
$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier: ZW6aj5S8MJ9lfW59RGjZUd0eS2DdG2B7qLhJKuW1ZEE=
Subject key identifier: 40:34:6A:56:68:24:BF:FB:38:D6:AB:91:B3:C9:B4:23:5E:9B:DF:6D
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number: 029C
Signing time: Mon 27 Jul 2026 03:04:42 +0000
Manifest this update: Mon 27 Jul 2026 03:04:41 +0000
Manifest next update: Mon 03 Aug 2026 03:04:41 +0000
Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: eeM8vCnDVPX4AoOD/TIbDsK9RjY8eYIBwKT4yuaqZaU=)
2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: BSe/xrmnbVtCYEoOzBEdpUE2pH3SuWmeYFTTZjAJbc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Validity
Not Before: Jul 27 03:04:41 2026 GMT
Not After : Aug 3 03:04:41 2026 GMT
Subject: CN=6a66cac9-b6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:a5:da:b5:21:d6:a5:cc:a5:d3:67:a5:79:
e2:9b:2f:63:42:d1:95:ac:ec:4f:5c:b4:58:71:81:
4c:11:78:e4:19:d7:10:a7:4f:2b:d8:05:ef:22:62:
2d:3d:96:ff:11:6c:16:18:25:ac:0f:05:c3:f6:6f:
81:06:00:d4:12:cd:83:2a:35:3f:fe:85:f1:20:10:
de:aa:03:5a:1b:ba:28:41:ba:a1:b7:62:e8:4b:61:
ab:b1:9a:3d:b5:28:ca:3c:b7:96:8a:2a:c0:76:8d:
04:bd:ec:74:54:80:17:ed:aa:6d:7b:71:a0:6c:5b:
74:15:0f:27:1e:0e:4d:f0:84:ba:63:ef:0b:e9:46:
15:76:6a:8e:35:31:cb:8d:7f:c6:31:aa:b8:4f:2b:
8b:e2:10:a5:78:b4:80:af:92:70:f0:79:23:fe:fe:
f1:2c:64:e6:04:6b:e5:32:a2:04:7d:71:ad:45:1b:
4c:5f:79:66:3d:de:21:7d:81:c8:42:68:aa:00:9f:
9f:e5:00:15:81:b7:2a:e0:ec:9d:93:a4:8a:32:48:
9f:8b:b3:76:0a:ff:d8:8b:85:de:97:1f:08:80:fa:
26:73:50:d0:b0:66:62:30:71:3b:8d:23:67:9d:6f:
d4:df:d9:a3:c8:46:90:d4:e8:f3:0e:b6:b3:fc:10:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:6A:56:68:24:BF:FB:38:D6:AB:91:B3:C9:B4:23:5E:9B:DF:6D
X509v3 Authority Key Identifier:
keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:9b:ae:91:49:f7:19:a1:7c:fb:39:43:67:98:c1:0f:d0:
e6:45:32:1f:e3:7e:9c:90:6e:b7:5c:e4:48:62:63:cf:b0:f3:
65:30:e7:e8:dd:b3:9e:37:f4:f3:cb:46:c5:0f:03:9e:5d:60:
be:2e:07:be:b4:c5:09:f2:2e:c9:54:c7:f9:bf:35:84:28:c9:
5c:b0:0e:91:7a:ca:92:57:ce:6d:4d:d6:57:1c:98:00:e8:9d:
61:9a:d7:0b:97:86:90:df:19:d1:21:08:5c:5e:39:93:5b:b1:
78:55:9a:a7:1e:1e:f7:5c:e7:8c:6d:2b:8d:3e:c6:84:8b:5f:
e1:a1:27:88:28:74:42:a4:54:cc:64:24:1f:26:4d:ae:26:22:
0f:f0:3e:a4:d2:92:2c:e1:2f:3f:ed:32:58:44:e5:7c:ae:c9:
d0:20:c5:c2:cc:43:97:de:33:53:86:2f:2e:57:a0:af:e9:3e:
2b:4f:9c:d6:06:e3:e4:46:dc:b0:a4:b4:27:4b:b0:a0:82:ee:
50:23:f1:68:74:81:5b:44:6c:ce:6f:b2:05:08:8e:3e:13:ad:
3c:ff:00:a2:0d:96:56:70:c2:42:b1:62:1d:1a:6e:e8:58:eb:
0e:0d:65:70:a9:46:52:2a:e9:ff:3c:7f:38:64:59:52:7c:e0:
d2:98:3b:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3
RDYzODQ2NjgwHhcNMjYwNzI3MDMwNDQxWhcNMjYwODAzMDMwNDQxWjAYMRYwFAYD
VQQDEw02YTY2Y2FjOS1iNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxul2rUh1qXMpdNnpXnimy9jQtGVrOxPXLRYcYFMEXjkGdcQp08r2AXvImIt
PZb/EWwWGCWsDwXD9m+BBgDUEs2DKjU//oXxIBDeqgNaG7ooQbqht2LoS2GrsZo9
tSjKPLeWiirAdo0Evex0VIAX7apte3GgbFt0FQ8nHg5N8IS6Y+8L6UYVdmqONTHL
jX/GMaq4TyuL4hCleLSAr5Jw8Hkj/v7xLGTmBGvlMqIEfXGtRRtMX3lmPd4hfYHI
QmiqAJ+f5QAVgbcq4Oydk6SKMkifi7N2Cv/Yi4Xelx8IgPomc1DQsGZiMHE7jSNn
nW/U39mjyEaQ1OjzDraz/BC4EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEA0alZo
JL/7ONarkbPJtCNem99tMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2
NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP
OURTM0dKVlBGemg5WTRSbWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbiibrpFJ9xmhfPs5Q2eYwQ/Q5kUyH+N+nJBut1zkSGJjz7DzZTDn6N2znjf0
88tGxQ8Dnl1gvi4HvrTFCfIuyVTH+b81hCjJXLAOkXrKklfObU3WVxyYAOidYZrX
C5eGkN8Z0SEIXF45k1uxeFWapx4e91znjG0rjT7GhItf4aEniCh0QqRUzGQkHyZN
riYiD/A+pNKSLOEvP+0yWETlfK7J0CDFwsxDl94zU4YvLlegr+k+K0+c1gbj5Ebc
sKS0J0uwoILuUCPxaHSBW0Rszm+yBQiOPhOtPP8Aog2WVnDCQrFiHRpu6FjrDg1l
cKlGUirp/zx/OGRZUnzg0pg7MQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:15 2026 by rpki-client