
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: /BjgqgjqWELzZhYGXYiCJCbIo0NzRIJ+7pAojtNA3zc=
Subject key identifier: 54:B0:DD:E1:FE:C3:9C:B7:EC:2F:0F:63:7B:3B:FC:65:2E:9C:38:E5
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02BD
Signing time: Sat 29 Aug 2026 01:25:43 +0000
Manifest this update: Sat 29 Aug 2026 01:25:42 +0000
Manifest next update: Sat 05 Sep 2026 01:25:42 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: Qwu6B3/KfLQc2KdtNaz+eagiHwTNdtXqbmbbr2fs1PI=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 01:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Aug 29 01:25:42 2026 GMT
Not After : Sep 5 01:25:42 2026 GMT
Subject: CN=6a923516-438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:fb:03:71:b0:24:13:53:09:d9:8a:c4:1a:
e4:2f:52:53:a4:c8:74:80:af:ff:37:df:0b:58:5c:
0d:ad:a5:c0:8d:2b:97:84:7d:d1:e8:0d:63:c5:8c:
bd:b9:53:47:5b:96:b7:90:b3:24:cd:c4:43:d0:e5:
00:34:1b:ea:23:1a:33:2c:5e:4a:c2:d1:ad:97:e8:
73:15:44:45:01:aa:b8:3c:b6:9e:eb:28:76:01:43:
c0:72:5a:e3:f2:3c:b3:93:d3:c9:0c:8b:0a:1e:4a:
d6:49:3e:ca:89:df:4f:ea:61:f0:0f:5f:0d:7e:28:
b2:ef:8c:03:07:49:28:bd:b0:ba:91:c0:f5:2b:f9:
48:4c:23:e9:69:fa:b5:b5:e4:f6:e5:1b:9c:a6:00:
59:a9:3f:83:db:b8:d0:6b:17:a2:52:23:67:f1:4a:
c2:74:c8:91:73:bf:e9:b7:27:d0:35:88:73:9b:b1:
9e:0e:33:a9:32:0b:20:d1:40:66:06:6b:70:00:e4:
38:62:f0:de:0c:f2:c8:b8:f9:92:cf:e1:6d:85:e1:
07:a8:23:f0:3f:80:75:45:7f:58:32:fe:c5:2d:b8:
47:81:70:b6:3c:ac:03:d1:53:a0:15:b0:55:b1:04:
9b:c0:12:3f:33:59:74:b5:c4:61:4d:ce:bb:e9:47:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:DD:E1:FE:C3:9C:B7:EC:2F:0F:63:7B:3B:FC:65:2E:9C:38:E5
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:31:76:32:e5:21:d9:16:0a:e3:9c:e9:c7:46:e9:53:b1:
44:91:90:71:12:15:5b:52:3f:bc:e1:fb:29:87:61:c6:3a:b6:
f8:38:60:9e:ce:ed:22:b1:bc:60:ab:56:b5:b2:d8:e4:b3:ca:
f6:40:4d:be:a3:62:c7:d9:20:af:00:ed:f4:5a:0c:87:4a:41:
e4:77:47:f6:84:17:1b:2f:02:f4:f2:28:7c:71:72:f7:72:34:
31:1c:2c:51:fe:bb:d0:51:c8:9d:7c:85:d8:6f:22:15:d3:83:
a6:2a:87:2d:bb:1b:6f:61:1f:b6:84:46:34:e1:2e:6d:d0:f3:
b0:61:68:e8:c2:f3:62:0e:43:b8:9a:1f:e2:cf:13:88:25:4d:
93:61:19:b7:8b:51:6c:d2:21:fd:6a:f4:f7:a1:19:ab:cb:01:
89:be:9b:d7:1c:a6:07:4c:d3:95:d4:7d:95:c3:27:5e:97:fb:
41:f4:75:b8:a3:a2:8e:70:de:04:97:67:07:23:c0:f7:fb:70:
80:1b:d2:a1:18:9b:c5:6c:14:62:5f:33:5b:b9:fd:02:b7:fb:
a4:4a:13:71:a5:11:bf:40:3b:4c:2a:3d:d6:1a:68:43:16:3c:
ec:ee:5b:a9:de:39:09:dd:da:0c:cf:ed:e9:28:03:9f:f3:53:
fa:74:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 15:40:34 2026 by rpki-client