
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: TjPKuuAnFvK86oq0jFWmuXGLHp5MhlZ8/FCAYnjlesw=
Subject key identifier: 0D:06:60:8F:A3:B8:6D:4C:EE:AA:8C:5A:FE:1B:B2:6B:48:D2:79:1A
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 02C3
Signing time: Wed 09 Sep 2026 01:37:07 +0000
Manifest this update: Wed 09 Sep 2026 01:37:06 +0000
Manifest next update: Wed 16 Sep 2026 01:37:06 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: /V3FHWWF3h4KXQNOCCgEfY8lssZF+4Imel0+ac9/P2A=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 01:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Sep 9 01:37:06 2026 GMT
Not After : Sep 16 01:37:06 2026 GMT
Subject: CN=6aa0b842-2fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:e2:0d:15:3d:4e:0d:bf:c3:28:d5:1f:68:
8c:15:35:94:5b:e0:74:eb:25:e3:f8:3a:66:fd:1f:
7c:17:11:bb:25:d2:8b:32:9c:2c:25:c0:78:53:2e:
50:51:3a:85:e9:1d:82:48:42:5d:56:84:1a:5d:a2:
73:e5:60:6a:30:57:71:e7:4f:18:26:73:8c:36:dd:
91:29:e7:7f:68:23:b8:31:0c:95:79:f0:d7:93:95:
35:ee:0b:40:02:2c:8c:7f:dd:bb:b9:55:38:5a:b8:
f4:67:8b:ae:82:23:f1:d3:2b:47:65:93:5d:29:fd:
47:27:43:af:1e:b3:1b:8b:a9:9d:b2:f9:0a:2d:73:
ed:41:7d:70:f9:59:ee:b4:9d:24:fb:62:12:ae:6a:
05:63:10:da:21:c9:88:d2:8a:fc:b0:24:0b:03:ca:
e1:2e:1a:9a:9a:24:48:1c:a0:d8:30:73:d0:91:1f:
69:ef:25:16:9e:9e:62:1d:b4:0a:9f:43:22:db:d2:
d0:f6:62:f5:62:47:65:a2:65:14:76:51:8f:01:c3:
bd:b1:7e:e4:41:e7:d2:82:ea:f2:c7:79:d7:4b:6a:
22:ff:45:11:f7:bc:b7:8a:14:eb:fd:36:c7:ef:69:
59:7f:b9:3a:73:81:1f:74:a5:1a:a9:f4:bc:58:9d:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:60:8F:A3:B8:6D:4C:EE:AA:8C:5A:FE:1B:B2:6B:48:D2:79:1A
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:16:6a:f1:67:85:73:2f:a4:5e:79:ef:ae:12:61:30:9f:
a5:dc:13:a7:7a:b8:2c:42:05:8d:65:2c:7e:06:8f:d6:f4:d7:
cf:6f:b6:f0:c8:67:bd:2e:d7:35:f7:bc:f1:bc:9d:fa:77:c0:
c8:aa:c8:b0:0b:e4:9b:75:39:e0:75:9b:f3:af:a8:2f:86:43:
49:9e:50:51:1f:57:31:c2:d9:7c:87:49:81:73:1c:dc:d5:2b:
82:13:73:b7:bc:b5:a2:1f:aa:79:6a:59:57:36:40:5e:69:57:
95:ee:55:dc:10:ab:f8:9d:4f:fb:74:38:af:14:fa:4c:ec:22:
7a:61:ab:4c:8e:d1:d8:39:f7:91:f7:d4:62:21:d6:8b:24:37:
be:23:6c:51:5d:ce:4d:c1:f7:59:b8:fd:92:36:de:9b:64:d8:
5a:2e:14:4b:71:3e:c6:cc:f0:02:3f:af:f9:0b:8b:6e:63:b3:
a1:07:5f:6f:47:54:ef:dd:85:2d:9c:96:c8:92:f3:34:d9:34:
5f:6f:94:50:b8:ae:ae:d8:51:8a:ad:d7:94:08:68:9c:12:ba:
a2:67:69:77:73:93:41:f3:1a:ff:95:b4:f5:32:8f:90:c2:19:
db:c6:56:49:2d:f4:76:61:6d:57:e6:16:6b:8d:04:dd:54:b0:
c3:06:e4:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG
M0E3MDRDNDAwHhcNMjYwOTA5MDEzNzA2WhcNMjYwOTE2MDEzNzA2WjAYMRYwFAYD
VQQDEw02YWEwYjg0Mi0yZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA133iDRU9Tg2/wyjVH2iMFTWUW+B06yXj+Dpm/R98FxG7JdKLMpwsJcB4Uy5Q
UTqF6R2CSEJdVoQaXaJz5WBqMFdx508YJnOMNt2RKed/aCO4MQyVefDXk5U17gtA
AiyMf927uVU4Wrj0Z4uugiPx0ytHZZNdKf1HJ0OvHrMbi6mdsvkKLXPtQX1w+Vnu
tJ0k+2ISrmoFYxDaIcmI0or8sCQLA8rhLhqamiRIHKDYMHPQkR9p7yUWnp5iHbQK
n0Mi29LQ9mL1YkdlomUUdlGPAcO9sX7kQefSguryx3nXS2oi/0UR97y3ihTr/TbH
72lZf7k6c4EfdKUaqfS8WJ38hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0GYI+j
uG1M7qqMWv4bsmtI0nkaMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD
NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND
cDVOZHF0Ul93Q256cHdURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAew0WavFnhXMvpF55764SYTCfpdwTp3q4LEIFjWUsfgaP1vTXz2+28MhnvS7X
Nfe88byd+nfAyKrIsAvkm3U54HWb86+oL4ZDSZ5QUR9XMcLZfIdJgXMc3NUrghNz
t7y1oh+qeWpZVzZAXmlXle5V3BCr+J1P+3Q4rxT6TOwiemGrTI7R2Dn3kffUYiHW
iyQ3viNsUV3OTcH3Wbj9kjbem2TYWi4US3E+xszwAj+v+QuLbmOzoQdfb0dU792F
LZyWyJLzNNk0X2+UULiurthRiq3XlAhonBK6omdpd3OTQfMa/5W09TKPkMIZ28ZW
SS30dmFtV+YWa40E3VSwwwbkfA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:44:53 2026 by rpki-client