
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json)
Hash identifier: bXPcSXKcRtRfU3L/Q7JgD3TWDv84/5PnxoR9Ohu09UY=
Subject key identifier: 24:2D:01:59:4B:E5:88:AF:8F:7C:67:A3:BB:24:2E:64:AC:4A:B4:39
Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Certificate serial: 028B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
Manifest number: 0285
Signing time: Sun 05 Jul 2026 02:22:48 +0000
Manifest this update: Sun 05 Jul 2026 02:22:48 +0000
Manifest next update: Sun 12 Jul 2026 02:22:48 +0000
Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: afo0kqGpkCOdzjMAVxOfbdUyFncsll3eW3iekUdzTWw=)
2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: Enlt1m5fMgJylVSd5+EcRhxkwS2mrK3Dcl4exqYwjbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68
Validity
Not Before: Jul 5 02:22:48 2026 GMT
Not After : Jul 12 02:22:48 2026 GMT
Subject: CN=6a49bff8-2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:36:75:e7:ac:0c:91:cd:9d:09:cc:a3:32:
02:24:2d:45:0a:c2:44:4b:ac:c3:ff:85:53:06:7c:
0d:d6:f2:3b:71:cb:3b:e3:6f:35:fa:28:fa:95:a0:
ab:af:60:de:c6:9f:d9:ec:47:c9:10:ac:96:18:42:
3f:01:5b:df:c8:bc:9d:a2:09:5f:f3:9a:71:b6:98:
17:45:cc:ab:b0:78:10:60:d1:b5:1a:a3:a7:17:ff:
95:b1:db:64:f3:92:88:39:5c:82:0e:98:8f:b2:2a:
53:04:20:98:24:e6:09:23:4d:59:a3:0f:70:8e:e1:
22:73:75:81:5e:57:a3:3f:5e:6e:b5:6a:77:fc:96:
26:4f:c0:59:e3:4f:6e:17:b9:a1:8b:15:db:30:1f:
75:be:95:30:c4:fb:4e:a7:f8:5f:22:d4:fa:a3:99:
80:82:72:53:2d:19:cb:d1:c0:7b:be:c0:b2:79:4c:
1b:5a:53:70:86:36:35:18:e4:6c:cb:da:35:b6:46:
3f:01:07:16:51:51:2b:70:ae:32:0a:da:c9:02:87:
92:78:9a:a1:3a:24:f6:e4:eb:72:44:6f:f1:02:dd:
db:aa:87:42:b7:ee:63:73:38:a1:4a:d0:54:07:b1:
02:32:1d:dc:bd:f2:8a:cb:1d:7f:f0:d3:5b:f2:0a:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:01:59:4B:E5:88:AF:8F:7C:67:A3:BB:24:2E:64:AC:4A:B4:39
X509v3 Authority Key Identifier:
keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:00:59:80:1c:de:43:ef:45:52:42:3c:5b:b0:08:4b:49:84:
87:ac:04:f3:b2:bc:a0:63:c0:64:1b:fc:51:4e:66:67:cf:25:
c7:12:6c:35:43:f0:ff:20:d2:96:12:c5:da:2b:72:a4:47:0c:
83:21:d4:1b:74:08:3a:de:f4:30:28:0b:3d:a1:d7:eb:78:f6:
1e:47:f1:10:b0:ae:5b:90:9b:e1:60:cf:26:4e:c9:8d:4e:d2:
8a:da:73:88:fe:4b:de:51:f2:ef:7b:68:f4:21:f7:ec:3d:2d:
d3:25:9e:91:59:23:83:72:fb:f7:27:b0:f5:e0:15:e4:b9:8f:
dd:93:a6:a2:75:0f:c1:12:c9:ba:55:a1:b5:45:ac:8d:2a:8e:
fe:6b:6d:59:89:44:a3:a9:fc:43:72:bc:71:03:17:dc:aa:9c:
45:3c:58:84:cb:f5:58:e2:ed:aa:21:29:b5:4a:4e:15:bf:b7:
17:c6:f3:3f:0e:7b:90:f7:9b:c1:09:85:fc:1b:e6:66:8e:29:
31:4f:c1:59:9a:88:9a:b7:7b:ce:82:44:ca:0f:d7:84:00:af:
88:07:87:bb:4c:d7:d2:dd:5a:e9:79:62:ae:5d:7e:69:19:a6:
cf:0b:35:37:94:01:24:b5:8f:92:23:1d:d9:b3:75:6f:d3:61:
3a:61:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:19 2026 by rpki-client