
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: 2aAaBZ3JjeE+62QCwK7Y6kVf97dG6S3cnpdC03cXXzw=
Subject key identifier: 23:CD:2C:99:7E:56:A0:B6:B8:EB:38:5A:3B:E3:94:93:54:3C:33:04
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02BA
Signing time: Sun 23 Aug 2026 01:14:28 +0000
Manifest this update: Sun 23 Aug 2026 01:14:28 +0000
Manifest next update: Sun 30 Aug 2026 01:14:28 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: syh50aFuj/VQl4qvC3vMKClemufzir3ihFzrOK3ndFg=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Aug 23 01:14:28 2026 GMT
Not After : Aug 30 01:14:28 2026 GMT
Subject: CN=6a8a4974-34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:41:a4:4e:06:62:1b:e4:70:2d:97:8e:fb:
df:d4:b6:f3:02:b0:cf:4a:ae:fc:f7:7f:9f:b3:34:
0a:b9:ef:8b:57:63:11:bb:3f:53:ea:11:d2:ec:bf:
16:f0:0f:64:f4:cf:5f:6d:00:ef:ee:08:2b:ee:14:
b6:2f:78:96:00:a9:05:35:9f:a8:9b:ff:22:c2:5f:
d3:5b:db:7a:f6:db:cf:11:ab:62:93:33:79:f4:7d:
93:4c:b7:31:4c:b8:1c:b8:89:7c:67:b5:87:5a:ab:
2a:1e:52:15:1a:3b:06:ce:64:34:8e:00:a2:b4:e2:
dd:1c:72:49:4b:63:f5:0e:ea:01:6d:40:7e:13:bd:
0d:b7:f8:0e:af:78:c7:c0:ee:63:a9:44:70:ae:51:
28:30:35:0c:f3:4b:d3:97:0e:ea:76:9e:c1:1a:2b:
e6:8b:c0:98:fc:ab:38:1d:12:2f:1b:3f:ff:4a:80:
e6:d6:bb:8d:1c:ce:9f:ea:61:44:52:07:3e:6e:fa:
58:58:aa:95:9e:22:b1:c5:7a:b4:5f:59:3d:3a:e6:
4c:b3:a7:af:64:7a:d1:56:ef:83:55:13:46:88:ed:
ff:87:1a:39:2c:c0:04:60:8e:3e:a5:f6:ad:51:fb:
89:2e:48:e9:b1:9f:7d:b6:7a:35:10:97:b8:57:5b:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:2C:99:7E:56:A0:B6:B8:EB:38:5A:3B:E3:94:93:54:3C:33:04
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:b2:81:f4:9e:06:c0:80:42:c9:57:36:33:5a:35:95:8f:
9c:f3:3e:a6:0f:f7:af:3f:24:a4:1b:79:ef:28:4d:a6:fa:21:
9a:6e:dd:9f:cb:8c:2a:7b:4d:60:30:fc:fa:d2:02:28:dc:47:
13:71:cd:a1:ae:4c:a8:dc:10:c0:30:11:8c:eb:49:04:37:60:
77:44:90:ea:54:95:d6:58:24:eb:66:d3:55:93:cb:2b:a1:a7:
5c:ad:2e:84:b7:48:e4:34:2c:f2:4b:b4:19:28:d3:39:08:c2:
18:17:24:1e:1c:f2:3e:2f:a5:c8:48:73:fc:1d:dd:9b:ab:23:
d3:db:4b:f3:3c:95:a1:29:1b:7f:a0:bd:59:98:a8:3b:a4:2d:
12:0b:ab:3e:33:ed:e1:f7:9a:7d:73:b2:dc:7d:cb:e8:df:fc:
91:da:76:84:6b:4b:af:43:07:5c:ae:b6:7c:da:32:85:49:85:
67:fe:26:d0:6a:ba:00:87:00:07:91:7b:a4:3b:8d:3a:9d:ee:
58:78:f6:50:f5:69:8f:71:f5:47:f5:7d:97:ea:96:fa:94:af:
29:2c:36:de:43:0c:99:ca:bc:cd:a2:22:a9:61:0f:cf:a7:26:
18:92:60:e2:f0:79:2f:17:ba:b3:cc:07:02:4d:11:d3:3e:c9:
07:72:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:03:57 2026 by rpki-client