
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
File: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft (raw, json)
Hash identifier: GbjZdroJD+/oQ3bmhuFhSc6hZPrBwr22d726bwbVFmk=
Subject key identifier: 07:99:B3:12:8F:49:E8:90:64:87:0F:8F:64:FC:4F:7F:C8:39:23:AB
Authority key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Certificate issuer: /CN=A91A45C3/serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
Manifest number: 34
Signing time: Tue 14 Jul 2026 23:20:46 +0000
Manifest this update: Tue 14 Jul 2026 23:20:45 +0000
Manifest next update: Tue 21 Jul 2026 23:20:45 +0000
Files and hashes: 1: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl (hash: uqfYBHDCXe1QKY/0WYxfZpVbG6D9AB6GaLbo/agKaPg=)
2: 2FC19BF83D4F11F19A601DD5A5833773.roa (hash: 56GdB+plmjNwHg70SCuUFxrfa+TUalszBHQ17pYd9is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 23:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Validity
Not Before: Jul 14 23:20:45 2026 GMT
Not After : Jul 21 23:20:45 2026 GMT
Subject: CN=6a56c44e-1759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:ba:b0:30:95:56:09:d7:ea:ef:52:71:03:
95:3b:da:d1:f2:9a:71:a2:41:b7:f9:28:22:ee:e8:
6f:d6:76:7c:6d:35:15:59:81:0a:53:35:d5:fd:8f:
49:ee:7b:fb:2c:1e:97:43:96:e5:5f:13:3f:0c:37:
80:d0:41:51:80:2d:2f:e9:37:9e:64:29:aa:b9:ec:
3f:9f:8f:b9:f0:62:66:ea:80:c2:14:7d:66:4d:74:
af:b3:6b:6d:0c:19:57:a2:ad:34:03:93:ad:d1:2f:
ef:10:df:b5:f8:c0:0d:71:1f:20:fe:2b:6f:0c:38:
e1:f0:0e:cc:77:4e:7c:ba:d6:40:49:f6:68:73:84:
6a:ca:a0:74:6e:75:07:4a:de:db:44:75:93:43:9b:
a1:d0:c3:27:28:03:5a:49:5b:d9:07:42:91:02:20:
75:7d:eb:44:04:8a:29:bb:1d:f2:f5:3b:64:c4:6a:
25:d6:99:41:79:eb:c3:03:72:ff:29:81:4d:5a:2e:
2f:a3:a4:b7:89:6b:1c:50:b7:3d:2a:1d:86:9d:1d:
4d:b1:8b:85:02:86:73:67:51:68:26:0f:58:5e:a1:
69:27:3a:d4:16:d9:2b:42:ee:00:5f:d0:52:93:60:
36:28:74:35:86:19:0b:5d:44:ce:0f:bb:09:71:b0:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:B3:12:8F:49:E8:90:64:87:0F:8F:64:FC:4F:7F:C8:39:23:AB
X509v3 Authority Key Identifier:
keyid:EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d5:4c:89:91:11:75:2b:7c:cc:6e:d9:2a:c8:27:d2:0c:32:
9b:be:e9:68:85:31:60:70:2f:47:bc:8b:57:33:41:9b:72:0c:
ad:53:b5:55:90:de:6e:75:40:34:5e:c8:d7:0a:60:d9:6c:1f:
b9:13:87:44:52:5a:e6:04:2b:a3:65:ca:62:91:bd:c4:ed:ac:
20:3e:6d:9b:3a:a0:7c:a9:40:a2:95:4f:6a:c4:74:1a:2d:7a:
bd:c9:24:4e:20:10:0c:07:da:3c:fd:5e:4b:98:58:10:11:42:
28:3a:23:a4:01:42:79:fe:9d:5c:cc:81:43:ad:64:5d:9f:83:
9c:d5:09:76:1f:d9:46:b3:6d:cd:9d:9a:77:60:d2:bf:e5:13:
b4:6b:cb:a0:83:5c:98:8f:7a:e6:f8:18:92:b4:5f:90:2c:c1:
55:1a:50:6f:0d:23:90:b0:80:94:44:4f:37:ad:fb:94:0a:f6:
36:b9:8e:48:60:16:48:2d:70:d6:c3:35:56:c4:df:16:83:60:
78:ee:3e:8a:83:90:47:02:05:3d:12:02:33:f3:36:29:2d:31:
e0:dd:45:77:97:0a:8f:34:6a:b3:7e:7d:5a:f0:71:2e:97:2f:
4c:6a:14:8b:df:b4:82:0d:73:50:45:6e:07:77:4a:2c:ff:3c:
db:83:8f:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDVDMzExMC8GA1UEBRMoRUVDMTQ2MjQ1NzE0MUI4M0ZEM0RGQzI1ODk2QTc2MDIz
REU4NDczOTAeFw0yNjA3MTQyMzIwNDVaFw0yNjA3MjEyMzIwNDVaMBgxFjAUBgNV
BAMTDTZhNTZjNDRlLTE3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDi7qwMJVWCdfq71JxA5U72tHymnGiQbf5KCLu6G/WdnxtNRVZgQpTNdX9j0nu
e/ssHpdDluVfEz8MN4DQQVGALS/pN55kKaq57D+fj7nwYmbqgMIUfWZNdK+za20M
GVeirTQDk63RL+8Q37X4wA1xHyD+K28MOOHwDsx3Tny61kBJ9mhzhGrKoHRudQdK
3ttEdZNDm6HQwycoA1pJW9kHQpECIHV960QEiim7HfL1O2TEaiXWmUF568MDcv8p
gU1aLi+jpLeJaxxQtz0qHYadHU2xi4UChnNnUWgmD1heoWknOtQW2StC7gBf0FKT
YDYodDWGGQtdRM4PuwlxsKAZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB5mzEo9J
6JBkhw+PZPxPf8g5I6swHwYDVR0jBBgwFoAU7sFGJFcUG4P9PfwliWp2Aj3oRzkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NUMzL0REMEEzRkUyMzdB
RDExRjFBQURDQTYzNEI3ODMzNzczLzdzRkdKRmNVRzRQOVBmd2xpV3AyQWozb1J6
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvN3NGR0pGY1VHNFA5UGZ3bGlXcDJBajNvUnprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
NUMzL0REMEEzRkUyMzdBRDExRjFBQURDQTYzNEI3ODMzNzczLzdzRkdKRmNVRzRQ
OVBmd2xpV3AyQWozb1J6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCt1UyJkRF1K3zMbtkqyCfSDDKbvulohTFgcC9HvItXM0GbcgytU7VVkN5udUA0
XsjXCmDZbB+5E4dEUlrmBCujZcpikb3E7awgPm2bOqB8qUCilU9qxHQaLXq9ySRO
IBAMB9o8/V5LmFgQEUIoOiOkAUJ5/p1czIFDrWRdn4Oc1Ql2H9lGs23NnZp3YNK/
5RO0a8ugg1yYj3rm+BiStF+QLMFVGlBvDSOQsICURE83rfuUCvY2uY5IYBZILXDW
wzVWxN8Wg2B47j6Kg5BHAgU9EgIz8zYpLTHg3UV3lwqPNGqzfn1a8HEuly9MahSL
37SCDXNQRW4Hd0os/zzbg4+Y
-----END CERTIFICATE-----
Generated at Wed Jul 15 11:26:08 2026 by rpki-client