
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: 1xr4L5fSttuUuQn3RJIPlq7atQwFF7vhIUBrHY23+10=
Subject key identifier: 60:63:27:4F:D0:C2:F1:70:09:B4:F1:C8:F4:90:B7:8A:8F:FE:D7:9E
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 036F
Signing time: Thu 11 Jun 2026 03:03:40 +0000
Manifest this update: Thu 11 Jun 2026 03:03:39 +0000
Manifest next update: Thu 18 Jun 2026 03:03:39 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: ANyv6tTUgvr0kuZ27WzTKd0P26zOiC7qKC32RvURjnU=)
2: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
3: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
4: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
6: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Jun 11 03:03:39 2026 GMT
Not After : Jun 18 03:03:39 2026 GMT
Subject: CN=6a2a258b-109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:83:17:7f:4c:27:64:26:3a:e2:ca:6b:c9:
b2:65:88:a2:38:f3:d2:59:7e:65:79:c0:20:eb:6a:
22:27:08:78:e2:5b:ac:59:09:1c:e3:75:77:25:46:
7a:fb:50:90:28:39:73:e5:0e:9c:62:55:66:8c:06:
56:58:8b:8d:dc:c8:23:c7:b7:06:ed:77:e2:d4:d0:
5d:98:27:d4:e6:cd:c6:5b:1a:63:de:73:f5:98:95:
dd:e0:cd:49:e3:63:90:d2:62:54:e1:fd:ae:30:86:
05:2f:bc:fc:ac:14:ff:9a:ab:f2:ab:9d:82:41:d1:
b5:10:ee:92:9b:2e:a6:1e:ee:60:01:d3:75:0b:2e:
6b:ca:39:b0:da:0a:7e:e9:34:d8:3e:62:df:0a:31:
56:2f:26:96:7e:7a:72:04:e9:7f:26:3f:6c:04:55:
e7:5c:ec:4a:19:e2:98:69:54:14:5b:ca:10:40:61:
24:91:20:d0:e2:fa:c8:ee:93:14:c8:41:92:1e:b1:
47:15:21:84:e6:5e:17:37:23:3d:37:68:61:18:ce:
54:bf:80:53:45:3f:31:4e:5d:9f:4f:2e:91:fb:f7:
ef:45:40:dd:a6:1f:6f:2f:8d:7a:c3:c8:62:b2:38:
d1:3c:7f:94:a8:c5:8a:25:37:e5:f0:dc:29:30:df:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:27:4F:D0:C2:F1:70:09:B4:F1:C8:F4:90:B7:8A:8F:FE:D7:9E
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:85:11:4f:2c:b8:70:50:46:67:68:4a:5c:83:49:f9:58:ac:
de:b0:f9:42:1b:dc:f7:58:b3:2e:1d:29:e8:48:91:5d:af:73:
97:e3:05:01:b5:b2:02:aa:b2:ec:ee:63:ab:e1:ad:71:67:d8:
f3:0f:be:6c:0d:57:4d:e9:9e:3a:f2:ce:6b:d2:83:1a:f0:36:
84:fa:7e:c8:6f:8b:6e:71:0e:d7:42:d2:07:cc:8d:c0:8b:ad:
3a:dd:ae:cd:15:14:04:ea:0c:68:aa:de:0e:bf:93:26:1d:49:
01:f6:78:cd:7f:7f:00:11:b3:43:28:87:c5:78:cc:1f:74:95:
34:69:f7:d9:08:4f:2e:fe:63:08:54:c9:13:b8:c8:b8:5d:c3:
29:1d:b2:9d:fc:91:ff:02:c1:eb:8f:db:4a:6e:99:3d:ae:94:
1f:de:7e:65:1b:c8:20:de:8e:48:d6:df:d7:95:40:81:a6:be:
50:67:62:09:55:30:fd:d0:b8:3b:21:ee:f3:63:1f:b7:8c:6a:
1b:df:9e:57:2c:71:b5:17:c9:9f:3e:d3:93:d6:ea:25:91:81:
c2:90:0f:05:0f:cf:a0:11:fe:7e:99:5a:04:ed:08:20:97:dd:
3c:c6:03:62:a5:82:f7:b0:9a:93:5a:5b:b8:62:8d:92:4d:67:
31:8d:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:51:51 2026 by rpki-client