
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier: dlKBWHskmZs2qok8JAS6RbY2mE6FaPZZP51C1FPV5bg=
Subject key identifier: CE:96:65:5C:44:FC:50:67:C6:5A:4F:AC:88:90:8E:C9:9D:9D:B6:2C
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number: 01C0
Signing time: Thu 21 May 2026 03:58:47 +0000
Manifest this update: Thu 21 May 2026 03:58:47 +0000
Manifest next update: Thu 28 May 2026 03:58:47 +0000
Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: qq1DWg5tAM3WwJmCPVpaNgQcy7Iv2Mc0S7FtGaIAszg=)
2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Validity
Not Before: May 21 03:58:47 2026 GMT
Not After : May 28 03:58:47 2026 GMT
Subject: CN=6a0e82f7-a18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:85:be:2c:cb:6b:ec:94:f8:76:06:4c:c4:
90:37:57:7e:6e:ab:6a:a1:23:9f:c0:34:b8:2f:db:
56:93:50:9f:2b:f0:2c:81:04:99:d1:b3:55:9a:d4:
65:db:e4:1f:a5:36:e3:7a:f4:f9:01:80:15:1d:c4:
10:bd:39:b2:67:7a:6b:6b:97:e4:35:f4:f9:16:8c:
fd:56:92:c0:e5:0f:77:31:74:3a:d1:23:f0:27:18:
39:15:e4:d9:21:27:7b:43:fb:a4:24:3f:79:67:3e:
69:b5:da:f8:6b:cf:d0:73:e3:ed:b3:88:18:91:5b:
e5:be:14:4f:b2:3c:ae:6b:b7:f1:fa:44:4b:8d:0a:
2c:89:0f:73:ee:dd:9d:42:0b:c1:9f:22:7e:cc:14:
8d:b2:e6:87:de:c7:fd:11:b9:e3:a2:fe:3b:01:66:
af:55:4a:cd:96:b7:14:c4:de:5d:28:88:f4:78:ca:
1f:27:15:5a:23:a6:f8:f0:5c:f2:ae:dd:15:1c:96:
c6:b0:68:df:9a:e2:34:31:be:fc:ad:a0:40:b6:ef:
6c:05:9a:11:91:60:94:bb:aa:b4:14:68:c2:36:05:
6d:10:97:d7:64:05:67:fb:f1:59:c6:e2:c5:bf:6b:
87:39:3a:1d:f4:4c:74:9c:e9:53:fc:8a:db:05:43:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:65:5C:44:FC:50:67:C6:5A:4F:AC:88:90:8E:C9:9D:9D:B6:2C
X509v3 Authority Key Identifier:
keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:7b:a1:1b:2a:19:d4:e3:7c:98:3b:05:93:d5:05:22:7e:
6e:8b:48:ea:14:2f:f2:0d:93:27:0f:b6:71:8b:50:52:12:4e:
de:53:9a:f7:4a:6c:47:c4:96:70:1c:a5:c0:c8:d5:34:d8:a7:
65:95:42:1a:bd:74:d2:23:b6:56:d9:0d:b7:86:67:74:26:2b:
c3:95:0a:82:48:36:08:ac:8e:73:86:2d:47:63:09:bb:24:80:
88:f5:5d:be:7e:85:2d:32:79:e7:f6:9a:7d:b3:5b:dd:e7:f2:
80:52:9a:db:04:a7:85:a9:c7:29:eb:cb:45:d3:9f:b1:e9:64:
e7:e4:e8:52:47:b7:f1:50:8d:59:de:8b:0f:17:05:a7:f7:31:
43:13:15:fa:8d:23:67:f6:69:b8:48:27:64:9d:6c:4b:3a:50:
93:ea:10:9c:f2:d2:33:c1:3c:40:3a:9c:00:1e:da:40:e1:5b:
7e:dc:2e:73:61:aa:19:77:ff:64:39:3e:67:29:06:6b:eb:ee:
4a:81:af:08:e8:5c:01:fc:5f:51:4e:8a:4c:42:de:fa:b8:f7:
0b:b5:db:8a:ff:61:1d:e3:69:c6:83:cc:a0:ed:cc:9d:59:1a:
9d:2d:1d:6b:9c:9a:9b:11:54:39:7c:d3:a2:83:1e:e4:59:72:
53:ed:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:37 2026 by rpki-client