
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier: OORW/RLE5htWuIBCjj161EmJKGy52CDP9dmdULoZdyQ=
Subject key identifier: AB:51:56:08:CD:E8:5B:BD:56:25:ED:89:E4:F2:B3:67:45:7A:21:C9
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number: 0709
Signing time: Wed 20 May 2026 14:48:59 +0000
Manifest this update: Wed 20 May 2026 14:48:58 +0000
Manifest next update: Wed 27 May 2026 14:48:58 +0000
Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: vFQ1/q8xLJX4MTNfy/kFFbESxeAb0LW9FDiE4+UPYW8=)
2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: 7lIGItgwakyIm1ogfbfmJas4qk4ZwY4pDMQ8JsNuNZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Validity
Not Before: May 20 14:48:58 2026 GMT
Not After : May 27 14:48:58 2026 GMT
Subject: CN=6a0dc9db-324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:51:6b:f3:42:a7:f1:98:27:c7:75:d2:82:
3d:6d:73:14:70:b6:61:28:11:dd:94:a9:02:a4:5c:
6a:39:38:58:7a:10:68:90:9d:61:4e:54:a4:22:34:
6d:2c:b2:9f:5c:8b:b8:a1:7d:a4:31:05:85:5a:ab:
e3:2b:15:3f:d0:85:e0:86:d2:56:94:0b:91:6b:c0:
7e:3b:4d:a0:ab:d7:73:6f:94:ce:d4:21:da:96:fa:
78:1a:9a:83:66:c7:74:8c:03:46:bc:4c:66:7b:16:
4c:ec:18:03:33:d7:69:5a:97:5d:8d:f2:7b:11:16:
1d:2f:08:d5:7a:f3:58:9c:df:e6:2b:98:a7:80:5f:
fe:42:fa:50:66:86:85:b9:53:67:a0:9d:1d:ac:ba:
d1:63:b3:b7:94:01:93:d5:9a:84:74:d4:18:00:16:
35:3f:62:10:4c:ed:ee:c0:88:5e:3a:2a:5d:11:ce:
c2:c8:8f:44:36:9f:22:2b:a8:6b:6d:b6:68:4f:23:
0d:c6:bb:20:72:80:e9:b3:3d:a2:a5:7e:fc:01:a1:
f9:22:bc:ae:3d:69:ec:0c:0b:28:93:f0:cc:b9:e2:
b5:d9:c8:b1:97:71:fd:14:54:c3:73:5e:78:ff:27:
90:0d:37:99:ec:2d:42:f5:04:96:db:fb:81:ad:46:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:56:08:CD:E8:5B:BD:56:25:ED:89:E4:F2:B3:67:45:7A:21:C9
X509v3 Authority Key Identifier:
keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:bd:0d:db:36:86:f9:5b:71:e9:64:aa:1d:95:e5:1d:86:
77:94:7a:10:fe:60:bf:a7:be:d5:54:64:5b:4a:f7:41:96:1b:
0f:4c:54:c2:12:0a:63:d8:46:35:70:37:91:9a:ea:f8:a5:d8:
50:3b:9d:d1:fb:a8:14:57:2e:c2:90:58:58:af:e2:5a:7e:83:
ce:a5:1d:bc:b4:a8:66:65:fa:4d:ab:ad:75:42:15:b5:46:42:
3b:06:98:36:52:8f:55:8e:49:d8:7b:aa:30:89:3a:91:bd:67:
fb:8d:57:71:79:21:6d:cd:73:72:44:6a:f3:b9:0b:4f:b8:c6:
d8:60:ff:1b:ca:64:dc:b4:a9:90:42:62:55:1d:eb:e2:3a:75:
5b:98:f2:2e:9a:ed:d5:d2:29:c2:28:ce:c5:bb:44:9b:ec:d8:
eb:bd:17:ed:05:8a:8f:ed:62:94:5c:77:d2:cc:43:67:8a:eb:
1c:8d:ea:9b:2e:b2:00:30:eb:c4:6f:5d:c7:c9:74:68:3e:d2:
f5:57:ce:05:a1:b7:bc:29:42:df:89:7b:62:c1:92:e3:ad:2c:
95:a2:87:6e:ce:0b:75:aa:d5:be:e5:7f:fb:9d:e7:54:89:4f:
8f:2c:17:20:e5:95:f6:b8:59:09:9e:fa:8b:86:59:81:f3:26:
ca:3b:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:44:00 2026 by rpki-client