
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json)
Hash identifier: sQ6ld/lKOmMasVfcqPho0+5Kk7pcEycz0uKNg2zXgv0=
Subject key identifier: F8:97:22:78:E4:E8:16:B0:92:37:3F:CC:3C:30:35:80:BD:5F:52:0A
Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
Manifest number: 4A
Signing time: Fri 05 Jun 2026 08:46:35 +0000
Manifest this update: Fri 05 Jun 2026 08:46:34 +0000
Manifest next update: Fri 12 Jun 2026 08:46:34 +0000
Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: 4igMzCf1JGQ4uk2bsH00NkqeQzbSUDvxu8UPcWAyrtM=)
2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Validity
Not Before: Jun 5 08:46:34 2026 GMT
Not After : Jun 12 08:46:34 2026 GMT
Subject: CN=6a228ceb-c1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:98:d4:90:2d:f4:60:30:ba:42:e3:fc:b1:
01:26:e2:97:92:f7:6d:68:d2:e5:b9:15:a0:3b:07:
5d:d7:3e:67:b3:08:fb:88:1c:b3:50:b5:88:73:25:
0d:8c:d3:db:df:a3:c9:af:a4:5d:14:6d:56:66:af:
d3:d0:e4:68:1e:cb:7f:81:86:a7:a6:cb:ec:d5:ec:
1f:a0:3b:75:c2:5a:1b:5a:15:4d:35:67:94:a2:9e:
e6:84:b2:51:14:08:df:80:99:0e:cc:2b:88:76:73:
43:8c:2c:cb:81:74:7f:97:0e:aa:3f:14:c9:13:17:
8f:4c:c9:79:89:66:0a:4f:15:b9:47:e3:19:9c:5f:
66:1f:0e:08:89:d4:be:1e:3f:7c:29:24:22:2b:9c:
45:ec:64:32:70:bd:7e:a8:e0:bb:a7:20:a1:3f:27:
9b:e0:cd:e0:19:de:54:7b:e4:b8:26:a1:d8:ae:48:
37:06:be:5b:ee:de:f0:7b:8c:3d:17:61:0e:61:43:
f1:40:5d:d2:8c:b4:bf:42:5b:dc:56:69:57:2e:fe:
7c:2c:1c:a6:be:d6:e5:84:17:73:33:94:e8:c7:df:
db:59:e2:fa:01:5e:0a:5c:e5:f0:d3:69:99:cd:10:
9d:8b:f5:f9:33:1f:87:47:fe:9b:87:b2:dc:d2:97:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:22:78:E4:E8:16:B0:92:37:3F:CC:3C:30:35:80:BD:5F:52:0A
X509v3 Authority Key Identifier:
keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:76:24:e6:6f:5e:1c:78:a6:74:14:b0:a4:19:4b:86:4e:
66:90:71:8f:27:78:36:b9:03:80:60:62:9e:92:1d:7b:d7:be:
5d:e7:c9:06:cb:de:7c:a1:a6:1e:d3:21:50:76:ab:f6:7f:16:
2f:53:0e:1c:3f:8e:10:f5:37:e4:0e:ad:f7:5f:34:b0:34:f0:
96:f4:3a:3e:16:13:35:1e:a7:78:c4:c9:02:04:40:07:12:53:
57:96:4b:f4:43:da:68:5e:7c:f5:d4:f0:cc:fd:80:dc:10:5c:
80:ba:1d:ad:4e:47:b5:c1:94:c6:4d:43:05:74:5f:97:3d:d9:
e4:b9:25:a0:e0:04:72:46:19:a1:c6:d9:42:31:54:be:0b:78:
8d:6e:41:05:d3:62:25:bb:5c:82:b1:64:3f:6c:58:94:78:65:
41:f6:57:ca:fc:19:74:cf:3d:1f:27:82:ce:24:79:81:ec:f2:
18:70:04:00:09:d2:7c:7e:3a:0d:e3:d5:14:c3:2b:99:16:5b:
44:b0:17:84:5c:47:c1:cb:c7:ec:9a:40:d0:08:62:6b:a1:0f:
44:40:bc:4a:07:bf:60:29:ce:8b:39:d7:0e:d0:5d:c1:35:df:
d4:88:f7:0d:00:1b:fd:65:a4:d0:66:43:f0:4c:9d:bc:97:d9:
d3:df:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:07 2026 by rpki-client