
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: BPw0ufoXnqzrS28Z/iWxzEsFrut/LNNAX8s88ugmCm4=
Subject key identifier: 1B:4F:E5:A0:64:B7:A0:D2:2A:4C:B6:31:C3:A9:1F:01:D9:19:34:11
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 02C1
Signing time: Mon 17 Aug 2026 01:45:05 +0000
Manifest this update: Mon 17 Aug 2026 01:45:05 +0000
Manifest next update: Mon 24 Aug 2026 01:45:05 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: O2S0+5lXKxmchP+sRw4OYt+T4ZhfSrewO3i2b79FFU8=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 24 Aug 2026 01:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Aug 17 01:45:05 2026 GMT
Not After : Aug 24 01:45:05 2026 GMT
Subject: CN=6a8267a1-db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:c8:53:e9:ec:c6:7b:e7:ac:e5:67:a2:67:
10:c7:e6:25:c9:a2:80:ef:8f:91:53:6e:29:40:5a:
79:fa:30:20:63:da:cf:e7:cd:19:e4:56:84:77:45:
53:c3:3a:15:27:ba:40:72:49:8a:66:c4:58:40:e7:
4f:4e:b1:10:bb:4b:a5:1c:62:44:f6:5c:a1:55:8b:
ac:32:94:cc:bd:18:33:8e:c0:2d:64:5b:b9:a5:d3:
eb:c4:a5:ce:08:73:d4:d4:91:a6:cb:3f:9f:02:92:
1d:ef:be:0c:8f:d3:60:a5:7c:7c:c6:f8:30:63:47:
ca:ab:d8:d2:ad:d1:1b:45:a7:3b:eb:d5:36:05:48:
48:ad:f2:99:f7:b3:b3:28:e4:6f:37:90:1d:1b:21:
56:b5:44:0b:d3:42:c6:2f:32:91:5d:98:cf:cf:50:
32:a1:bd:78:fd:e9:5b:ac:e5:dd:75:ad:e6:39:11:
90:21:ab:5b:52:a7:5c:57:2d:48:e7:62:4d:dd:87:
17:25:ce:73:45:86:83:03:0d:82:54:75:c6:83:24:
14:9e:53:77:e6:e0:d2:21:b4:9f:22:86:28:c3:71:
fe:b4:a6:d4:fc:ce:a6:fe:e3:a6:bd:b5:40:12:a8:
49:4b:f2:b1:2a:6b:0d:7d:95:f2:2c:0d:b2:8a:23:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:E5:A0:64:B7:A0:D2:2A:4C:B6:31:C3:A9:1F:01:D9:19:34:11
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:f8:93:c1:4f:a1:63:6a:10:02:f7:85:2b:ea:82:91:87:
39:dd:f2:e8:23:95:73:1e:cb:67:ac:a3:ea:88:75:f3:bc:57:
9d:fb:69:d2:0b:2a:ff:5f:d8:8f:f3:04:72:da:3b:8e:4f:b6:
3d:be:81:72:0a:7a:d5:05:a0:9c:4a:05:53:8b:f2:ea:d8:fb:
d9:a2:f9:12:f6:09:cb:67:6d:f6:7b:e3:23:ce:5d:43:b5:46:
22:c5:9f:85:05:bf:b6:d5:c7:2a:58:83:b8:dc:3f:8e:19:c7:
68:9e:a7:61:ff:2c:e1:28:88:b6:08:93:a1:79:3f:8d:26:a7:
7e:88:32:aa:5c:f4:5d:cf:25:8f:da:4d:e2:a8:0e:9b:e0:3d:
c7:19:4e:74:46:61:a3:39:71:1a:90:4f:cc:1a:16:4f:73:8d:
24:f1:06:5d:d1:3a:e2:ef:bb:f1:3a:5d:cb:b0:43:8c:25:30:
0b:4f:75:13:9a:90:1e:2b:1d:4f:17:47:7b:3f:24:a7:73:c0:
b2:df:ac:e3:8f:07:0c:a9:ed:1c:a7:a7:ab:bc:5f:5c:c3:41:
0f:d4:7d:7c:33:d8:af:43:48:e2:87:8d:47:54:64:24:81:ad:
35:29:19:2d:39:64:ff:0e:cf:fd:67:9d:7a:71:76:4a:bc:96:
f9:17:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:09:20 2026 by rpki-client