
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json)
Hash identifier: Xn+ZMQNJVKIWxTSkxjD4IzlW0PZ+Isb1hM1RfvVwtr4=
Subject key identifier: 29:92:BF:DD:38:C9:15:CF:F9:6B:CD:7E:1F:30:5C:29:58:AE:3D:1E
Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
Manifest number: 97
Signing time: Tue 23 Jun 2026 07:39:16 +0000
Manifest this update: Tue 23 Jun 2026 07:39:16 +0000
Manifest next update: Tue 30 Jun 2026 07:39:16 +0000
Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: 21XXpYDKXCLEMoGllZ46B+eeWmIH7H0iDrNpCPY/4rE=)
2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=)
3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Validity
Not Before: Jun 23 07:39:16 2026 GMT
Not After : Jun 30 07:39:16 2026 GMT
Subject: CN=6a3a3824-66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:3e:77:16:e9:f8:57:03:0b:a2:bb:07:f1:
78:07:7e:33:e3:ca:21:5f:ee:bc:13:89:31:90:96:
b4:a1:f5:64:a7:61:92:3f:ed:f3:19:2d:e1:26:9a:
d9:c2:72:a0:bd:a6:db:9a:94:ae:cb:fa:90:b7:dd:
f0:2d:dd:67:d5:0b:9f:58:f0:3b:3b:b0:d5:ff:3b:
c8:e2:27:3a:9e:09:72:50:d4:a2:43:1f:bd:ce:fa:
8a:7b:f9:25:dc:66:5e:70:54:ba:38:2e:09:35:e8:
9f:36:1f:a6:be:4e:c2:4e:81:55:f3:f5:b7:c9:4a:
e9:09:f3:96:63:4c:58:95:72:af:88:de:4d:0f:41:
f0:1a:9a:f1:ba:c4:ef:cc:29:21:63:a2:14:c7:aa:
15:5f:bd:e3:31:bd:e4:42:2e:75:26:d3:57:44:66:
97:27:f6:eb:1e:fd:46:c5:92:94:db:73:c7:73:ce:
73:ce:12:a8:0e:0f:36:90:1d:c5:3e:ed:aa:f6:7b:
d6:67:94:52:bc:88:1c:e0:75:f2:37:2b:ce:9e:bc:
bb:2f:cc:19:2c:a9:7e:7c:d7:76:b9:62:d0:20:99:
26:22:b2:8b:e5:94:71:44:2d:c0:10:3f:11:16:3c:
96:65:0d:15:e5:f3:1a:5a:a1:81:f5:3d:a9:c5:06:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:BF:DD:38:C9:15:CF:F9:6B:CD:7E:1F:30:5C:29:58:AE:3D:1E
X509v3 Authority Key Identifier:
keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:1a:cb:fc:53:71:7d:22:7c:5f:31:ea:6e:46:29:a7:7c:
0e:3a:2f:13:83:01:b6:19:0c:8e:c1:5a:44:33:d0:89:58:89:
56:89:8c:34:2c:18:1b:bb:11:99:06:9c:25:3b:93:f5:65:67:
64:1d:82:7d:a4:68:0f:67:0f:ba:9e:f5:a7:f1:d6:68:c5:5d:
05:fc:45:53:69:e7:d1:92:b3:14:cc:fe:1f:f6:1f:6f:8d:0d:
c0:54:6f:fc:22:47:ed:40:3b:e0:95:aa:00:14:68:8e:c7:65:
c1:e0:be:2f:8c:1c:ee:77:52:37:c1:f5:61:dc:61:ab:3c:c2:
da:1b:3b:61:49:22:b0:0b:ba:12:20:c7:fa:b8:ae:9e:e5:c4:
09:c0:55:e4:d1:60:a3:54:41:ec:b5:ca:18:64:45:f3:d0:2b:
92:f8:79:14:4b:c7:54:5b:f2:d6:c9:94:58:06:c5:1f:71:5a:
de:43:c7:e5:f7:60:ce:de:97:63:8d:c0:db:74:3b:71:c3:b3:
b7:ea:b7:67:d8:cb:95:b7:bc:87:f7:c1:74:21:7f:77:42:05:
ea:6c:95:bd:12:42:76:b7:4d:d6:0f:cc:f2:97:2b:80:04:11:
eb:33:1d:2f:e2:49:5b:23:a2:67:ac:5f:30:a2:6f:ce:33:29:
db:af:2a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB
ODFBNTdBNDAwHhcNMjYwNjIzMDczOTE2WhcNMjYwNjMwMDczOTE2WjAYMRYwFAYD
VQQDEw02YTNhMzgyNC02NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRA+dxbp+FcDC6K7B/F4B34z48ohX+68E4kxkJa0ofVkp2GSP+3zGS3hJprZ
wnKgvabbmpSuy/qQt93wLd1n1QufWPA7O7DV/zvI4ic6nglyUNSiQx+9zvqKe/kl
3GZecFS6OC4JNeifNh+mvk7CToFV8/W3yUrpCfOWY0xYlXKviN5ND0HwGprxusTv
zCkhY6IUx6oVX73jMb3kQi51JtNXRGaXJ/brHv1GxZKU23PHc85zzhKoDg82kB3F
Pu2q9nvWZ5RSvIgc4HXyNyvOnry7L8wZLKl+fNd2uWLQIJkmIrKL5ZRxRC3AED8R
FjyWZQ0V5fMaWqGB9T2pxQYd2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmSv904
yRXP+WvNfh8wXClYrj0eMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF
MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf
Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIQgay/xTcX0ifF8x6m5GKad8DjovE4MBthkMjsFaRDPQiViJVomMNCwYG7sR
mQacJTuT9WVnZB2CfaRoD2cPup71p/HWaMVdBfxFU2nn0ZKzFMz+H/Yfb40NwFRv
/CJH7UA74JWqABRojsdlweC+L4wc7ndSN8H1YdxhqzzC2hs7YUkisAu6EiDH+riu
nuXECcBV5NFgo1RB7LXKGGRF89Arkvh5FEvHVFvy1smUWAbFH3Fa3kPH5fdgzt6X
Y43A23Q7ccOzt+q3Z9jLlbe8h/fBdCF/d0IF6myVvRJCdrdN1g/M8pcrgAQR6zMd
L+JJWyOiZ6xfMKJvzjMp268q2A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:00 2026 by rpki-client