
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: kx7c6QQGprezs1h/C1IvtYzRGoArpLCuOYDrEcjOsac=
Subject key identifier: 87:B6:38:0F:D6:37:49:7D:71:C9:AB:60:16:83:2A:30:2E:77:0D:EB
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 141C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 1401
Signing time: Mon 20 Jul 2026 17:04:06 +0000
Manifest this update: Mon 20 Jul 2026 17:04:06 +0000
Manifest next update: Mon 27 Jul 2026 17:04:06 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: 33rWEvOvNNDSdrT7OEZ/9Oa1Oac/rl0vBhBm/cLq9S4=)
2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5148 (0x141c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Jul 20 17:04:06 2026 GMT
Not After : Jul 27 17:04:06 2026 GMT
Subject: CN=6a5e5506-d587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:1d:17:ab:b6:95:da:aa:59:79:a2:b8:66:
04:d9:80:b0:a7:cb:ee:02:37:4d:bf:62:97:17:bb:
ca:07:a8:55:d7:66:bd:c2:57:30:1e:fb:3d:69:f3:
62:9f:10:67:13:11:80:33:2e:fb:01:1d:9c:7b:8d:
0e:1e:4f:ef:90:c2:eb:5e:5b:f7:98:91:70:99:b7:
d6:0e:b8:49:ac:c2:24:c3:ca:c5:e9:61:95:c9:b6:
85:af:2d:a7:6f:e6:95:48:53:73:9d:22:b2:87:32:
64:86:eb:27:95:5e:85:08:e6:0e:d3:c5:c8:05:9b:
1b:d0:eb:11:09:93:07:0b:17:d4:79:95:40:5f:fa:
38:72:84:30:7a:1d:57:d8:7c:58:15:3c:00:51:02:
e5:bb:94:41:57:61:99:29:78:ae:6b:99:3a:3b:9c:
b1:81:b7:44:e0:f0:b3:80:f8:71:06:8f:2a:f5:a9:
09:8c:bc:3a:5d:e9:09:0e:16:e5:b9:d9:fe:6a:36:
7b:db:21:61:0a:e8:77:65:1d:88:81:39:2a:0e:a2:
79:eb:6c:1c:fc:7d:46:6c:d2:fd:e2:2f:cd:1d:81:
2b:cb:af:3b:be:5c:6f:79:c8:5f:f5:ee:15:93:5a:
a4:da:ba:b8:5a:43:1d:c1:03:b1:02:a2:45:12:4b:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:38:0F:D6:37:49:7D:71:C9:AB:60:16:83:2A:30:2E:77:0D:EB
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:37:dc:ba:cc:e6:45:92:a8:5e:82:34:05:cf:6c:ef:eb:80:
24:ab:49:b8:7a:63:23:27:63:ac:22:17:21:ac:94:13:90:84:
49:a7:f2:c8:87:6a:92:0c:e0:ff:4b:6a:d5:40:f0:61:59:dc:
70:9f:c4:fb:38:a3:cf:a5:bf:1e:04:0c:46:31:0f:23:de:36:
45:ae:10:29:21:a8:25:02:e2:35:03:18:12:a0:6c:ba:2a:ef:
32:b6:6e:7c:dd:53:89:22:94:3a:32:24:70:44:31:f7:53:ba:
9c:6c:14:1f:ea:a6:1e:b3:de:2e:64:f4:15:a1:ea:3e:ac:04:
b7:7f:2a:bb:f7:4a:90:9d:7f:76:db:9c:65:ae:3c:6f:87:76:
87:45:8a:8b:13:2e:ad:b1:f4:d5:9d:e9:cf:b6:c8:7e:97:88:
4f:8b:77:9f:fc:ba:e4:cc:87:9d:ff:95:6b:73:c4:b5:30:5a:
bc:55:a0:a2:85:b4:c0:73:4f:5d:ec:cf:73:91:98:74:19:d2:
2b:f7:a6:1e:c5:0f:aa:30:f0:b5:68:de:70:b7:62:bf:e0:2d:
3e:3b:bd:f4:af:6c:8d:fa:c1:6a:9f:44:8e:ee:ba:b0:d8:ed:
70:78:64:32:5c:70:bc:ab:8a:40:75:70:49:73:89:9a:13:f0:
b8:61:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:07 2026 by rpki-client