
$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
File: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft (raw, json)
Hash identifier: rE4Ue1BNJ8YZNMgtg7eOCWN1O7qQNjpVdlyo+mzPHOs=
Subject key identifier: 2F:A2:43:95:BB:3F:7E:0D:6E:18:A1:60:10:FC:6F:68:D5:43:5C:FF
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Certificate issuer: /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
Manifest number: 37
Signing time: Fri 17 Jul 2026 10:06:36 +0000
Manifest this update: Fri 17 Jul 2026 10:06:35 +0000
Manifest next update: Fri 24 Jul 2026 10:06:35 +0000
Files and hashes: 1: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl (hash: BN/Ks+7brbAkxm0I+LidXhXf4/bQD2XDxR+z5rXD5RM=)
2: 83E78C14713511F1AE5C985D73A30FBC.roa (hash: l/vRgwoEsx8MvAV5uaw1m2BHaiwrdgs1W/jJQWqVTjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Validity
Not Before: Jul 17 10:06:35 2026 GMT
Not After : Jul 24 10:06:35 2026 GMT
Subject: CN=6a59feab-a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:85:d0:41:98:7e:09:c0:74:ec:db:36:2d:
65:cd:c1:29:51:82:a6:99:c2:7e:89:de:44:e6:74:
c9:93:49:c3:ef:90:78:90:8f:11:9c:d8:fb:69:58:
77:80:8c:6a:a8:7b:3e:d3:fb:cc:9d:6a:01:59:5b:
2f:3b:28:fa:b2:ed:dc:d8:c5:9d:b2:bd:e7:eb:84:
6f:16:a8:ab:70:fc:20:ac:f5:e3:2e:55:6c:0e:22:
ea:aa:17:e9:ab:3b:ba:32:c5:4c:26:14:c7:62:93:
9a:d6:21:78:e3:5f:c1:c2:94:d1:79:54:b1:17:8d:
cb:88:3b:f6:ea:27:55:08:db:e9:01:f6:92:4c:10:
1d:11:e3:3b:e3:f9:18:8c:ba:d0:e1:c8:51:f3:3c:
1b:75:01:76:19:e4:be:71:79:9d:49:68:4f:f2:85:
07:cd:a6:b2:d4:3b:88:43:99:bc:51:7c:14:17:48:
19:96:08:09:00:c0:d6:30:d8:ef:30:dc:1c:74:26:
dc:a6:6c:36:0f:1f:a9:c4:c0:35:4c:19:b0:a9:67:
c2:99:b7:72:56:6d:01:09:01:55:a6:39:8e:69:a5:
c3:67:7f:29:94:2e:b1:18:31:e9:09:16:56:71:7d:
68:54:90:9b:c4:83:20:be:ca:10:e0:0a:95:47:6f:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:43:95:BB:3F:7E:0D:6E:18:A1:60:10:FC:6F:68:D5:43:5C:FF
X509v3 Authority Key Identifier:
keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:b0:26:bd:05:35:43:44:eb:89:ba:7f:7b:af:c0:e2:65:
17:74:79:d2:c3:03:16:af:9e:7f:3e:f2:11:c7:c0:d2:ce:07:
a3:b0:5e:05:c9:a6:2c:7c:ef:27:de:60:fa:3f:84:55:41:7d:
f8:61:0c:f3:95:1c:31:61:6f:93:ba:b3:2a:92:c9:72:d9:fa:
64:ed:8e:67:98:0b:fa:3e:41:9d:6e:c8:30:dc:13:f4:7b:d3:
0f:90:a3:8a:e7:30:d4:c6:64:57:30:24:90:02:a4:0b:7b:30:
13:ef:ea:45:2e:54:e8:c0:8b:9e:9c:42:e3:50:ba:21:77:10:
bd:82:c3:f7:07:fa:af:fa:db:a4:20:97:ea:3d:fe:32:92:a8:
47:c1:d4:e8:ac:6f:d4:20:b9:5d:43:c8:92:52:d8:dd:0e:55:
10:25:79:82:54:3c:fe:31:a2:ed:11:81:e0:87:92:d5:30:55:
b4:f3:6b:fb:a7:68:9a:46:69:01:a0:48:85:31:c4:ea:06:67:
8f:66:ce:da:a0:3e:7d:50:8d:85:97:b2:06:2c:c5:9b:34:17:
98:f7:8e:f6:10:03:77:8c:2f:fd:79:69:1c:5c:f8:da:c5:d2:
56:35:61:22:43:8e:3d:91:59:e1:5c:3e:b6:b8:ee:ca:e9:9a:
ff:d1:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:04 2026 by rpki-client