
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: ze+nxRkA7swsMvCRCfhPNLk0n0RmDo4crGlYIou1yNU=
Subject key identifier: 57:FE:A9:26:A3:00:B6:08:63:45:8C:F6:E0:75:0E:B9:5D:47:72:04
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02BB
Signing time: Tue 25 Aug 2026 01:24:25 +0000
Manifest this update: Tue 25 Aug 2026 01:24:25 +0000
Manifest next update: Tue 01 Sep 2026 01:24:25 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: 6Qc8LYam4z9hejhANWyrSjjHw5/xsdGIuJzILO8hFtc=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 01:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Aug 25 01:24:25 2026 GMT
Not After : Sep 1 01:24:25 2026 GMT
Subject: CN=6a8ceec9-17be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:8e:47:cf:4c:7d:35:ce:27:af:6f:4f:e6:
cf:7b:79:d1:65:0c:4c:e6:37:db:05:0e:24:74:71:
f2:7e:21:f5:08:73:a8:95:da:07:24:25:e7:fc:81:
36:34:ee:f3:45:4e:bb:3e:e0:01:9b:05:8e:b5:e4:
b9:f3:1d:f2:10:e7:19:58:a9:8d:c0:5e:80:9a:52:
c0:fc:98:92:22:b5:7d:2c:b3:8f:d5:3b:5c:87:7d:
e0:91:84:86:99:fb:dc:fa:03:fa:7b:f4:71:0b:84:
cb:87:76:e6:ab:97:1e:ad:30:15:89:28:f1:ba:79:
72:5e:19:2f:9b:a6:0f:0e:ee:ee:59:cf:a8:1e:86:
eb:52:c3:65:2f:d3:1a:2e:f4:6f:27:23:af:45:ef:
39:c7:63:43:ae:80:7e:aa:12:da:af:47:b7:28:54:
31:49:05:2f:d8:1e:49:08:bb:3b:4a:58:22:ac:f5:
b2:a5:e3:fe:3d:d5:cd:95:44:0d:76:b1:cc:7b:64:
35:dd:db:e1:0a:18:38:8e:df:e5:3f:c0:1f:27:4d:
78:4c:d7:f9:36:69:ed:41:ac:bb:df:f2:42:73:9e:
99:49:c1:08:04:66:4e:5f:da:1d:90:02:c3:4d:c7:
8b:e7:40:61:b6:49:64:95:00:02:d9:6d:21:f7:b9:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:A9:26:A3:00:B6:08:63:45:8C:F6:E0:75:0E:B9:5D:47:72:04
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:91:df:6c:9d:b9:2c:50:02:73:f3:2a:bc:c2:94:fd:08:
ee:15:19:50:63:25:15:e7:34:16:be:48:27:35:62:0a:d6:5c:
3a:79:e2:e0:51:9b:f5:79:e8:67:f1:36:ff:6f:cd:36:96:1d:
30:04:62:84:c9:7e:75:37:b6:80:81:42:d2:57:96:15:0c:de:
2f:69:86:a2:83:01:cf:84:e2:2d:6c:a8:89:b5:92:5a:31:a9:
29:f3:fc:2c:f8:62:76:3f:8f:e5:e9:2d:8b:e8:dc:71:a7:f4:
8b:02:06:62:48:dc:10:34:d9:47:57:6e:de:db:30:1a:a6:f6:
fc:f2:4c:dc:ee:28:46:6c:3c:8e:02:5c:14:e1:a9:99:78:77:
95:cc:23:cc:5f:93:e9:3a:b6:6b:e2:c4:f0:ad:b4:ec:aa:3b:
6b:58:c5:60:dd:90:3e:5c:d9:47:c7:b0:da:76:8c:03:01:c6:
bb:04:4a:b8:09:38:e2:39:88:d2:77:5c:fa:3c:7e:40:a3:14:
b3:61:f0:2d:d0:9a:f5:97:99:64:6d:6b:8c:d6:d5:2d:d2:ff:
42:4f:aa:37:91:b8:1b:de:37:a4:4b:1b:d3:fd:da:5a:9c:df:
e0:cf:0b:ea:3e:e6:e6:b1:e4:c0:9c:6c:83:a0:62:5d:15:13:
4d:d0:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:05:31 2026 by rpki-client