
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json)
Hash identifier: zv9j7bVX5V7pzvDviqCU9wzm7G1McKJir9ZzszYzzUQ=
Subject key identifier: 67:42:41:17:10:D1:66:8D:AC:70:90:A7:D0:7D:0F:29:69:AE:2C:CA
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial: 039A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
Manifest number: 0386
Signing time: Mon 11 May 2026 00:51:21 +0000
Manifest this update: Mon 11 May 2026 00:51:20 +0000
Manifest next update: Mon 18 May 2026 00:51:20 +0000
Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: XxrJoElwXcB4QSKxrNYcxDfkro8PCzDFLP4sCujaBhc=)
2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: de3QFlqBVgHbXKWssjUYqwjj3Ae5EkAMqGV17DFZdzU=)
3: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: wVi55QmlKiR6g81xw7+LKHIS1HR3abLW6EfNfGynUpA=)
4: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: I/I1leE2cUDiG0z+BMnnMFfBTjv2txjfGBtcX6l9bhk=)
5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: q03Ejlk17UMDXNKB6PRUfzS21ZUkRHDF9xysrb5Vn0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Validity
Not Before: May 11 00:51:20 2026 GMT
Not After : May 18 00:51:20 2026 GMT
Subject: CN=6a012809-d35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:7b:36:67:ac:63:e6:f0:97:01:33:ea:88:
b7:11:cb:97:ab:e8:c7:3e:05:b4:a4:33:29:d8:02:
a8:0a:71:4d:54:1f:ec:9a:d2:c6:4f:76:60:3e:67:
2a:f8:a7:44:13:c1:f8:83:2f:d2:ce:2a:eb:43:d1:
ad:95:24:31:11:af:ef:e2:91:c6:08:57:82:04:90:
21:ec:83:49:be:c1:19:f3:23:56:a7:3a:8e:5f:43:
f0:33:f6:28:b7:2f:d9:ed:0b:f3:9d:16:35:da:20:
bc:48:57:48:71:13:d4:75:c2:ba:0d:98:95:c5:14:
e6:42:c7:90:76:96:78:e7:aa:f5:3b:00:8b:21:45:
69:3c:27:4a:95:80:c8:9d:f9:59:d9:4c:48:63:9c:
fd:3a:5c:c7:a1:01:9c:74:42:8c:60:0f:09:c6:75:
e7:c6:51:d2:80:5a:09:54:c1:72:4f:51:ff:e2:b8:
78:60:d0:af:37:a0:ce:d6:48:8d:83:f7:58:fc:78:
da:ad:73:07:63:17:2c:7a:66:93:e4:2f:40:15:17:
68:1f:9c:3a:ce:b6:3d:cb:0f:ac:a0:69:eb:cd:41:
e0:5d:1b:61:23:f3:b0:1f:2f:b3:98:28:db:7f:1e:
91:36:37:41:38:b3:32:95:4d:41:80:c7:05:f9:c6:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:41:17:10:D1:66:8D:AC:70:90:A7:D0:7D:0F:29:69:AE:2C:CA
X509v3 Authority Key Identifier:
keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:8f:7f:55:28:7f:ac:8d:54:ec:54:ab:73:09:a2:3f:ba:
5e:d1:58:44:86:0a:cd:60:54:eb:34:32:e3:f0:67:ca:4d:64:
09:4d:02:e0:5e:75:27:5e:c3:79:fd:87:33:51:4e:41:ca:dc:
6b:9e:4b:03:18:45:fe:c4:f4:ab:14:51:cf:48:0c:af:1b:04:
43:f4:52:5e:bf:b2:8c:fb:2e:5b:e8:81:50:4a:45:76:fa:63:
9e:57:e2:cb:51:37:7d:2c:59:9e:d9:22:9c:43:64:3b:e8:5c:
16:d1:ed:78:8b:10:ac:e2:74:26:48:f6:22:73:e5:0c:2e:b8:
32:43:db:cd:95:ce:28:86:97:4c:c0:22:a9:84:f7:58:5a:af:
92:74:1b:9a:7f:d7:4a:1c:d7:67:c8:52:ea:78:48:1c:f2:5f:
8a:f6:6b:f9:3b:c4:8e:08:20:44:0b:8e:72:5d:34:69:1d:3d:
b4:70:c0:8d:ad:d7:83:0d:04:58:20:f2:86:5f:f3:b0:37:34:
5b:ff:7f:b4:b8:3e:7a:65:ba:5d:3c:48:ca:0f:f5:16:da:b5:
59:d7:e4:7f:8d:c3:16:f1:d4:08:da:db:83:07:2f:ac:36:47:
3b:d0:15:12:24:b4:3e:05:b5:7f:12:71:6e:76:d6:82:c7:34:
a6:b5:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:39 2026 by rpki-client