
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json)
Hash identifier: K1DWOvXTJJcRDafi1sJ8roVQfGiktUdJCcP0vozqtTQ=
Subject key identifier: 7E:36:A3:2E:4D:FB:B9:F0:CD:0B:9A:B1:7C:8F:28:3A:F1:D1:01:A2
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 05F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
Manifest number: 05E2
Signing time: Sat 04 Jul 2026 23:20:44 +0000
Manifest this update: Sat 04 Jul 2026 23:20:43 +0000
Manifest next update: Sat 11 Jul 2026 23:20:43 +0000
Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: w3OK6f+NT8EkHhfBn8q+HIrTKsX3UI0cn0bPENifZns=)
2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=)
3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 23:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: Jul 4 23:20:43 2026 GMT
Not After : Jul 11 23:20:43 2026 GMT
Subject: CN=6a49954c-7fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:0e:a9:df:9d:35:be:bb:00:1e:d5:4c:77:
52:3b:f2:67:d7:ae:dd:22:a0:5c:22:95:a4:ae:43:
39:70:19:53:04:d9:4c:d0:68:6e:9c:6d:9b:07:06:
8b:5b:7a:54:6c:6a:4b:bd:53:4b:5c:0e:c0:ee:c4:
f8:d7:5a:3f:fd:4f:39:13:28:bc:c1:fd:b1:2c:5e:
28:8d:4d:57:5f:af:8a:70:ae:f4:84:32:0a:6e:7e:
26:2f:7c:a9:e9:e2:40:9c:a8:4e:81:d8:73:21:8f:
9a:97:10:62:45:38:4f:12:ce:82:a0:31:4f:85:70:
32:a2:a6:53:22:62:b3:ff:74:72:5b:da:6b:6f:18:
de:a3:d3:46:eb:df:45:88:84:01:84:af:aa:62:fb:
12:e9:8b:4e:ff:e8:23:a7:a2:89:69:4a:05:ca:a6:
59:37:81:3b:46:e8:f2:ef:01:0a:4b:06:c3:3e:db:
86:c1:a1:d8:92:1d:04:04:e2:bb:9b:54:40:f1:4e:
77:35:c1:73:6a:b4:89:b9:ad:41:d4:f5:a5:bc:a0:
24:ed:55:bd:c6:31:54:81:ad:9d:07:37:3c:0d:3d:
04:20:31:15:ed:b1:e2:f0:41:6a:6c:71:98:78:dc:
81:5b:bb:90:83:52:e2:cc:ce:dc:c1:e3:2e:7d:7a:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:A3:2E:4D:FB:B9:F0:CD:0B:9A:B1:7C:8F:28:3A:F1:D1:01:A2
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:15:82:24:84:0f:86:9f:af:39:5b:69:78:60:c9:75:b5:3d:
bc:69:ee:13:5e:31:b4:f7:81:c5:25:93:b8:69:e5:c8:4d:3b:
da:cf:91:ba:14:87:3f:ba:5a:ad:7c:e1:bd:45:44:e1:49:9c:
87:25:63:6f:fa:4d:f8:cf:f3:a8:80:2a:7f:c4:dc:0c:68:b1:
e3:28:6b:66:7f:d1:c1:83:bb:a4:4c:da:39:7d:d4:6b:d7:65:
4d:d7:ee:56:49:64:97:21:79:fa:ae:e5:04:23:88:84:13:32:
fc:ce:d6:ae:3c:31:7e:56:a4:10:b6:a4:5b:64:56:13:1a:c6:
4b:0b:fd:51:08:f4:e9:e4:6a:d9:7c:cc:d3:1d:d4:99:4a:35:
14:35:07:66:58:c9:e0:43:4b:48:49:e6:b6:3c:61:2c:07:7f:
73:ab:35:78:db:0c:39:a4:24:84:f6:69:6f:24:19:c8:2f:64:
59:5e:5f:17:80:66:53:c5:76:4f:7a:b3:61:bf:c7:8a:c5:05:
b8:54:de:52:dc:30:d0:18:a7:98:e9:5c:c3:55:a9:a4:44:3c:
15:05:0d:17:1d:34:55:4e:89:fb:85:cd:93:ae:f9:5d:26:1a:
ba:3e:73:a3:51:c8:db:e1:00:86:f7:4b:de:af:4e:7a:60:0f:
75:1f:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:18 2026 by rpki-client