
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
File: _-7mekM0ZWGI_qX2-dfnpwWUnj0.mft (raw, json)
Hash identifier: oHQk9bL8ufe7kxS9dMX685aA6ggqF3UZ/ViIzCS73Dw=
Subject key identifier: 69:EB:2B:4F:B5:B1:DF:EB:0F:39:39:22:F2:BB:5B:08:EF:96:9E:20
Authority key identifier: FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
Certificate issuer: /CN=A91ADCB5/serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
Manifest number: 1F
Signing time: Thu 21 May 2026 09:02:58 +0000
Manifest this update: Thu 21 May 2026 09:02:58 +0000
Manifest next update: Thu 28 May 2026 09:02:58 +0000
Files and hashes: 1: _-7mekM0ZWGI_qX2-dfnpwWUnj0.crl (hash: hV/iuLlsFJIZlsyIlF6J7G8LT0HHyIqTMjr5g6GmRMo=)
2: 100631B8285311F189E6C14D98833773.roa (hash: OnSEmhCuD0RbgJQkhNAMR74l52P/16L6+HgI2JOjkDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADCB5, serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Validity
Not Before: May 21 09:02:58 2026 GMT
Not After : May 28 09:02:58 2026 GMT
Subject: CN=6a0eca42-2bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:74:12:50:8c:65:53:b3:47:f6:c1:7f:32:
46:7d:4a:8d:56:84:17:31:c0:dc:15:68:58:a2:7e:
7f:ee:fc:9d:65:2d:15:d7:d2:84:f3:08:94:38:78:
c1:4b:c8:a5:b1:25:bb:f5:2d:9a:36:9c:88:dc:c2:
d0:27:0b:32:1d:80:e6:72:74:d8:3f:b3:70:21:40:
c7:dc:ef:c4:64:8e:72:ee:76:50:3e:11:cf:41:e0:
76:b8:4c:59:06:2c:b0:43:91:28:91:5e:6d:f4:80:
d2:ba:2f:00:ad:e1:3f:0d:90:59:5b:55:54:8f:4f:
16:02:d5:87:b7:71:75:90:51:e9:b1:dd:cf:4c:71:
68:a1:53:7f:bd:1f:b9:f0:08:ea:b0:70:cb:8e:c0:
85:14:1f:5f:46:0d:f5:ae:2a:52:ff:69:77:5b:4a:
3d:03:b5:3e:43:72:3e:18:39:75:81:ba:6b:ef:a3:
49:f3:da:e2:18:9d:ce:70:5a:f8:d4:4c:b5:9e:0a:
bb:dc:42:7d:33:b0:2b:d6:32:43:73:35:05:bc:ad:
51:3e:28:1c:f4:7a:3e:9b:78:d4:fa:02:4f:2a:dc:
01:f8:7c:d8:be:3c:ac:05:38:12:8e:69:cc:a2:e1:
59:8e:6f:de:25:ea:14:a3:fe:70:b6:91:63:5d:28:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:2B:4F:B5:B1:DF:EB:0F:39:39:22:F2:BB:5B:08:EF:96:9E:20
X509v3 Authority Key Identifier:
keyid:FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:68:d0:c8:d3:a1:70:2a:65:ad:1b:5a:8a:15:ae:4b:3c:c7:
05:9b:07:93:f0:e3:eb:35:34:73:45:34:ae:22:7a:59:47:cb:
99:ca:15:07:61:77:a2:4d:09:d6:b6:f3:b2:fe:0e:d2:33:83:
5f:38:e8:29:e3:f1:03:04:8c:92:a6:df:f9:99:9b:c1:82:64:
fb:97:26:fc:70:ad:f2:e7:7d:86:97:50:f5:9c:86:38:f2:72:
ae:da:da:e6:8d:71:77:38:46:d1:31:b8:50:8d:7e:e9:27:27:
e5:36:ef:e3:cf:8c:55:0a:43:79:24:05:18:37:92:bd:a6:89:
f2:a1:89:e5:bb:98:ce:63:71:1a:58:b2:e0:25:f3:c1:e2:de:
25:46:3b:dd:06:89:4e:a6:46:54:cf:39:33:87:5c:d3:f3:d8:
8a:51:e5:25:d4:10:f7:80:43:cc:d5:b1:b1:a2:6a:f2:6b:a8:
05:64:25:d3:66:5f:4d:7b:b2:f0:f9:59:9b:80:61:79:f6:a3:
dc:d5:87:cc:56:db:43:ea:2a:e7:61:e9:7d:f6:b9:c2:ce:13:
e3:3a:8b:59:7f:b5:aa:a0:cb:05:cb:1b:b3:16:f4:49:3f:ff:
f7:1c:09:43:76:90:1e:3d:5e:6f:c7:bd:3c:f8:56:08:63:0d:
48:54:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:14:10 2026 by rpki-client