
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier: 5sDA6a4b/Mb/sidOzRAr0eIYtIHAxnpO6AeAfG+PhNI=
Subject key identifier: 4B:CA:EE:82:A6:BD:0B:2F:E8:7B:47:E1:62:92:60:6D:82:38:BB:C5
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number: 06B7
Signing time: Tue 28 Jul 2026 22:56:51 +0000
Manifest this update: Tue 28 Jul 2026 22:56:50 +0000
Manifest next update: Tue 04 Aug 2026 22:56:50 +0000
Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: e8P98+7ljy1Zzcq/VwapQy2EqdQ1piEq1CCfn9yfhTY=)
2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: 8KAuUjRAKsyBi8GlES2lC9s8KKWwTwTgclR9At7r6RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Validity
Not Before: Jul 28 22:56:50 2026 GMT
Not After : Aug 4 22:56:50 2026 GMT
Subject: CN=6a6933b3-519a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:ac:8d:cb:02:39:b8:15:0e:25:82:34:71:
1e:84:5d:f5:bd:5c:9e:9d:17:39:2a:71:7e:48:f3:
35:d7:b8:77:46:70:ce:3e:8b:48:e7:29:97:c8:e9:
e5:b7:16:4e:86:77:c7:68:74:2d:36:44:c4:99:47:
54:b5:f6:b1:ce:7a:c2:f3:f0:3c:7c:26:2a:94:11:
fc:07:3a:ad:5f:42:cb:d4:aa:98:a2:b7:5a:04:f3:
c3:fd:23:85:5b:e4:29:2e:d1:7e:4d:0e:cb:c3:0d:
8c:0d:0e:2c:51:fe:79:2f:94:07:e6:93:d1:12:f0:
17:ef:ca:6b:3e:a2:f3:06:3d:62:4c:22:e8:e3:26:
1f:87:11:67:f9:7a:b2:e8:39:b4:91:c8:3d:b7:46:
74:13:f8:05:d8:7e:ab:e2:bd:c8:bb:ac:ae:50:54:
14:e8:30:f5:d4:d0:19:3f:79:2c:71:d1:dc:a9:8f:
e8:2f:bc:36:e1:59:51:49:67:98:c4:6a:77:9c:f7:
7c:83:bf:5b:24:92:7c:85:4e:09:fb:87:52:86:8e:
2f:52:63:d7:0e:0c:fd:15:9e:c5:76:f7:40:2f:e6:
49:5a:5f:aa:d5:25:2e:e7:f6:d8:c7:1f:b8:16:05:
db:0c:4a:35:67:73:03:33:9b:0d:1f:c6:4f:40:e9:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:EE:82:A6:BD:0B:2F:E8:7B:47:E1:62:92:60:6D:82:38:BB:C5
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:a9:ed:43:cd:8f:a1:ef:54:e2:a5:94:b9:c4:35:69:1b:
b3:c7:72:51:de:40:20:36:d4:e1:7d:a0:ce:e8:7b:aa:fb:d6:
4a:4b:75:fe:04:c4:0d:38:a2:ce:1e:6a:8e:22:ea:4a:d9:9b:
3d:97:20:7c:df:ef:9c:c1:82:de:c7:e6:f6:f3:8d:11:be:f1:
08:e5:cf:29:d6:2f:da:4f:ce:c0:23:ca:a2:be:92:cd:1d:e0:
92:77:dc:22:5b:c0:13:a9:c1:33:ca:9d:39:f9:9e:47:30:bc:
d5:78:09:b4:f4:03:f7:92:42:3a:04:e8:dd:67:6f:08:04:94:
cc:a7:be:ad:1b:f2:f1:bc:c5:4e:63:58:b8:80:cc:51:4f:4f:
43:13:0d:f8:18:f2:2c:b9:00:93:ef:46:f7:1d:2d:a6:1a:9a:
ed:81:fb:cc:13:c8:29:8e:68:35:cf:cd:dc:59:1d:41:52:c3:
57:bf:47:cf:c0:20:77:ea:9b:ed:12:3a:ff:6d:ab:47:97:6c:
44:fe:bb:8f:92:c6:3b:0a:c7:41:3e:dd:c7:15:86:5c:12:b6:
b4:4f:60:7c:b1:19:90:5a:cc:f1:72:2c:69:f6:81:9d:62:ec:
9f:9e:48:54:d6:92:8e:65:f9:56:f5:54:7d:8e:e1:f0:92:5a:
f2:29:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:26 2026 by rpki-client