
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier: gsadSmZTGFC0o9RE2wQKm2Q4Hty828BEp85y1QdcgbQ=
Subject key identifier: 3B:3F:EE:00:9A:67:F8:4A:25:1A:22:B3:47:B8:F6:DE:28:00:21:28
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number: 0104
Signing time: Thu 21 May 2026 06:12:21 +0000
Manifest this update: Thu 21 May 2026 06:12:20 +0000
Manifest next update: Thu 28 May 2026 06:12:20 +0000
Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: 6a3Zou0Ad0Tkh9ACS6CX0cUQmGo/q7gDHt3Xqk1JKb8=)
2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Validity
Not Before: May 21 06:12:20 2026 GMT
Not After : May 28 06:12:20 2026 GMT
Subject: CN=6a0ea245-1016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:6b:df:b3:37:4d:84:52:c5:45:fd:eb:06:
7a:6d:17:c8:32:88:9a:0e:48:c5:6a:b3:ad:f7:47:
fd:c2:1a:76:e5:f1:a1:2f:25:48:58:98:c8:17:2a:
e8:21:fa:76:b5:b0:6b:7e:4b:c0:e2:7a:46:88:a2:
04:af:de:bc:2c:d6:09:50:e6:c3:8d:d3:82:43:f7:
6d:17:76:79:b2:d3:e2:ac:c5:09:b3:8f:1e:6e:7b:
bc:2b:15:28:71:74:51:6d:cf:ff:fa:65:7b:75:51:
85:1c:95:ab:3e:c3:d1:94:47:1f:d7:53:9f:00:da:
47:d5:b3:87:ea:92:7b:ae:e4:db:45:00:b2:15:62:
23:3d:ec:c6:b7:ac:b9:73:e7:df:99:e2:3d:da:c4:
33:5d:f7:85:ca:d3:cb:ec:49:3d:47:04:64:b1:2b:
75:73:9b:4e:b8:c1:f2:bc:e4:48:eb:22:81:3b:20:
80:b9:a2:7e:b6:86:73:b5:4d:9c:8b:d8:e2:e4:d2:
78:08:79:4c:39:f1:be:ac:16:19:bd:8c:49:5c:d4:
25:74:51:89:53:43:13:70:cf:8a:e9:a5:df:70:ce:
4e:17:19:38:17:fd:81:ab:79:4c:e4:48:1e:36:a7:
41:75:e8:95:64:3c:6c:ed:d5:24:6f:a1:04:19:fb:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:EE:00:9A:67:F8:4A:25:1A:22:B3:47:B8:F6:DE:28:00:21:28
X509v3 Authority Key Identifier:
keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:12:7c:43:0d:5d:2f:c7:82:71:52:43:31:d5:35:ab:b2:41:
41:83:03:11:9f:02:d8:34:e1:f1:f5:05:8d:78:3c:7f:4b:fa:
ac:f3:ca:c9:33:ef:30:27:be:3e:06:de:c9:be:f9:5c:d7:b0:
05:c2:25:98:a1:dc:ff:db:2a:7a:c3:f1:c4:88:e3:e0:f9:e6:
4c:75:c3:b8:7d:08:1d:3c:71:67:48:ed:75:ea:7b:6d:94:1d:
ce:15:18:4b:c8:80:e5:18:44:fb:71:71:c0:ea:af:31:14:8b:
2c:89:04:38:07:a3:e9:84:8a:a8:e7:d5:48:95:aa:d3:62:ce:
da:ca:a9:a2:48:e8:bd:ce:59:a0:b5:c2:a6:c6:b3:3c:b1:11:
5b:e7:ec:43:22:bf:9a:21:48:0c:be:bf:2f:78:fe:3a:9a:36:
89:96:05:41:8f:ab:b6:5e:4c:87:d3:26:ba:58:f5:4c:be:3b:
88:4c:f9:5c:b9:ea:a5:f7:24:aa:df:df:bd:98:c2:f2:c1:2e:
44:d4:f1:0a:24:76:cc:c4:16:05:50:eb:b0:c8:01:1f:9e:56:
55:cf:5d:d4:2f:0c:ae:08:a5:aa:8a:cb:8f:8a:eb:86:e8:8a:
b8:36:a9:82:3b:7f:1c:60:82:6b:6f:fe:51:54:cb:03:ba:ce:
db:3f:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:07 2026 by rpki-client