
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File: 7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier: bPeCKnUJW4hNU/F8oqcXCDsnTt31xT2hg4P/16R6aHw=
Subject key identifier: 23:3F:A4:C9:EE:81:F1:B1:C8:D0:74:60:86:C8:A0:B7:42:7B:3D:76
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer: /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number: 20C2
Signing time: Fri 12 Jun 2026 15:59:47 +0000
Manifest this update: Fri 12 Jun 2026 15:59:46 +0000
Manifest next update: Fri 19 Jun 2026 15:59:46 +0000
Files and hashes: 1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: GnMTN13D2jihvXYQLlKDUGMkFJ0Envit+jxt1PlCJ4w=)
2: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: mkwtrtoISKf8CdyaIFecJHKE1E9ofVlo41Lk0KTM6Gc=)
3: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: Bd4fyJFT0/RGzv/UYSeU75j4WeITlTSc+IrzdI1knD8=)
4: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: 2lKTFTR17ouH78nETD+nc1OMaBr5xooA7XkTTU+AJ/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB93, serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Validity
Not Before: Jun 12 15:59:46 2026 GMT
Not After : Jun 19 15:59:46 2026 GMT
Subject: CN=6a2c2cf2-35da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:c1:07:a6:97:18:32:01:33:dc:4f:65:c4:
23:79:fe:32:03:64:6f:81:17:c3:41:33:72:39:26:
f8:cd:4d:d8:c2:79:0a:28:59:a9:85:c8:63:b7:cd:
04:89:a7:f1:51:34:92:13:b6:91:37:7f:ef:10:6c:
37:70:7f:f2:1f:83:f7:d4:63:40:7c:34:7e:d9:82:
c4:93:5d:50:5c:89:d1:d3:77:63:bf:73:25:80:f2:
99:34:4f:b1:4b:4d:f1:31:1a:b0:20:2d:22:e4:57:
81:b4:86:ce:35:36:b1:d9:9d:b6:2d:d4:a8:3b:d9:
8e:09:bb:e0:ec:f3:28:25:3d:15:b1:71:33:db:eb:
ed:a1:dd:34:b4:3e:e0:5e:20:f4:a7:51:ac:f0:ba:
c5:81:75:1e:41:5a:ba:dd:cb:bd:b8:94:ad:d5:0b:
8c:97:c3:9a:1c:16:b3:97:8c:72:3f:82:9d:82:5e:
62:4f:2b:22:1e:eb:e6:08:a2:71:c9:00:be:60:c7:
d0:2f:bb:67:5b:a8:c0:51:f9:2f:90:1c:99:9f:73:
45:77:ad:53:35:e3:9b:21:1e:5a:94:b5:81:38:35:
62:05:a2:be:2f:ec:0b:ec:6f:0f:69:b2:44:20:3a:
94:98:e6:d3:09:1a:8e:00:5a:41:ae:8c:bb:10:e0:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:A4:C9:EE:81:F1:B1:C8:D0:74:60:86:C8:A0:B7:42:7B:3D:76
X509v3 Authority Key Identifier:
keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:53:a2:e7:98:d8:2f:0d:04:ef:42:0f:5e:a8:26:db:2c:
ad:59:51:b0:d9:eb:21:28:41:18:c4:41:09:2b:e7:00:9f:cd:
6e:c1:8e:13:bb:f8:67:27:fe:16:43:4f:0c:ca:49:17:15:72:
74:e6:2d:d6:33:63:c5:08:5d:92:aa:63:99:5e:a2:32:18:53:
46:d8:92:48:d8:02:20:37:b8:22:92:5a:b7:03:4b:8c:0a:9b:
2c:3e:01:28:0b:74:74:fe:20:15:f6:e5:df:7e:ae:fc:01:45:
6f:db:38:b9:90:8f:50:47:11:12:9f:d8:b1:00:b1:68:2a:32:
7e:ff:7c:2b:a7:1d:e9:0c:2a:d6:cc:3d:6d:50:45:ec:6b:1c:
90:d6:05:ff:88:08:78:58:4d:6b:c7:d8:25:3b:18:60:30:60:
53:9e:c9:7f:6e:b9:0b:9a:80:24:21:ad:86:85:83:8e:5c:72:
c8:29:5e:00:3d:44:2d:36:89:56:9f:36:c5:25:d8:a5:43:9f:
97:59:ce:0f:ea:b9:d0:af:5e:1c:cf:e4:c3:0c:f4:56:70:66:
44:4f:f1:fa:55:42:24:bf:f9:1d:bc:bb:38:52:3e:6d:06:98:
94:7c:66:fc:f2:2d:21:62:40:a2:70:56:ae:16:46:4e:21:34:
26:a9:6b:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCOTMxMTAvBgNVBAUTKEVERDZBN0ZBNzQzNjNFN0Y2MzE2NEIxQTA3NEUwOUJF
ODhEMjNDMzUwHhcNMjYwNjEyMTU1OTQ2WhcNMjYwNjE5MTU1OTQ2WjAYMRYwFAYD
VQQDEw02YTJjMmNmMi0zNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst/BB6aXGDIBM9xPZcQjef4yA2RvgRfDQTNyOSb4zU3YwnkKKFmphchjt80E
iafxUTSSE7aRN3/vEGw3cH/yH4P31GNAfDR+2YLEk11QXInR03djv3MlgPKZNE+x
S03xMRqwIC0i5FeBtIbONTax2Z22LdSoO9mOCbvg7PMoJT0VsXEz2+vtod00tD7g
XiD0p1Gs8LrFgXUeQVq63cu9uJSt1QuMl8OaHBazl4xyP4Kdgl5iTysiHuvmCKJx
yQC+YMfQL7tnW6jAUfkvkByZn3NFd61TNeObIR5alLWBODViBaK+L+wL7G8PabJE
IDqUmObTCRqOAFpBroy7EOCzrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCM/pMnu
gfGxyNB0YIbIoLdCez12MB8GA1UdIwQYMBaAFO3Wp/p0Nj5/YxZLGgdOCb6I0jw1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx
OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi83ZGFuLW5RMlBuOWpGa3NhQjA0SnZvalNQ
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkYW4tblEyUG45akZrc2FCMDRKdm9qU1BEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi83ZGFuLW5RMlBu
OWpGa3NhQjA0SnZvalNQRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATjZToueY2C8NBO9CD16oJtssrVlRsNnrIShBGMRBCSvnAJ/NbsGOE7v4Zyf+
FkNPDMpJFxVydOYt1jNjxQhdkqpjmV6iMhhTRtiSSNgCIDe4IpJatwNLjAqbLD4B
KAt0dP4gFfbl336u/AFFb9s4uZCPUEcREp/YsQCxaCoyfv98K6cd6Qwq1sw9bVBF
7GsckNYF/4gIeFhNa8fYJTsYYDBgU57Jf265C5qAJCGthoWDjlxyyCleAD1ELTaJ
Vp82xSXYpUOfl1nOD+q50K9eHM/kwwz0VnBmRE/x+lVCJL/5Hby7OFI+bQaYlHxm
/PItIWJAonBWrhZGTiE0Jqlrew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:25 2026 by rpki-client