
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: 4ogd2P5vrK0BnDYmJltLYjhKOk9SuRzRrpdmBK5vI40=
Subject key identifier: 11:F3:77:4A:0C:E5:B7:C2:F8:CF:8E:B3:BA:AD:3C:8B:F4:96:A8:9B
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: 96
Signing time: Fri 17 Jul 2026 08:36:24 +0000
Manifest this update: Fri 17 Jul 2026 08:36:24 +0000
Manifest next update: Fri 24 Jul 2026 08:36:24 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: szeC5BkzlkavQ9G8RR2rGgnhyW9mSHGMYU8XnKV4TEk=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Jul 17 08:36:24 2026 GMT
Not After : Jul 24 08:36:24 2026 GMT
Subject: CN=6a59e988-937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:25:84:fa:f6:ee:f1:b7:08:c3:09:fd:82:
a2:b5:53:f8:0a:22:ee:0c:bd:f0:e7:fc:52:68:d1:
a2:e2:0e:74:c7:c4:58:31:ae:63:08:ac:80:3c:28:
a6:80:14:e9:64:a5:52:76:ef:bf:e1:ae:36:7e:d4:
98:5f:44:9f:c6:d4:58:af:0a:71:d6:5c:92:38:48:
b5:f5:a8:5e:eb:a6:21:2b:88:c2:d2:45:ca:6a:28:
56:0a:72:e1:29:4a:28:77:e9:4f:86:ef:84:cd:b8:
1d:f1:6d:f9:0e:95:85:e0:1c:cf:44:8a:b6:22:3e:
1e:77:52:16:eb:e2:3e:d9:d5:cb:6d:79:00:c5:7a:
9a:07:7f:17:3d:2d:a7:fc:a1:77:a9:19:c3:88:22:
b1:64:3b:d7:92:b5:ee:80:ad:75:c0:54:60:8a:c8:
e9:a2:5a:2d:52:a2:a2:c7:8d:22:ea:0e:cb:08:a4:
c7:f6:b1:14:47:37:51:85:28:11:90:61:6b:b5:ce:
e8:fb:ba:f1:4c:ac:5d:5f:87:04:8b:b8:78:37:d2:
ae:90:8a:f5:b8:1d:d9:d0:f3:78:da:ff:9d:74:d3:
ea:7f:74:40:c6:68:ea:7d:e1:c8:ec:82:03:78:d4:
be:d2:37:51:09:78:88:82:6a:1f:12:52:55:25:1d:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:77:4A:0C:E5:B7:C2:F8:CF:8E:B3:BA:AD:3C:8B:F4:96:A8:9B
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:e7:3a:90:74:2a:55:60:30:ce:41:5a:be:8f:15:ba:7b:
64:76:51:13:32:c2:c8:f8:f5:de:db:4b:10:22:58:62:fa:c5:
ad:06:f6:75:e3:5a:72:e4:bf:f7:72:6d:64:ea:7f:6b:d3:43:
c6:63:61:4b:bc:92:79:b4:d4:25:f8:e4:1a:eb:c6:c2:61:56:
51:24:7a:7d:3e:d1:a8:91:1b:96:0b:c2:a9:d1:9b:6f:e5:bc:
94:ba:6c:b0:1b:f5:cf:0c:e7:41:5f:18:5f:ce:e1:c2:83:5b:
a9:83:c8:53:a3:33:14:b6:e8:52:a8:c5:82:6a:96:59:6f:bf:
a9:c7:6c:45:2a:f1:c2:3a:cd:91:ae:d0:55:3f:27:53:e6:76:
0e:21:d7:ab:e4:dd:bc:a6:eb:9f:09:1e:e2:5d:8f:41:05:d5:
e0:8d:fd:ae:9f:35:f5:de:0c:a9:0a:fa:a8:0e:8c:b6:07:4b:
ac:b3:91:97:43:4d:45:64:aa:67:5d:cc:0f:5e:cb:38:1c:98:
6c:ac:0e:5a:6a:9f:c2:29:fa:af:c9:11:41:45:8f:52:12:44:
e1:80:fd:a0:b1:eb:df:71:92:28:ec:fa:59:19:6f:26:ec:c4:
c9:24:a3:b2:6b:bf:fd:a8:dd:62:bc:10:b7:69:03:65:8c:cc:
17:97:fb:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIwMDAxMTAvBgNVBAUTKDQ3Qjg1NDM2ODVEMzAxRkVFRjkwQ0QxMkU1MTU4Rjc0
MEQ2QjZDQjEwHhcNMjYwNzE3MDgzNjI0WhcNMjYwNzI0MDgzNjI0WjAYMRYwFAYD
VQQDEw02YTU5ZTk4OC05MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjAklhPr27vG3CMMJ/YKitVP4CiLuDL3w5/xSaNGi4g50x8RYMa5jCKyAPCim
gBTpZKVSdu+/4a42ftSYX0SfxtRYrwpx1lySOEi19ahe66YhK4jC0kXKaihWCnLh
KUood+lPhu+Ezbgd8W35DpWF4BzPRIq2Ij4ed1IW6+I+2dXLbXkAxXqaB38XPS2n
/KF3qRnDiCKxZDvXkrXugK11wFRgisjpolotUqKix40i6g7LCKTH9rEURzdRhSgR
kGFrtc7o+7rxTKxdX4cEi7h4N9KukIr1uB3Z0PN42v+ddNPqf3RAxmjqfeHI7IID
eNS+0jdRCXiIgmofElJVJR1HfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHzd0oM
5bfC+M+Os7qtPIv0lqibMB8GA1UdIwQYMBaAFEe4VDaF0wH+75DNEuUVj3QNa2yx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FRUI4MDhCODlE
MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9SN2hVTm9YVEFmN3ZrTTBTNVJXUGRBMXJi
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I3aFVOb1hUQWY3dmtNMFM1UldQZEExcmJMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjAwMC9FRUI4MDhCODlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9SN2hVTm9YVEFm
N3ZrTTBTNVJXUGRBMXJiTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALX/nOpB0KlVgMM5BWr6PFbp7ZHZREzLCyPj13ttLECJYYvrFrQb2deNacuS/
93JtZOp/a9NDxmNhS7ySebTUJfjkGuvGwmFWUSR6fT7RqJEblgvCqdGbb+W8lLps
sBv1zwznQV8YX87hwoNbqYPIU6MzFLboUqjFgmqWWW+/qcdsRSrxwjrNka7QVT8n
U+Z2DiHXq+TdvKbrnwke4l2PQQXV4I39rp819d4MqQr6qA6MtgdLrLORl0NNRWSq
Z13MD17LOByYbKwOWmqfwin6r8kRQUWPUhJE4YD9oLHr33GSKOz6WRlvJuzEySSj
smu//ajdYrwQt2kDZYzMF5f7dw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:21:26 2026 by rpki-client