
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json)
Hash identifier: ZZVOxg6u94cD3DU2gNoT/LnWpUbE/eBSsTpI9U5hFYE=
Subject key identifier: F2:57:39:F1:89:07:FC:2C:55:B3:F8:94:1D:42:B5:04:81:8E:39:AC
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial: 35A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
Manifest number: 357E
Signing time: Wed 22 Jul 2026 15:18:29 +0000
Manifest this update: Wed 22 Jul 2026 15:18:28 +0000
Manifest next update: Wed 29 Jul 2026 15:18:28 +0000
Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: GYTE4Mb/ploy6bv+NdkRE+z3FXBBFl+vl6QQlyETQww=)
2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=)
3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13731 (0x35a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Validity
Not Before: Jul 22 15:18:28 2026 GMT
Not After : Jul 29 15:18:28 2026 GMT
Subject: CN=6a60df45-5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:d0:18:d6:39:41:9a:71:ab:39:ee:0a:f9:
ad:31:94:8d:0a:3b:44:1d:f3:f4:22:f9:75:4a:c0:
81:5b:77:77:6e:fb:17:03:7e:9e:e5:c1:dd:f4:63:
55:dd:bd:fa:47:65:7b:45:97:79:00:eb:a2:ee:36:
f7:99:ee:07:a7:20:9c:75:5d:ac:04:d7:bd:82:87:
21:ee:dd:51:0f:12:f8:d9:9a:78:a8:4f:a9:09:7b:
b0:01:57:ce:dd:66:b1:67:de:26:97:78:4a:10:58:
34:c9:f0:7a:14:ff:7b:5a:ee:10:5c:7d:6e:c7:40:
c4:57:ad:30:6c:d7:5e:d4:1d:ac:2a:9b:be:a6:25:
c9:be:6d:97:6e:35:97:10:29:4c:ee:93:0b:30:32:
4f:a6:84:cc:06:68:18:bc:c4:db:c7:6e:03:2c:fe:
96:76:75:0a:65:71:8a:65:e8:97:61:5e:89:6f:15:
41:01:1d:9d:ad:6c:fd:33:49:98:d9:e5:5f:3c:a0:
4e:f5:72:40:16:af:3e:f4:39:23:7e:84:e8:cd:ad:
41:ee:0e:5f:35:ec:d7:b9:b3:3c:0b:3b:05:57:b2:
2e:1e:98:94:5d:87:29:25:18:3e:76:03:ec:5f:2a:
f2:c0:c4:1e:03:72:4f:6e:97:6a:01:db:c3:e5:73:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:39:F1:89:07:FC:2C:55:B3:F8:94:1D:42:B5:04:81:8E:39:AC
X509v3 Authority Key Identifier:
keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:b6:8e:c5:d7:8b:73:b4:5b:77:88:3d:c5:23:f3:45:b7:
f2:f2:05:58:8c:82:95:2a:bb:c3:7b:56:a0:4d:d6:e6:07:72:
e5:df:80:a6:9f:6f:ad:a5:5a:5b:c1:35:c5:60:e9:72:12:c6:
b8:ad:45:f1:e5:e2:8b:3f:1d:fa:24:90:e0:62:c1:bf:20:64:
71:d5:94:88:c6:3a:ab:db:fa:88:76:08:62:5b:5b:d9:7b:32:
88:00:61:fb:71:30:76:66:e7:83:4d:c9:a5:20:db:37:18:09:
75:11:2e:34:c8:c7:13:0a:1d:b6:86:73:05:98:07:15:37:79:
89:77:ec:89:8f:31:39:5b:78:f5:76:a0:68:36:2e:8a:18:cd:
7a:61:40:c2:62:fe:9a:91:15:7d:5c:d5:71:32:d1:f8:04:9f:
8f:79:8f:40:ad:b4:21:e2:13:ce:4d:c5:4f:36:22:a9:46:59:
24:ec:4e:2f:4b:e4:3e:4c:52:2a:5a:23:4f:7a:df:03:8e:ff:
df:d7:2f:3c:be:b3:80:5d:a3:79:60:db:83:78:47:75:a7:99:
0d:6f:c8:b4:9a:4b:b2:0e:54:52:8c:80:88:84:5c:88:20:03:
e9:65:bb:34:16:f1:a0:68:f2:c2:87:8b:6f:8e:59:d8:0d:be:
39:e7:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:56 2026 by rpki-client