
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: QXvay4zj81k9374Jr1jiTarAG0GKL1dG+HFsiwQqbjY=
Subject key identifier: 03:5B:52:61:2A:70:B1:F7:DA:1E:50:21:04:48:00:8E:42:1A:40:B2
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02B4
Signing time: Tue 11 Aug 2026 01:08:03 +0000
Manifest this update: Tue 11 Aug 2026 01:08:02 +0000
Manifest next update: Tue 18 Aug 2026 01:08:02 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 5hccbQOlY1IoMyVWRtf+SXpKiLHuPU2vtUnMXvNe6n0=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 01:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Aug 11 01:08:02 2026 GMT
Not After : Aug 18 01:08:02 2026 GMT
Subject: CN=6a7a75f3-10c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:cf:7f:64:f3:bc:b5:11:43:24:4d:6d:d4:
c1:30:0a:4b:13:d6:db:d4:bc:5e:a9:6e:73:10:07:
69:10:f4:3b:21:5c:6d:d6:bc:af:57:cb:a3:e9:e4:
6a:36:54:d8:2a:de:c5:81:7f:af:0e:60:29:90:00:
30:6f:97:1e:9c:5a:f6:63:bd:ec:22:51:4b:cf:d3:
e6:f5:10:36:a0:9c:6f:cd:6c:28:62:ea:8a:26:7c:
48:7f:4b:bc:fa:9e:a7:27:16:61:89:29:0b:73:aa:
10:e8:7f:24:f4:fb:69:2f:5a:b4:f9:b2:02:90:99:
86:92:f9:df:92:bf:51:5a:57:ef:f9:bf:3d:fc:a7:
17:7d:f8:bc:54:57:5c:7f:35:cd:09:e3:4b:4b:0b:
68:b1:d0:fb:d2:d4:74:34:90:34:07:8a:32:89:af:
5b:c7:90:c0:47:4f:de:69:a4:5c:03:8d:85:ee:ad:
b0:c5:45:45:7f:bd:c8:d0:f3:77:4c:55:6b:b4:30:
83:20:70:14:40:7e:dc:f1:a5:ab:b3:18:e8:b5:30:
ae:ca:ab:38:51:8b:67:bf:97:4f:f3:aa:20:34:56:
81:5b:e6:d4:a4:89:80:1c:34:33:7d:df:bc:e4:f3:
ad:e1:98:38:d5:d7:08:7e:f2:9f:55:12:3a:a7:68:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:52:61:2A:70:B1:F7:DA:1E:50:21:04:48:00:8E:42:1A:40:B2
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:9f:16:ad:5a:57:2a:91:92:c7:37:58:7d:f3:8f:10:2d:
80:73:c3:2a:7e:ab:6b:cf:3a:98:97:5a:50:83:b9:64:d9:34:
8e:1f:12:81:40:5e:9c:7c:f8:81:cd:eb:6b:6b:c5:3e:83:23:
52:2c:ec:1c:09:bc:ee:f5:de:a9:88:bf:8d:e1:2a:0c:e2:78:
0a:dd:17:d1:6c:5b:82:ff:1d:39:77:ed:5b:ab:09:9f:84:46:
6c:6e:98:3e:f6:70:a9:de:42:eb:bf:ca:dd:e8:22:ff:4c:40:
24:ca:05:44:4a:5f:04:3f:15:ad:05:ef:15:46:fa:c7:27:4e:
2f:1e:34:ff:36:e0:c7:9b:63:d4:1e:ef:57:f2:97:c2:fc:7e:
40:d7:9c:81:90:9a:76:c0:23:ab:ec:41:b9:d2:9b:04:27:6c:
9d:01:c6:00:6e:ff:8b:9c:95:6d:f5:d0:84:80:fa:c9:2e:0a:
3b:c1:4f:93:4a:79:67:b6:e6:2b:7e:f9:6f:7a:f1:93:4d:dd:
c3:ca:f2:be:7f:9a:65:a4:2d:54:52:1a:d9:87:34:c5:d7:a7:
86:81:aa:20:86:08:90:e6:c8:ff:5e:92:aa:e2:4f:f8:cf:1c:
64:8a:1c:2b:cc:02:6a:26:97:b5:70:de:65:35:07:75:9c:48:
d1:a2:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 13:27:27 2026 by rpki-client