
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
File: N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json)
Hash identifier: n+VXqfWobuBRLD09TTGchUIH5iKQUBPzuDdJlTyebYs=
Subject key identifier: 0A:A9:C6:83:74:C1:F2:65:A0:90:D6:FF:D5:C9:AD:51:4C:64:37:55
Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
Manifest number: 38
Signing time: Mon 01 Jun 2026 09:26:45 +0000
Manifest this update: Mon 01 Jun 2026 09:26:44 +0000
Manifest next update: Mon 08 Jun 2026 09:26:44 +0000
Files and hashes: 1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: Uc3l21wAtMHuPxKbwoqDlAyiQuuosG+nigbPWV5PJd8=)
2: CD7290AA136F11F1982A4804323D8C67.roa (hash: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Validity
Not Before: Jun 1 09:26:44 2026 GMT
Not After : Jun 8 09:26:44 2026 GMT
Subject: CN=6a1d5055-a0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:4e:ac:a9:c7:aa:4c:8f:cb:b2:5d:e7:1b:
2c:2c:78:20:1d:01:58:a6:2d:61:67:8f:e1:9f:50:
88:b8:c5:b4:ce:4b:7f:47:4e:e1:97:25:a4:a5:59:
22:f7:f0:10:8a:e5:f2:b5:ec:4d:cc:84:26:96:9f:
a1:19:b3:44:3d:81:ad:52:4f:4b:be:03:da:bb:ad:
24:22:62:b7:f5:ac:5e:40:dc:49:03:e8:99:c7:ff:
c0:64:72:54:ca:db:91:f6:47:22:2d:e4:35:6c:4f:
10:c3:be:31:3e:fb:79:5d:c7:bb:e3:e2:76:4a:24:
e2:58:47:97:ed:ef:12:78:e0:83:16:e6:fa:00:c2:
f8:20:3f:fb:3d:5a:63:2c:62:15:e3:f8:6f:0f:dc:
32:bc:7f:ad:b4:d1:af:f7:c6:5b:df:21:77:6a:56:
8e:95:c0:bc:73:3f:ad:ef:7d:1b:ba:05:58:66:f7:
9f:08:c6:09:19:df:6f:be:f6:48:73:43:46:5b:b5:
84:15:89:27:64:14:67:82:9d:de:15:6a:00:fd:e7:
2f:da:31:fe:09:db:80:6f:54:a3:45:5c:12:94:0f:
04:8f:46:f9:66:58:6a:4a:dc:a3:b3:55:19:03:49:
fa:37:b2:56:6c:7f:35:f3:5f:9b:a7:61:8e:60:59:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:C6:83:74:C1:F2:65:A0:90:D6:FF:D5:C9:AD:51:4C:64:37:55
X509v3 Authority Key Identifier:
keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:58:77:b8:fe:50:19:5f:e8:17:5d:10:4a:96:a3:1e:1d:
fa:1f:7c:7d:7f:b6:8e:16:62:c1:e7:80:b2:b5:1f:74:1a:5f:
7b:92:57:6c:38:00:ee:06:a9:98:9e:8b:af:ae:7c:9a:20:7c:
45:fc:1c:0c:c8:32:c1:dd:31:94:35:b8:0f:4a:1a:0f:74:3c:
4c:1b:93:3a:ae:d5:b6:68:7b:1d:de:d2:b2:80:db:23:88:f7:
9c:e3:24:47:23:61:85:c7:10:2a:a2:db:72:98:9d:03:5f:18:
02:b1:f5:0b:3a:8b:90:8b:08:67:a9:19:a8:11:b0:dd:40:9d:
ff:17:f9:23:bb:b3:63:b5:7d:d3:dd:ee:a9:92:9b:95:67:9b:
b3:7c:7d:bd:41:71:09:4a:d5:d8:da:e4:e0:9c:2b:6b:ad:46:
3d:57:98:b7:5f:8a:ba:17:33:97:ca:80:ce:3d:a9:99:a4:b4:
13:2e:8c:91:2e:be:a9:39:54:9a:68:5e:59:ba:a0:93:64:d5:
38:66:6b:94:b2:fa:03:69:11:3d:fc:6f:d9:7a:bf:57:c5:04:
f8:4f:f7:89:a7:3d:8a:8b:9f:4c:07:c5:25:e8:34:08:fb:dc:
32:a4:63:94:87:bd:fa:da:8e:12:c8:91:07:ce:05:ab:d5:cb:
6d:a4:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:17 2026 by rpki-client