
$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier: 3f1qqdIW0pMf8jGGuTQuop/R4T0lScge5GZymvZ6gPA=
Subject key identifier: FF:D5:1E:BA:AB:8F:87:12:6B:02:BA:87:BF:D5:11:D4:EF:42:F6:E4
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number: 0535
Signing time: Mon 22 Jun 2026 23:37:40 +0000
Manifest this update: Mon 22 Jun 2026 23:37:40 +0000
Manifest next update: Mon 29 Jun 2026 23:37:40 +0000
Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: 531CMQeDffxB5hwfeQSb6ipdeTVJC7vG8YWD4a7kjeI=)
2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: PZZSaZ/jY/+Q5rYNb4tAqwzAZjO5/D1Dz+zXHEh3vC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Validity
Not Before: Jun 22 23:37:40 2026 GMT
Not After : Jun 29 23:37:40 2026 GMT
Subject: CN=6a39c744-4dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:2c:e7:a2:44:44:9e:b4:ea:61:0c:d9:da:
c6:8b:ef:c8:18:e0:cc:ce:d2:be:fb:4e:b9:ab:e2:
64:be:d7:d2:64:44:ee:4a:07:e1:c0:b4:e7:bf:99:
83:78:ee:3e:cb:f2:51:21:e0:92:cc:df:ed:60:55:
99:bd:84:5c:83:2f:67:31:7b:55:1f:1e:09:75:64:
97:16:54:7a:ea:01:71:6e:ee:cf:c6:46:2a:7f:42:
92:c1:be:d7:22:fe:6d:00:9b:93:1e:c7:1d:77:6f:
17:e9:8d:f1:d7:ee:93:ca:98:01:ed:b0:a5:6e:dc:
6f:8c:4d:83:81:6a:e6:34:2e:92:9f:7c:2f:ee:19:
49:8a:f7:0c:a0:91:9d:7f:06:0b:d4:77:c1:7e:6d:
dd:a8:3c:14:d9:e4:64:70:94:7c:ff:fe:20:fc:a3:
37:43:86:44:8e:ad:5b:46:a2:2b:fe:ab:ba:7a:70:
91:e8:6b:79:7d:7d:27:33:43:a0:59:e3:17:d2:73:
e7:3c:3a:63:2c:5e:32:7f:f9:c5:14:36:17:81:80:
aa:81:15:0c:57:8e:91:52:68:dd:69:57:7a:2d:28:
ba:e8:66:b9:3e:37:9b:7e:ed:e6:c3:06:bb:3e:df:
07:3b:d5:ab:7e:b9:8f:1f:16:46:e1:ff:74:7c:23:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:1E:BA:AB:8F:87:12:6B:02:BA:87:BF:D5:11:D4:EF:42:F6:E4
X509v3 Authority Key Identifier:
keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f6:60:93:df:72:c9:7d:90:da:e3:25:30:c9:78:1d:3c:31:
34:34:63:04:52:20:2e:c4:0a:be:9b:dc:9f:37:0d:93:02:8d:
45:16:39:45:e1:71:fd:16:03:ea:67:aa:0c:fc:c0:c2:3b:92:
53:fd:5d:76:2e:1a:13:37:96:20:b2:52:1b:0f:6d:87:ee:56:
e0:17:be:0a:c2:8e:9a:47:5a:03:45:0d:e4:a2:54:ee:70:7a:
0f:2b:74:07:42:1e:55:3b:89:e5:68:d9:e4:6c:25:eb:93:6f:
bc:43:53:28:db:01:b3:f9:8e:a8:26:8f:ae:d7:64:d0:08:e7:
a0:f5:38:c3:bd:fe:cc:ab:ff:fb:12:cf:ba:33:af:44:1d:27:
4a:f1:61:75:aa:a6:32:dd:59:a0:fe:08:f2:29:24:55:1b:11:
93:07:a4:c1:b9:e8:f5:27:2c:b5:f2:48:a1:2c:5b:6e:87:84:
41:e4:05:5c:3d:4d:01:71:15:e6:b5:80:e4:2a:6f:33:f3:35:
f6:e0:36:d1:e7:29:e7:c4:05:4c:4e:d2:1a:db:eb:a5:1e:80:
6b:1a:d6:e5:89:18:7c:e5:19:7c:24:90:f4:a4:e3:11:fe:0b:
4d:08:f0:6f:ca:17:fd:b8:6f:63:51:ab:fa:f5:76:dc:16:05:
fd:66:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:06 2026 by rpki-client