
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: Gd8DBjFxKEWNoUwcdiLWf5xY5//0AVpu8i1gO9eYSNA=
Subject key identifier: C2:E3:FD:68:31:E6:16:A6:D4:7E:95:90:74:EB:C8:BC:8B:A1:25:4B
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 03A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 0384
Signing time: Thu 23 Jul 2026 01:45:21 +0000
Manifest this update: Thu 23 Jul 2026 01:45:20 +0000
Manifest next update: Thu 30 Jul 2026 01:45:20 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: b3JNyeY0jQZnYB+jcdBv5yIXlXR1ZUBIRU0DN047Cx4=)
2: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
3: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
4: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
6: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935 (0x3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Jul 23 01:45:20 2026 GMT
Not After : Jul 30 01:45:20 2026 GMT
Subject: CN=6a617231-f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:90:41:65:4a:3d:ed:77:f7:76:a7:ba:91:
55:84:ff:b7:0f:72:90:91:b3:8b:20:fc:0e:47:af:
3f:d1:19:99:d9:4e:2f:0b:c4:12:fc:41:04:00:df:
a0:cd:74:63:12:83:e4:d1:51:c1:61:98:5b:b0:4e:
2c:ef:71:1d:5f:74:23:96:b8:22:d6:b0:ef:89:d5:
fc:f6:7e:79:8f:94:72:57:75:95:68:49:6f:18:c6:
2e:55:b2:8a:84:83:99:8b:10:6d:2f:d3:2a:03:83:
0d:20:26:f5:cd:04:61:73:e9:73:7a:5d:d9:d6:38:
93:18:ab:b6:b9:c8:0f:b5:82:0a:62:df:c8:e3:f6:
da:be:0c:4c:96:9b:0d:e3:fb:9c:ae:68:89:73:d3:
04:61:bd:31:a4:c0:67:2b:dc:ec:f9:7f:13:b5:65:
d0:a8:88:6d:0f:bb:83:38:25:f4:b9:a1:09:ec:17:
4e:5a:5d:13:54:51:aa:b8:0d:9c:ed:e5:f9:52:6d:
a5:1c:13:74:a4:eb:b8:ed:1b:e7:40:51:b3:e2:5b:
ed:c4:b4:b7:7e:ca:5b:78:af:4c:5a:48:ac:a1:11:
8d:7e:5f:3a:e1:26:ca:5c:74:98:69:7b:19:e9:23:
68:b9:87:47:28:0e:ac:8a:3c:15:39:71:c2:75:46:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:FD:68:31:E6:16:A6:D4:7E:95:90:74:EB:C8:BC:8B:A1:25:4B
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a3:10:57:58:58:1e:56:30:13:98:a3:60:d1:2d:a8:07:68:
3d:02:20:f0:83:b8:0a:eb:ae:c7:8f:84:6e:65:fc:fa:53:d3:
97:04:f9:06:42:6c:62:7a:f7:e6:1e:8f:22:23:94:b9:5e:3e:
ba:70:c2:98:de:ef:4f:08:62:14:14:a3:d9:33:4b:71:10:6d:
d4:e3:dc:b9:1b:40:5c:87:fa:53:63:04:01:32:5d:e5:14:75:
3a:b7:23:ae:e6:87:b1:1e:77:e8:da:76:2f:95:0a:75:b0:7e:
1e:67:ea:2a:95:7b:56:75:24:ff:bb:58:8d:1d:0a:db:e9:b8:
a4:6d:f5:db:1d:fa:99:61:e5:40:db:4d:93:5b:f8:09:5f:df:
b9:9f:5b:45:49:f9:04:ca:7d:45:5a:20:23:f2:2c:48:cd:87:
67:ca:75:a9:af:35:25:89:c1:98:35:08:1f:ce:cf:7d:53:cc:
3f:97:38:c2:1f:cf:a0:de:18:ea:9e:18:a4:15:dd:03:ed:f7:
53:c7:a3:10:26:be:27:c0:7c:bf:1b:9e:75:c6:93:e1:a2:a5:
7b:b9:a1:c4:5f:b0:89:12:2c:0c:1d:70:80:5f:b3:20:88:21:
50:90:3f:e6:28:02:45:72:fd:af:49:d1:08:32:84:67:80:d0:
56:7a:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:05 2026 by rpki-client