a:9e:27:17:a6:98:76:82:
7a:64:36:72:19:f6:48:c5:fc:b6:c1:93:61:4d:3d:
5f:d8:86:38:28:eb:c6:05:5c:a8:34:f7:9e:f6:a4:
70:87:d7:bc:98:c3:1f:ff:41:0f:4d:c0:b0:63:93:
46:5e:45:44:fc:67:b1:85:75:d9:e9:98:f8:d2:c8:
8c:12:b6:eb:29:06:7c:aa:ff:57:ae:56:35:d9:1d:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:F3:4E:43:22:02:6D:4A:E9:00:A3:CB:D3:D4:18:B9:C1:1C:21
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:18:be:d9:3d:75:ed:24:9f:fc:98:83:e4:7e:8e:28:ea:12:
84:db:c3:ea:e2:e1:cb:c0:f5:07:bb:79:fa:95:e3:47:f8:f7:
af:a5:1c:23:e7:bf:86:d1:82:02:53:7a:4d:10:00:1a:5e:bc:
4a:19:f4:75:d0:f8:a8:7c:ba:e5:6a:ed:ca:cc:68:1e:1a:8b:
5b:db:a0:f4:ed:97:a5:aa:fb:e7:20:55:ba:c7:db:05:8e:03:
96:d2:c5:e1:37:28:af:e1:e2:3a:06:dc:b2:6a:b1:20:5b:a9:
30:37:b2:11:d3:41:4e:cf:e4:14:16:39:8e:83:06:1d:60:0c:
93:fc:b5:4e:44:ca:72:b8:4b:97:16:64:58:af:4d:b4:c0:0c:
2e:8f:de:b4:8c:4d:82:f9:17:d0:5b:4f:89:29:4f:72:08:ff:
31:1b:c5:10:1c:6a:ea:38:01:6b:09:01:83:ed:2d:b7:b9:68:
17:ea:cf:1e:4d:7d:f3:9c:e4:1f:d2:a3:32:7b:11:6f:cb:44:
45:31:97:e8:14:dc:5d:5d:c8:7d:a8:e9:82:d0:e0:b8:69:52:
cf:18:3a:de:88:34:b0:c2:71:7a:5c:22:0a:af:4a:6d:76:3c:
1a:e2:f8:6b:95:7c:4a:7d:fb:b6:c0:eb:0f:9c:ed:19:6a:ed:
be:d6:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:40 2026 by rpki-client