
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
File: 7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json)
Hash identifier: Bzfd7x0tRta7CtS5Ge1XfvVfopg+ko+DfMosmeWMXAc=
Subject key identifier: 33:D8:20:2C:F7:D9:8F:9E:A8:4B:39:72:5D:8B:5A:F9:28:64:4E:67
Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Certificate issuer: /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
Manifest number: 68
Signing time: Thu 21 May 2026 08:05:12 +0000
Manifest this update: Thu 21 May 2026 08:05:11 +0000
Manifest next update: Thu 28 May 2026 08:05:11 +0000
Files and hashes: 1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: bbL3eVABLR1/3YGD8AdlUi7XgQ77iIqoSX7M5JxpzNQ=)
2: E2D6A7984F5F11F190C0BD46C4833773.roa (hash: DhEdJPW687P63CLaNT2Mz9aPqiwDP3BG1Z3glFSiYO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Validity
Not Before: May 21 08:05:11 2026 GMT
Not After : May 28 08:05:11 2026 GMT
Subject: CN=6a0ebcb8-f12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:d1:9b:51:d4:61:17:ec:00:63:ba:9e:79:
86:45:0f:3d:18:15:90:7e:ae:c7:14:67:e1:2a:90:
91:96:cf:04:03:a7:b1:e6:13:c5:e4:f2:04:e4:bc:
08:21:3a:fc:51:b2:61:6a:13:cc:87:82:ec:5d:64:
44:ce:6a:35:24:03:01:50:b9:1e:e0:41:1b:7e:cf:
2e:7f:ed:01:18:57:b6:80:e7:49:a7:a4:ff:4d:51:
36:b1:14:bc:1b:3d:47:d4:ee:5b:f9:83:18:d8:87:
9a:07:35:85:df:c3:3f:4e:f5:d9:3a:72:7f:67:2e:
b8:30:87:c3:c9:40:26:df:e0:38:aa:19:5d:13:a1:
a5:99:74:5a:52:b6:10:a0:21:f6:41:ba:72:67:45:
85:c3:e1:8e:c8:c6:ff:45:5d:03:d7:b7:33:29:c7:
98:74:3e:71:96:90:81:4e:fe:5f:81:b8:23:f5:47:
b7:23:44:80:9a:3e:12:2e:92:53:99:31:85:ab:f9:
eb:ca:5e:05:53:1d:cd:58:a1:57:84:0c:79:ae:de:
4b:80:87:62:a5:d4:74:c0:ea:d4:7c:98:06:74:30:
a2:7c:7f:9f:d4:3d:0e:7d:60:5f:13:1a:12:38:13:
99:6c:42:06:99:fa:a7:b7:3d:4b:c6:a2:c5:ff:9a:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:20:2C:F7:D9:8F:9E:A8:4B:39:72:5D:8B:5A:F9:28:64:4E:67
X509v3 Authority Key Identifier:
keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:d7:f4:22:b1:0b:bf:02:12:1a:21:f3:67:36:b9:2c:1b:
6e:1c:12:57:be:aa:81:5f:d3:24:94:ef:38:fb:71:7f:cc:34:
f1:98:bc:c2:7c:30:04:16:0e:ba:1f:30:cc:ca:98:7e:f6:27:
b9:9a:a2:e1:06:3f:d1:ec:08:3a:9d:0d:8d:66:6a:ac:32:29:
d5:80:a3:38:ed:98:49:fa:40:13:9c:88:22:4e:69:4f:d8:7b:
4c:e2:c1:43:6c:88:34:32:bc:c8:5d:51:ae:50:14:dd:dd:2d:
4f:46:09:08:87:8c:1c:55:33:7b:e1:69:5c:6e:3d:17:b5:cd:
c9:4a:ec:75:90:79:82:30:6a:0f:af:54:62:36:69:cb:5d:d0:
fc:e5:2b:0a:35:3c:3e:41:a2:bd:12:89:b4:59:05:6d:f7:ca:
7c:9c:01:53:fd:34:1f:f6:2f:15:17:f4:da:45:3c:d5:9d:57:
81:82:9d:3f:0c:98:93:49:07:b1:4f:9a:47:e2:26:fc:07:83:
b3:87:68:3b:1c:6d:20:86:a1:cb:c8:cc:32:f2:f1:a8:dc:b0:
77:60:de:e7:7d:5e:9d:c6:45:f9:37:b4:a0:81:b0:c9:60:fd:
f2:89:eb:49:b6:4f:93:b6:24:24:92:9b:ea:d3:1d:69:73:8b:
82:04:cc:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTM4QTExMC8GA1UEBRMoRUQ0NkUwREE2N0Q0OUJGMEJDQTdCMkZEMjBFQzQ4QkJD
RTg0N0E5MTAeFw0yNjA1MjEwODA1MTFaFw0yNjA1MjgwODA1MTFaMBgxFjAUBgNV
BAMTDTZhMGViY2I4LWYxMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCp49GbUdRhF+wAY7qeeYZFDz0YFZB+rscUZ+EqkJGWzwQDp7HmE8Xk8gTkvAgh
OvxRsmFqE8yHguxdZETOajUkAwFQuR7gQRt+zy5/7QEYV7aA50mnpP9NUTaxFLwb
PUfU7lv5gxjYh5oHNYXfwz9O9dk6cn9nLrgwh8PJQCbf4DiqGV0ToaWZdFpSthCg
IfZBunJnRYXD4Y7Ixv9FXQPXtzMpx5h0PnGWkIFO/l+BuCP1R7cjRICaPhIuklOZ
MYWr+evKXgVTHc1YoVeEDHmu3kuAh2Kl1HTA6tR8mAZ0MKJ8f5/UPQ59YF8TGhI4
E5lsQgaZ+qe3PUvGosX/mspNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM9ggLPfZ
j56oSzlyXYta+ShkTmcwHwYDVR0jBBgwFoAU7Ubg2mfUm/C8p7L9IOxIu86EepEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMzhBLzlCQ0VFQzNDQkZD
OTExRjA5N0VFNTYxOUM0RjlBRTAyLzdVYmcybWZVbV9DOHA3TDlJT3hJdTg2RWVw
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN1ViZzJtZlVtX0M4cDdMOUlPeEl1ODZFZXBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
MzhBLzlCQ0VFQzNDQkZDOTExRjA5N0VFNTYxOUM0RjlBRTAyLzdVYmcybWZVbV9D
OHA3TDlJT3hJdTg2RWVwRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA60df0IrELvwISGiHzZza5LBtuHBJXvqqBX9MklO84+3F/zDTxmLzCfDAEFg66
HzDMyph+9ie5mqLhBj/R7Ag6nQ2NZmqsMinVgKM47ZhJ+kATnIgiTmlP2HtM4sFD
bIg0MrzIXVGuUBTd3S1PRgkIh4wcVTN74Wlcbj0Xtc3JSux1kHmCMGoPr1RiNmnL
XdD85SsKNTw+QaK9Eom0WQVt98p8nAFT/TQf9i8VF/TaRTzVnVeBgp0/DJiTSQex
T5pH4ib8B4Ozh2g7HG0ghqHLyMwy8vGo3LB3YN7nfV6dxkX5N7SggbDJYP3yietJ
tk+TtiQkkpvq0x1pc4uCBMxp
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:33 2026 by rpki-client