
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File: z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier: nbBTB4OSELSebS5uTaR7QCWRBShDLiZ2fQiDYZLT/Go=
Subject key identifier: 5C:3F:DD:75:CB:04:B2:82:41:B7:49:88:98:86:7D:2F:0E:42:CA:9A
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer: /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 10:01:00 +0000
Manifest this update: Thu 23 Jul 2026 10:01:00 +0000
Manifest next update: Thu 30 Jul 2026 10:01:00 +0000
Files and hashes: 1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: WPtmjjdnqPu5yWitRpYkoBIoKGGY0n+v1m1+ZY9FLTM=)
2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Validity
Not Before: Jul 23 10:01:00 2026 GMT
Not After : Jul 30 10:01:00 2026 GMT
Subject: CN=6a61e65c-da51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:41:a3:d6:da:3a:28:f3:7e:1e:18:58:25:92:
cc:7b:4f:7e:8c:46:b3:5f:c6:8d:8d:66:7f:19:8d:
7d:4c:e3:18:16:46:0c:aa:c4:5b:71:ee:1f:c7:d7:
fc:af:50:fb:f3:fb:95:5b:63:07:54:fe:de:86:a1:
66:88:1d:e7:aa:85:de:21:14:eb:af:e2:f3:04:15:
07:47:1b:c7:55:6f:00:a2:91:2f:43:de:0b:ed:00:
a1:2f:49:e2:e5:42:b2:6a:6f:a0:f7:df:5e:c0:a4:
f8:85:60:f9:93:1f:3a:1c:ee:a3:01:df:7d:b0:bb:
d5:89:9b:e4:31:0e:ce:bc:71:69:67:5d:f7:1e:7d:
c0:fd:99:f1:1e:fc:bd:87:6e:c9:c6:58:a6:df:19:
bc:a7:f8:ab:59:ee:42:40:75:d7:9c:02:d9:8d:d0:
a9:5c:3c:95:50:39:19:f4:af:33:c4:ad:39:23:b5:
2f:a3:fc:a2:e9:b5:78:dd:20:54:47:f6:db:38:79:
05:b0:d2:06:6f:2d:c8:1f:d0:ae:4b:f9:8b:b8:47:
e2:d2:ae:5a:f8:d9:1f:68:54:18:ed:74:92:17:2f:
ab:a9:30:76:c4:59:3e:9f:6c:c3:24:8f:a9:52:4d:
a7:7f:e2:e1:83:af:e4:d2:b5:0a:7a:0d:b8:b4:a7:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3F:DD:75:CB:04:B2:82:41:B7:49:88:98:86:7D:2F:0E:42:CA:9A
X509v3 Authority Key Identifier:
keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:82:e1:64:36:e1:d8:f8:d0:f8:c8:68:ae:63:a8:fe:ff:
15:92:7b:2a:62:36:28:c7:d3:50:3a:c2:69:19:4c:71:72:e6:
a3:dc:5f:0c:cf:3c:a4:3f:68:be:22:7d:62:0e:42:75:b7:fb:
20:4d:4d:d1:f6:17:45:8a:89:32:99:09:29:20:b9:3f:f1:29:
e1:fe:cc:c8:d8:81:98:3a:a3:93:de:16:8c:ad:35:ef:6c:83:
5d:c1:5d:e0:bd:de:c9:36:04:0b:53:58:ce:f9:22:45:a9:4c:
9d:25:4e:a9:2f:bf:9e:c3:70:60:a6:5a:39:13:c8:54:f2:5d:
14:4b:36:db:8c:97:e6:25:eb:5f:da:12:d7:40:9d:ba:45:e0:
15:f7:2c:9a:2b:11:31:1c:3c:b4:ca:a5:a1:be:8e:d2:eb:69:
3e:43:26:81:0b:6f:46:ea:ef:40:66:e9:72:47:fe:f5:71:a5:
da:6c:03:03:07:e5:a4:51:6e:20:e2:dc:25:06:8a:e4:7e:79:
2f:72:57:47:35:08:4d:17:f2:46:87:6c:77:ae:40:b4:02:2d:
f1:25:a8:7a:75:95:cf:35:08:11:0c:e7:6d:68:ad:db:37:bc:
7a:01:b0:3f:73:47:52:e1:50:be:3f:2f:0d:0c:2b:78:55:e3:
a9:22:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:02 2026 by rpki-client