
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier: kv4ytQ3QNwgfV2S/UJtYNHLGoYlZeclv/VscMqnKJ8M=
Subject key identifier: B1:47:1B:99:5E:01:3F:A3:E1:BF:5C:BB:F9:FA:63:E5:62:81:39:A2
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number: 7A
Signing time: Mon 27 Jul 2026 10:03:57 +0000
Manifest this update: Mon 27 Jul 2026 10:03:57 +0000
Manifest next update: Mon 03 Aug 2026 10:03:57 +0000
Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: W8tGIfCFy9D9Kfwtk/YrazaDN/qofKrEzO8hDDwCrmU=)
2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Validity
Not Before: Jul 27 10:03:57 2026 GMT
Not After : Aug 3 10:03:57 2026 GMT
Subject: CN=6a672d0d-436d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:70:1e:3e:d2:70:67:06:03:62:8f:b8:9c:
e8:29:a8:54:14:e6:fb:06:51:8b:b3:3f:66:01:bf:
85:90:5e:2d:c9:e6:d9:bb:2f:9d:b6:4a:41:70:45:
eb:af:e7:7a:9e:e2:40:37:15:60:46:40:b7:1e:02:
bc:38:aa:1a:30:3b:d0:d0:19:42:ac:23:28:ca:ba:
98:92:b3:3b:2a:8d:fe:dd:d7:cf:4a:21:09:5c:fd:
97:b5:07:df:b1:1a:90:f8:c8:46:14:56:63:98:4f:
c9:a9:33:52:61:17:ce:26:2f:6f:a4:a0:c9:74:32:
da:44:80:44:72:86:c7:7c:0e:a5:70:8b:7f:73:93:
fe:8c:7c:61:f7:d0:f9:61:e0:27:74:07:30:9f:1b:
4b:ab:63:62:1c:c9:cb:2a:6a:48:54:b5:43:f4:86:
72:de:9e:7e:40:37:93:9e:7d:09:4e:45:1d:fd:65:
54:3a:b8:0d:65:0d:18:d8:2c:7a:ac:2f:8a:a0:86:
71:16:55:fe:79:0d:b2:48:b8:58:7b:9b:f5:3a:99:
bb:84:52:0a:47:e4:24:7c:78:92:54:18:5a:14:bb:
10:51:7f:f2:2c:9a:97:94:e5:b9:3b:c5:2b:04:40:
e1:25:45:c9:56:31:04:02:8c:e4:8e:a5:ff:7e:7e:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:1B:99:5E:01:3F:A3:E1:BF:5C:BB:F9:FA:63:E5:62:81:39:A2
X509v3 Authority Key Identifier:
keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:21:50:a1:6e:d0:5f:b8:66:a8:41:e0:fd:80:1c:70:64:
63:10:58:45:40:7a:bf:02:78:25:d9:55:d8:f7:02:43:5b:16:
70:e7:73:21:f0:22:41:20:8f:6f:b2:23:c1:d4:19:cf:1a:b7:
b9:e6:f1:ab:ea:8b:94:3e:dd:f8:17:aa:6f:6d:bf:15:8d:7b:
9d:aa:09:af:e7:3e:2b:c6:c6:47:88:80:b8:1e:cf:83:54:11:
23:20:d0:6e:ab:d3:6b:ea:9c:f1:b0:10:a9:a2:f3:7f:be:6b:
ab:2c:d7:8d:8b:31:14:63:3d:d9:80:5d:00:07:9b:fb:93:3f:
9c:f1:c0:04:0f:61:66:1c:0a:60:ee:a4:80:1e:d4:d3:cc:51:
0f:8d:58:b2:79:49:0c:67:f1:35:71:b7:70:bb:50:9e:c4:6f:
51:1a:d8:fa:e5:9c:1b:bf:12:c1:76:0e:4b:13:2b:0b:f2:c9:
0f:45:4c:34:fd:4d:71:67:34:c5:41:9a:71:3f:0e:3c:ec:b8:
41:f8:fb:81:43:6f:4b:43:30:99:93:d7:b3:c3:2a:fc:d1:6c:
dc:b8:10:a4:88:1d:e4:b6:b4:db:ce:90:dd:de:16:e6:bb:8f:
b9:ec:0d:1d:4d:06:25:aa:ec:1e:d1:be:c1:39:d3:9d:ba:76:
e3:8e:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:03 2026 by rpki-client