
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: 8oxSlxyS7JFsgcpQOaqY/rdUD8LxLj1fOsYvb8O20jI=
Subject key identifier: 44:13:D0:95:7F:DE:00:EB:1C:84:9E:EF:00:F3:4D:E7:71:23:1D:CB
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02A9
Signing time: Tue 21 Jul 2026 02:42:08 +0000
Manifest this update: Tue 21 Jul 2026 02:42:08 +0000
Manifest next update: Tue 28 Jul 2026 02:42:08 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: y18CDq0b+TA4P9hcDAdXPRZOYe/sgBkLfliTkFTrflg=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Jul 21 02:42:08 2026 GMT
Not After : Jul 28 02:42:08 2026 GMT
Subject: CN=6a5edc80-414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:e9:76:4d:f9:ba:2c:e2:95:e6:f1:8c:93:
03:81:3a:3c:86:58:43:e2:80:48:9b:48:f2:04:a8:
3a:3f:f1:ad:43:57:6a:af:eb:c4:12:2f:58:72:d2:
a1:d3:23:b4:29:f4:90:f2:c9:a8:c2:a7:02:2b:37:
d5:d1:eb:1e:71:f3:40:66:32:fb:dc:84:e5:48:ef:
4a:94:fd:f4:83:9f:da:dc:00:ef:29:02:25:ef:ef:
00:e3:ba:81:b0:09:4e:b2:3c:30:e3:7a:21:73:20:
20:92:ec:0e:f5:1f:19:68:22:55:81:8d:13:a9:63:
37:69:10:2b:dc:3e:8b:ad:46:15:38:6b:0a:87:03:
fa:73:8f:b1:34:27:fa:1c:10:cf:d7:e9:b2:9f:44:
c4:44:d1:9b:e0:d8:2c:43:b6:eb:04:44:46:24:84:
79:03:c3:1b:98:da:63:19:40:b1:4c:36:6d:49:c2:
61:f8:67:37:c6:d4:c2:00:02:69:9b:d2:c5:4d:9a:
f7:a1:06:4a:3d:46:86:7c:76:fd:9a:a4:3e:b7:97:
81:8d:cc:4b:bb:2d:61:b5:26:c8:f3:4c:4b:c8:11:
bf:18:e9:99:53:71:a6:51:bc:ec:6d:2b:0b:f5:a8:
31:44:89:cf:43:b9:7d:13:aa:35:5f:09:ab:f9:3e:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:13:D0:95:7F:DE:00:EB:1C:84:9E:EF:00:F3:4D:E7:71:23:1D:CB
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b7:70:fb:a0:f1:b5:51:86:05:e2:d2:86:40:91:b1:02:0a:
8a:03:dd:8b:5d:be:86:5d:a9:ba:d7:71:2f:8e:05:08:ca:c5:
b2:1d:83:23:d9:a4:71:47:94:db:9a:a5:ca:74:e8:0a:f7:61:
6f:05:d5:a3:bb:9c:43:6c:ae:77:70:1f:90:71:59:59:8d:1b:
aa:de:de:94:a2:45:66:e0:5a:d6:f4:e1:bf:ea:64:07:13:4a:
60:c3:b9:a9:2a:32:72:f8:df:d7:56:c9:98:c7:76:17:f2:85:
a4:61:3d:89:ba:33:34:d1:7a:3a:e4:78:b4:66:dd:6c:9e:01:
1d:cd:8c:62:50:bb:97:a0:18:b4:20:d9:d1:b3:40:3b:ac:c0:
44:23:6d:b8:30:13:69:79:45:8c:05:bf:a9:5b:72:24:86:3f:
77:bd:2f:6a:52:3c:9a:c9:c8:54:32:ea:d1:c4:e9:0b:35:09:
e5:1e:97:9e:9d:43:fa:3d:aa:26:0f:a3:f0:09:81:e0:60:1a:
b2:3c:03:53:e4:8b:53:d0:ce:a4:d0:7c:0f:88:7a:7a:1f:c1:
59:23:b5:79:57:b7:de:31:7b:2c:26:94:ad:a8:5f:20:3b:6b:
79:28:77:46:48:d2:f1:ea:82:c9:dd:8b:7c:9d:e0:1c:8a:05:
ff:c9:c6:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG
M0E3MDRDNDAwHhcNMjYwNzIxMDI0MjA4WhcNMjYwNzI4MDI0MjA4WjAYMRYwFAYD
VQQDEw02YTVlZGM4MC00MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkPpdk35uizilebxjJMDgTo8hlhD4oBIm0jyBKg6P/GtQ1dqr+vEEi9YctKh
0yO0KfSQ8smowqcCKzfV0esecfNAZjL73ITlSO9KlP30g5/a3ADvKQIl7+8A47qB
sAlOsjww43ohcyAgkuwO9R8ZaCJVgY0TqWM3aRAr3D6LrUYVOGsKhwP6c4+xNCf6
HBDP1+myn0TERNGb4NgsQ7brBERGJIR5A8MbmNpjGUCxTDZtScJh+Gc3xtTCAAJp
m9LFTZr3oQZKPUaGfHb9mqQ+t5eBjcxLuy1htSbI80xLyBG/GOmZU3GmUbzsbSsL
9agxRInPQ7l9E6o1Xwmr+T56fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQT0JV/
3gDrHISe7wDzTedxIx3LMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD
NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND
cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp7dw+6DxtVGGBeLShkCRsQIKigPdi12+hl2putdxL44FCMrFsh2DI9mkcUeU
25qlynToCvdhbwXVo7ucQ2yud3AfkHFZWY0bqt7elKJFZuBa1vThv+pkBxNKYMO5
qSoycvjf11bJmMd2F/KFpGE9ibozNNF6OuR4tGbdbJ4BHc2MYlC7l6AYtCDZ0bNA
O6zARCNtuDATaXlFjAW/qVtyJIY/d70valI8msnIVDLq0cTpCzUJ5R6Xnp1D+j2q
Jg+j8AmB4GAasjwDU+SLU9DOpNB8D4h6eh/BWSO1eVe33jF7LCaUrahfIDtreSh3
RkjS8eqCyd2LfJ3gHIoF/8nGPg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 05:14:16 2026 by rpki-client