
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: 6zQ7cfjSeI1ZgnKdfmxe3YDSzW3ujs+aRuAPT+nK03o=
Subject key identifier: 1C:6F:21:10:E5:70:93:0D:42:2F:47:2C:6C:8B:74:49:1E:29:AF:05
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 0388
Signing time: Mon 27 Jul 2026 01:57:05 +0000
Manifest this update: Mon 27 Jul 2026 01:57:05 +0000
Manifest next update: Mon 03 Aug 2026 01:57:05 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: VaHpwlq6gtDMGUpqW9B6tE9BHGEf3REfE061ly3IVaY=)
2: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
3: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
4: B3374EBC877611F18FCE87D64A11F970.roa (hash: Gw8MQxllg0rPy0M2Hkzej4q6vePyOqw9JpS8iir96Uw=)
5: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
6: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Jul 27 01:57:05 2026 GMT
Not After : Aug 3 01:57:05 2026 GMT
Subject: CN=6a66baf1-1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:78:9e:69:d8:2f:c2:37:87:68:13:af:ca:
dc:34:23:73:ba:0f:55:28:1c:40:82:94:71:6b:d9:
b5:a0:57:60:03:31:a6:c0:5f:43:05:d2:3a:fb:c4:
86:db:ac:6a:3d:9b:e3:c3:af:66:5f:f8:43:5d:d0:
5e:3f:51:94:1b:71:df:a0:46:82:de:bc:04:04:be:
c7:ce:f6:00:aa:30:86:fb:27:47:f6:c3:50:2d:a6:
a7:02:88:63:02:ec:2d:3b:80:b9:82:68:92:a5:8f:
32:f5:71:af:5d:ff:27:49:55:c1:25:4f:b9:c6:d4:
a2:bc:49:f5:88:88:ce:7a:91:e8:3a:67:72:ab:0d:
b6:c1:07:c7:71:7a:5a:85:9a:91:b9:75:a8:6f:c7:
4c:ce:55:30:7f:2d:02:af:d6:3e:41:4a:af:aa:d0:
4a:b4:58:98:00:fe:a8:95:aa:54:5d:f1:0d:18:5c:
49:f6:c4:75:1c:86:c2:93:a4:6f:67:20:13:43:d2:
17:91:53:dd:1a:0d:a1:fc:4f:c0:16:28:5a:7e:40:
3c:b7:c4:c9:c5:5a:4e:1b:f4:05:b8:51:04:02:f0:
a8:18:68:b1:9d:25:db:e7:47:9b:c5:9d:1c:63:ca:
d4:d1:ae:b1:19:c9:8a:08:6d:36:31:a3:66:8f:77:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6F:21:10:E5:70:93:0D:42:2F:47:2C:6C:8B:74:49:1E:29:AF:05
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f8:49:cb:52:f5:f3:5f:98:e3:c9:51:ec:ce:1c:fe:ce:9b:
67:0f:0a:1c:29:ad:f8:5d:29:07:16:15:0a:6c:d4:30:2a:43:
cd:0f:bf:cb:82:1e:c2:99:0f:de:4c:6c:43:9c:d9:fb:ea:45:
7d:b6:14:50:36:59:23:bf:cc:db:d7:60:0f:71:77:72:3a:16:
4f:87:e1:dd:da:fd:3b:5f:4a:77:73:b6:04:c4:e9:65:19:26:
27:cb:a2:04:aa:ec:83:23:ba:99:9d:01:81:56:84:19:83:fe:
42:fb:de:f8:8e:c5:ed:b8:67:65:3d:e0:75:35:5a:ae:b7:4d:
d6:d6:4b:09:ee:d5:25:b0:2b:c8:08:2e:0d:1f:1f:b6:1d:e8:
a3:97:c9:5d:fb:68:0a:1e:c9:e0:35:64:0d:b8:98:fe:55:36:
78:b8:1d:12:bb:e1:60:95:7f:41:5c:f6:06:8a:4d:77:71:86:
9c:85:b2:a4:58:6e:7d:a7:1c:e8:c1:15:46:c4:29:98:d8:a5:
7b:a6:cd:e4:e2:56:12:94:2a:84:7e:4e:f0:79:63:20:37:4e:
3f:10:3d:43:f7:e7:45:67:d4:9b:88:c7:28:4b:3b:38:c3:91:
1f:c3:30:7d:73:3a:a7:c4:e0:e4:ec:18:2a:16:ed:87:bc:4b:
e9:08:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:53 2026 by rpki-client