
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: 56w/CZ024QJk81mbs+Ck0rgmxIo0ZH8CV51nj13zHkE=
Subject key identifier: 97:9B:3E:4D:33:7C:91:D9:E1:54:58:0C:C8:85:2C:6D:A8:1E:A2:74
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02DC
Signing time: Thu 29 Oct 2026 01:41:18 +0000
Manifest this update: Thu 29 Oct 2026 01:41:17 +0000
Manifest next update: Thu 05 Nov 2026 01:41:17 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 7XQfz0Jne6eW0SRyHNIplqjCb2wIE3M/GTWW+jVJtEQ=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Oct 29 01:41:17 2026 GMT
Not After : Nov 5 01:41:17 2026 GMT
Subject: CN=6ae2a43e-d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:80:13:18:be:9b:e9:22:92:a0:d2:64:f6:
89:9b:d5:9d:57:7c:de:88:fb:a6:25:c1:e3:62:10:
40:61:e9:f8:40:a5:fd:a9:60:8f:b7:18:29:ae:26:
51:9c:96:0d:7d:a0:84:23:72:4b:25:79:da:b6:6b:
12:ac:5d:f0:93:98:e9:91:2d:bc:23:34:d1:72:28:
66:f4:f6:be:28:87:b9:84:d2:df:be:a1:d6:f5:cd:
32:22:d9:c0:a5:30:2d:b8:61:be:db:34:4f:70:35:
bb:d9:f1:a4:a3:17:35:59:32:1c:f7:9d:c2:48:27:
ff:52:5f:a4:56:42:7b:25:74:3e:5f:dc:56:be:20:
06:9f:c2:65:d6:11:95:cc:91:1f:9d:c8:5d:85:46:
2d:fd:67:6b:d5:18:0a:d4:38:9e:7e:ae:cc:78:7f:
89:11:7d:6e:60:f7:74:e8:aa:fb:e9:c6:8b:cf:d7:
cd:99:69:28:95:d3:a0:33:f5:06:c8:b8:80:a0:1d:
9f:97:79:b1:7d:a3:ee:74:3b:57:85:2c:59:88:81:
4a:fb:54:1c:fd:e4:59:d7:ee:c8:2c:09:ae:40:2f:
24:dc:80:c7:5c:a6:9c:b7:42:68:40:1e:bd:4f:6a:
2b:cc:1a:ed:e3:6d:ff:9f:03:a8:34:a3:c2:7a:ce:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:3E:4D:33:7C:91:D9:E1:54:58:0C:C8:85:2C:6D:A8:1E:A2:74
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:f3:0a:76:23:4a:c5:a0:b2:4a:a8:07:37:fa:c7:89:0e:
0e:b4:99:6b:2e:8f:ce:41:ab:3d:8e:34:e3:8d:b4:83:a2:5f:
88:9a:85:d7:ad:ad:80:d7:e4:40:0e:7b:f1:01:c6:8c:0d:dc:
a8:23:da:5a:36:ab:84:87:d6:09:56:ee:37:d7:8d:02:6d:e4:
52:27:4b:9e:16:11:99:a5:8c:fe:f9:d5:ec:6d:de:42:5e:8a:
d5:f6:91:92:d7:34:27:f0:62:94:63:3e:2e:0f:45:83:1f:6c:
74:c8:50:45:c0:79:68:7f:1d:d0:a0:01:5f:c9:96:fb:29:6a:
c0:be:a4:35:b1:ab:04:f2:26:b9:21:97:f2:22:ee:b7:d1:31:
95:e7:bc:f1:81:16:7c:e1:0a:8d:67:59:cb:72:e7:79:f5:94:
9d:b8:90:35:99:dd:53:2b:47:a2:0e:6a:2e:ae:ba:b7:68:a2:
d2:c4:87:08:ab:2f:bc:88:62:9a:38:92:35:b3:de:76:e9:56:
5c:1a:56:1c:32:69:82:8b:0e:58:39:ff:ab:85:8d:aa:29:af:
68:41:52:93:17:bd:c1:68:66:6c:80:f9:72:43:4b:3b:49:07:
51:58:3b:c7:dd:de:84:3e:00:b9:54:90:a1:dc:63:f0:9c:37:
38:e0:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:31:01 2026 by rpki-client