
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier: 7CYA2WZXDdTsaDkMpFCtbqRzEuWl0rKoXNg9KM/IByY=
Subject key identifier: 84:7F:4B:1F:C5:5B:FB:9C:A3:5A:B0:83:61:9A:12:86:ED:FC:50:50
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number: 62
Signing time: Mon 01 Jun 2026 08:52:32 +0000
Manifest this update: Mon 01 Jun 2026 08:52:32 +0000
Manifest next update: Mon 08 Jun 2026 08:52:32 +0000
Files and hashes: 1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: 0y6McFqTPlH/AodWxAhpINmPkY1D79+1BObY2L1iYM0=)
2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Validity
Not Before: Jun 1 08:52:32 2026 GMT
Not After : Jun 8 08:52:32 2026 GMT
Subject: CN=6a1d4850-c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:b3:da:bb:67:03:f0:7d:4d:0e:7e:f2:db:
9a:4c:46:15:f3:c7:0e:1d:07:27:4c:c4:f0:24:1a:
4e:b7:5c:bb:b5:6c:b7:11:c8:b8:12:d1:ee:a1:81:
a9:7b:77:53:13:33:7a:0a:db:32:b5:6c:c2:97:e7:
a8:9a:60:a4:68:ff:f2:73:24:47:db:ee:ce:03:ea:
57:80:44:1b:9f:df:d0:f1:ff:f5:64:dc:d9:b8:54:
02:d4:69:ec:be:08:3f:7d:69:a9:50:1f:b0:16:27:
09:9e:5a:7d:97:37:1d:61:a4:dd:26:99:c1:29:e5:
1f:55:49:16:c6:1e:2c:7c:4e:24:be:fa:9e:8f:5e:
46:0f:d1:16:0e:59:3e:33:8b:28:39:b4:0d:50:c5:
48:3c:c7:7d:37:b8:47:06:94:b7:b8:ce:30:73:fd:
06:8d:36:ec:f3:f5:fc:74:7a:51:a9:23:3f:db:67:
e4:9f:ca:e8:ef:25:83:b1:95:fe:5e:b9:b8:69:f3:
e5:1e:47:e5:c3:ed:9d:a3:73:e1:fa:a3:32:da:75:
1b:84:41:04:ae:09:cd:15:06:2c:d6:19:c6:e8:1e:
70:21:27:7e:1c:47:39:34:08:66:b9:a5:d4:8b:29:
6d:19:dd:cd:82:8b:ef:83:c2:ea:02:b6:14:2f:6a:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:4B:1F:C5:5B:FB:9C:A3:5A:B0:83:61:9A:12:86:ED:FC:50:50
X509v3 Authority Key Identifier:
keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:b1:b9:ce:18:5d:93:77:33:b3:2b:a6:7d:33:9a:07:74:
6c:a9:4c:8e:f4:2a:36:b9:dd:b4:13:64:d0:51:44:6d:f4:ce:
1f:66:e1:dd:68:3f:b2:84:b4:60:8e:cb:ea:95:54:5f:9c:c7:
0b:1d:7f:1f:2a:4c:ea:12:d3:6d:95:02:b4:98:35:6e:ac:2d:
cd:58:06:67:d1:dd:91:01:f6:04:99:5b:3b:8a:c1:97:23:cc:
58:e2:2d:4a:51:77:ed:d2:34:f9:3a:b2:60:6c:d2:89:b5:16:
18:0d:39:f2:3c:a1:47:cb:f4:08:65:77:2a:33:e0:7c:f4:44:
05:55:65:e1:c1:2d:6a:1f:6a:c7:b2:f7:24:38:a1:8a:ff:31:
f5:6a:80:78:14:ef:27:35:e0:8a:72:0c:5b:9a:ad:fd:8a:d1:
a0:c9:9d:64:42:60:8f:fa:6c:ba:34:9e:47:71:ac:11:12:d9:
6a:e6:05:65:88:bb:88:93:dc:ca:f6:e7:47:b0:89:d6:23:a9:
2a:19:bf:7f:84:66:91:a0:4b:08:55:d7:79:22:2a:d6:f6:d1:
be:85:63:3c:95:6f:55:29:e0:97:fb:f5:ba:df:f2:ff:c9:6a:
6c:0f:e4:28:a0:b6:93:1a:8c:92:d1:c1:61:21:86:43:a8:17:
a8:29:21:23
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MUQ4QzExMC8GA1UEBRMoRUUzMjMxRDVBQTU2NUY0MDUyNDE5NzkyQUI4MkM0Mjc4
ODRCQzJFQzAeFw0yNjA2MDEwODUyMzJaFw0yNjA2MDgwODUyMzJaMBgxFjAUBgNV
BAMTDTZhMWQ0ODUwLWM4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+tLPau2cD8H1NDn7y25pMRhXzxw4dBydMxPAkGk63XLu1bLcRyLgS0e6hgal7
d1MTM3oK2zK1bMKX56iaYKRo//JzJEfb7s4D6leARBuf39Dx//Vk3Nm4VALUaey+
CD99aalQH7AWJwmeWn2XNx1hpN0mmcEp5R9VSRbGHix8TiS++p6PXkYP0RYOWT4z
iyg5tA1QxUg8x303uEcGlLe4zjBz/QaNNuzz9fx0elGpIz/bZ+SfyujvJYOxlf5e
ubhp8+UeR+XD7Z2jc+H6ozLadRuEQQSuCc0VBizWGcboHnAhJ34cRzk0CGa5pdSL
KW0Z3c2Ci++DwuoCthQvapIbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhH9LH8Vb
+5yjWrCDYZoShu38UFAwHwYDVR0jBBgwFoAU7jIx1apWX0BSQZeSq4LEJ4hLwuww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDhDLzk3NTREQTM4RDAx
NjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBCU1FaZVNxNExFSjRoTHd1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN2pJeDFhcFdYMEJTUVplU3E0TEVKNGhMd3V3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
RDhDLzk3NTREQTM4RDAxNjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBC
U1FaZVNxNExFSjRoTHd1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCFWbG5zhhdk3czsyumfTOaB3RsqUyO9Co2ud20E2TQUURt9M4fZuHdaD+yhLRg
jsvqlVRfnMcLHX8fKkzqEtNtlQK0mDVurC3NWAZn0d2RAfYEmVs7isGXI8xY4i1K
UXft0jT5OrJgbNKJtRYYDTnyPKFHy/QIZXcqM+B89EQFVWXhwS1qH2rHsvckOKGK
/zH1aoB4FO8nNeCKcgxbmq39itGgyZ1kQmCP+my6NJ5HcawREtlq5gVliLuIk9zK
9udHsInWI6kqGb9/hGaRoEsIVdd5IirW9tG+hWM8lW9VKeCX+/W63/L/yWpsD+Qo
oLaTGoyS0cFhIYZDqBeoKSEj
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client