
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier: PXJ+mEHHjiqPMJxKT6auKxgGEdMPy4R+veKVhNU7D28=
Subject key identifier: A8:C6:F2:74:AA:66:CE:1A:5F:10:1E:E7:84:03:AE:3B:79:A6:2F:33
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number: 018E
Signing time: Wed 15 Jul 2026 05:32:25 +0000
Manifest this update: Wed 15 Jul 2026 05:32:25 +0000
Manifest next update: Wed 22 Jul 2026 05:32:25 +0000
Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: ZnTrCERFr6/QIkyG2y+UwPVyvs24iIi0Ou6L0/CDsOk=)
2: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: Xhmndf5ojRbPlnBHYgYgyJ2fjmYQp+txk1dvG9nv9jQ=)
3: lftbn7yCHANlK0gPOIe05I1gJrY.asa (hash: Kr5K0dbQ4/chaUCtF5xae8OauETToeSzfFlUJvJqheY=)
4: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: pdK2+bFIXT9bXK2PREvdd0iUpjsO8yecUrGAwJUdC0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 05:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: Jul 15 05:32:25 2026 GMT
Not After : Jul 22 05:32:25 2026 GMT
Subject: CN=6a571b69-4793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e0:22:f0:b4:9e:d3:86:28:8d:97:f2:14:c4:
e6:c9:0e:7a:e3:27:48:e8:96:55:1b:d9:23:ca:81:
7b:5b:df:b6:68:d6:a7:27:b1:f9:3b:09:21:78:e2:
29:70:80:67:ad:3e:0c:4a:65:3c:03:66:d0:d6:5d:
64:2c:54:44:b3:0b:ee:06:08:30:75:64:13:fb:a7:
24:58:29:eb:91:fc:81:17:b2:21:45:d1:01:8d:78:
cd:42:35:e5:0c:4a:8f:70:7c:60:a3:cf:4d:af:da:
b8:55:4e:97:78:ea:28:3e:62:4e:bf:49:a7:2b:78:
f4:71:a1:13:a7:f3:19:3b:13:0b:af:b8:35:4c:32:
03:e2:b8:27:fe:ff:70:bd:0a:a6:f1:8c:bb:7c:13:
6d:86:15:cf:bb:9b:66:d2:ec:12:0c:cb:9f:a9:27:
b1:23:22:a0:94:86:b6:30:62:4f:dc:db:41:72:7f:
ad:2c:18:00:ac:ce:05:95:f2:d8:b5:e5:21:c9:9a:
2e:ba:74:89:d6:9a:09:53:32:a2:49:e7:f1:ac:82:
51:a1:86:01:51:a9:f5:b0:0b:91:b5:fa:87:7a:65:
fd:2e:6f:0f:23:a1:a7:1e:df:06:01:d3:75:34:f1:
92:bd:83:a9:da:fe:f4:1f:e6:21:3d:81:be:1b:0d:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:F2:74:AA:66:CE:1A:5F:10:1E:E7:84:03:AE:3B:79:A6:2F:33
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c4:9a:3e:46:7b:66:c2:fb:cb:3f:85:aa:5f:9f:7b:78:29:
f1:b0:5b:2b:64:dd:a0:20:aa:26:cf:11:c7:60:41:89:4d:95:
82:3b:13:30:68:ba:7d:f0:1a:a1:73:b4:cb:3b:f9:48:e8:4d:
ac:57:10:6d:26:9d:3f:7d:10:0d:e5:a6:0c:46:60:11:8c:5c:
a8:34:74:0e:4f:4f:83:c7:15:2c:77:05:a3:f5:dd:80:be:d9:
7c:f0:b8:34:11:d1:db:0d:98:d6:be:bc:59:3f:c0:9e:d6:25:
9b:0e:a0:1a:00:df:48:99:b4:75:6f:00:45:61:6a:09:91:74:
10:64:01:c5:da:7b:13:07:00:7b:26:ad:f2:21:fe:d4:d8:51:
a8:dd:2e:17:3e:60:07:c8:53:c8:e5:19:b5:c7:77:d5:fc:d4:
63:ca:6f:84:4c:41:f4:ba:eb:20:38:cf:c6:ca:24:72:42:21:
34:10:e4:5c:f8:6d:75:ab:8f:34:d1:df:60:6b:07:24:33:fe:
2e:c9:d9:97:23:99:b4:2e:93:d9:1b:c4:20:01:97:57:46:e9:
22:b9:b0:e6:51:fb:c8:6b:08:7e:48:02:e4:ee:b2:7f:84:86:
4a:92:b2:ee:94:d5:5c:79:26:6b:d9:8d:fb:f5:97:3b:c6:db:
3d:df:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 09:02:49 2026 by rpki-client