
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json)
Hash identifier: hx0xfXoGMGJU1+efT+wn2/gepqvl2vECW+D3ATIUjOk=
Subject key identifier: 1C:CA:58:65:C7:EC:EF:E5:37:48:96:EE:C9:F0:7F:2B:A8:2E:41:9F
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
Manifest number: 0293
Signing time: Tue 07 Jul 2026 02:36:33 +0000
Manifest this update: Tue 07 Jul 2026 02:36:32 +0000
Manifest next update: Tue 14 Jul 2026 02:36:32 +0000
Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: kpNzpIRtk3YxLGLKGfG3y9hVVV8k5q8OduD/OjVivUk=)
2: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: hJnEJ9xJtcK65uU+a2lYLQG493yZ6VM20lGCXAUnZKA=)
3: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: ll1SbuQqvTvXz+W/3qaivS8wQz00+kN4RdwzaNK6/rU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 02:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Validity
Not Before: Jul 7 02:36:32 2026 GMT
Not After : Jul 14 02:36:32 2026 GMT
Subject: CN=6a4c6631-d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:0f:ac:92:2e:78:f4:68:d7:bd:84:8a:4c:
7d:f4:b3:73:52:ac:af:45:4f:b6:02:2c:e1:84:74:
f5:c2:d1:32:5a:23:e1:2e:f3:58:3c:35:c2:59:63:
9e:03:84:49:7e:ed:d7:4b:79:27:79:cd:d2:e9:91:
e2:f3:3f:8c:27:f8:37:9d:0e:ac:14:44:38:6e:05:
bc:9a:9e:19:8b:b1:11:a1:ce:ec:6f:ab:9b:31:7d:
4d:f2:cb:ec:23:b1:c7:1e:d8:11:cc:97:24:90:cf:
0f:6e:41:1f:34:98:14:fc:28:7d:91:d8:d1:01:06:
ff:cd:3f:0f:ff:48:c1:74:12:d5:a5:3a:af:a1:51:
a0:36:ac:3a:68:cb:4e:03:7d:32:ed:36:30:02:80:
6a:98:b8:08:9c:b3:89:dc:56:30:1e:d9:ba:e3:34:
59:c4:1a:7d:2f:61:8d:1f:49:fb:1a:0d:ad:80:f9:
11:5f:25:76:ac:a7:6f:3a:12:30:f5:26:8a:6d:cd:
9a:a6:e6:4c:77:ac:af:51:e2:a3:b0:9b:11:e8:81:
fe:07:c8:92:0d:f0:da:24:94:12:ff:16:b2:f1:01:
14:c8:ac:11:e5:d7:b9:82:2c:94:d7:d9:bd:80:32:
57:b8:94:d6:43:e3:d6:f8:06:8c:9d:ab:90:03:4c:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:58:65:C7:EC:EF:E5:37:48:96:EE:C9:F0:7F:2B:A8:2E:41:9F
X509v3 Authority Key Identifier:
keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:7c:f5:67:50:44:8b:d1:d4:1c:86:29:40:52:e7:1a:e1:
f5:ed:83:99:ba:d7:18:8c:db:e4:c2:83:57:fa:7b:c3:d3:70:
c1:80:95:4d:e5:ae:0a:19:20:3f:d6:91:45:22:a1:6e:6e:35:
47:39:85:16:33:f8:96:06:a4:be:67:1d:9f:1b:b1:a6:11:de:
61:ad:59:36:d0:53:7d:da:4d:1a:53:99:a5:00:ad:ac:1b:a9:
7f:1d:be:d0:e7:54:d0:5f:20:5d:3c:d5:0e:9c:6d:82:98:32:
0e:8c:cc:60:3f:0f:71:ba:79:61:24:d0:48:b2:0a:81:aa:40:
f8:07:6b:98:a4:b8:fd:ba:05:fe:66:37:a8:8b:ac:47:5e:0b:
da:56:bb:a7:b3:fa:29:3a:92:56:3d:d9:a7:c9:b8:0e:db:7e:
28:c8:87:ab:ff:44:cb:e6:f7:16:7e:02:72:a1:34:79:8e:18:
8d:fa:0a:65:dc:80:79:0a:45:9d:88:12:6b:82:7d:b4:57:7a:
88:30:85:63:8c:fd:38:c9:77:65:64:77:f4:79:03:7d:7b:07:
29:ba:4b:74:8f:0f:f4:b2:c5:98:03:a2:fa:73:f2:03:51:32:
e0:77:4b:21:ac:f0:91:34:b4:71:45:e3:c0:57:67:46:22:06:
0e:7c:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 23:59:03 2026 by rpki-client