
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier: yGA0tdd1ATmJkB7RFtZiieH2fcCwFhPDiitUt5Qt96o=
Subject key identifier: 82:3E:80:7C:94:10:D1:F9:95:6C:FE:2F:28:2E:CC:02:49:33:4E:E3
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0C66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number: 0C5D
Signing time: Wed 22 Jul 2026 18:59:38 +0000
Manifest this update: Wed 22 Jul 2026 18:59:37 +0000
Manifest next update: Wed 29 Jul 2026 18:59:37 +0000
Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: VdcVOqpnpjZ33luVunf9A2S2gM9+jdVPegAPDs6jwSM=)
2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: fX5/uJooYEcnxNqHOSpjxqBp0mmX3z3GCn7QiIBcEm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Validity
Not Before: Jul 22 18:59:37 2026 GMT
Not After : Jul 29 18:59:37 2026 GMT
Subject: CN=6a61131a-31b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:62:02:ea:d3:bd:4a:a5:4b:19:d5:b4:25:
6b:ea:52:d9:f2:5c:5d:4f:ec:31:75:19:8b:f3:3f:
b9:eb:cf:8c:20:5d:f4:79:0a:08:7e:43:f2:e0:81:
ac:b5:8f:30:e1:ef:d4:8c:5e:4f:f9:4e:e5:5a:51:
7c:f0:bb:d5:ea:17:f8:cf:66:ed:ba:f7:9b:c9:4e:
0d:76:b3:7e:85:de:a3:df:b5:b2:b9:89:f6:b7:3a:
ee:d0:f7:da:cb:4d:3d:4e:e1:0a:46:90:d5:23:06:
ff:46:69:29:83:8c:35:34:7b:04:db:5c:f6:6d:d0:
80:f3:d1:17:c2:22:2b:89:0d:0c:8b:c9:eb:a7:1e:
b7:54:ae:52:1b:7c:73:e6:27:5c:1b:53:67:a8:66:
69:9a:3c:e9:fe:c3:a9:36:39:e4:84:8e:1b:e6:11:
a8:b8:fe:75:90:e5:c3:e5:0d:e9:52:fb:03:0c:81:
4e:3e:b8:17:34:5f:c8:43:fd:fa:ca:12:ec:83:5a:
9c:df:66:49:0e:69:04:ca:15:76:c8:52:82:6e:be:
20:6e:cf:c8:08:6c:9d:0c:d1:7f:92:96:14:b3:b8:
77:25:fc:72:26:a4:8f:94:ba:60:02:f7:62:96:7d:
ff:16:fb:cf:58:8e:a8:8d:1f:25:14:b5:4d:25:fb:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:80:7C:94:10:D1:F9:95:6C:FE:2F:28:2E:CC:02:49:33:4E:E3
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:9d:15:26:0b:04:b7:65:23:e9:b9:0e:50:fc:15:0a:10:25:
67:05:b2:f0:0f:87:5a:3a:e2:8b:fa:fb:93:27:42:f1:39:b6:
41:50:1e:24:c5:d7:a1:af:df:4b:72:7b:7e:ad:68:30:60:9b:
a1:cc:5f:e2:f7:ea:7d:9b:46:7e:62:37:4b:03:54:fe:11:ea:
aa:04:5f:1e:9d:f7:8a:f1:33:83:a0:6d:d8:8b:34:6f:f0:78:
84:08:d8:64:4a:36:cf:07:0f:38:c7:a2:99:30:cc:35:a8:b3:
14:b9:bf:15:13:6c:dc:0d:f6:c9:e2:8a:6c:c4:bc:a7:a7:53:
ed:0c:25:08:2d:8d:3e:71:a9:dc:68:05:f4:16:2d:f6:07:48:
27:60:f7:bf:05:29:be:8f:d4:25:22:9f:aa:05:12:65:3d:cb:
ef:1d:b0:db:fc:2d:93:91:4a:64:fe:6b:52:73:ab:eb:42:1a:
4c:46:a1:fd:0a:dd:e5:48:94:94:d6:5c:19:eb:43:7a:03:f8:
40:2a:b1:d3:71:46:cc:6e:21:5a:a4:2b:70:01:be:73:e9:94:
9b:a1:f1:b3:08:fa:43:1a:67:d7:d2:9e:c9:0b:66:c4:00:e1:
cb:6d:57:3a:be:f2:20:2a:5a:63:6d:f3:e3:b1:fc:95:10:47:
4b:ab:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:40 2026 by rpki-client