
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json)
Hash identifier: JTN3jKoMTbroHyB5qPGh1GeNsM4ACUNJHk0JRUgb3WE=
Subject key identifier: AC:82:E7:BC:C6:92:48:F7:67:F9:61:6E:11:53:56:CD:0A:5E:0F:D0
Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
Manifest number: A8
Signing time: Mon 27 Jul 2026 09:22:20 +0000
Manifest this update: Mon 27 Jul 2026 09:22:20 +0000
Manifest next update: Mon 03 Aug 2026 09:22:20 +0000
Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: HFj2xxjDjVC7hOOfNATCDHS3RJzjWbCEkQheodyHYEM=)
2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=)
3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Validity
Not Before: Jul 27 09:22:20 2026 GMT
Not After : Aug 3 09:22:20 2026 GMT
Subject: CN=6a67234c-7751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:00:69:d1:a2:87:61:f7:09:cd:72:54:26:
2a:10:76:7f:dd:78:94:73:b9:34:0b:3b:73:46:15:
39:f9:5f:74:5f:70:05:fa:a1:11:4c:c5:be:96:f0:
56:83:6f:15:6c:a1:f2:36:66:f1:b4:29:d0:28:82:
0f:fc:32:6e:72:a1:46:6b:ba:bc:f5:7c:2e:c3:6f:
ac:64:24:7d:13:4d:fa:75:71:d6:80:70:db:59:b6:
dc:40:a7:65:8c:e1:01:26:58:f7:d6:1c:20:a6:1a:
25:38:a3:e7:b3:98:89:67:99:28:0f:d8:48:d8:96:
b5:66:fa:00:06:f7:93:0c:4b:08:c6:c8:fe:1e:36:
de:2c:08:65:05:a7:ee:cf:68:3e:9c:34:2b:15:c6:
72:62:c6:b8:5b:8d:df:bc:a3:82:bc:2a:78:21:46:
46:72:c6:b3:21:38:15:67:cc:f3:4c:13:ff:eb:2d:
17:92:d8:94:ea:06:ac:83:c7:eb:4b:0f:94:b7:bc:
8f:5e:7e:6d:55:3d:07:12:28:f5:e6:57:06:33:80:
5f:c5:bc:d4:ad:ac:77:73:12:3f:17:00:c1:ac:08:
67:41:ec:37:af:fa:2b:29:9d:02:12:c4:b6:14:21:
2a:4b:32:77:77:d0:d6:f2:d8:22:f0:52:ac:8b:e8:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:E7:BC:C6:92:48:F7:67:F9:61:6E:11:53:56:CD:0A:5E:0F:D0
X509v3 Authority Key Identifier:
keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:89:5b:d3:ce:a9:01:ff:06:67:43:b3:c7:ee:72:33:29:
71:46:2c:7c:4f:c6:14:d2:ec:15:7a:05:b9:d5:98:36:64:fc:
d3:4c:b2:a5:d5:00:35:11:6c:b3:75:af:1f:46:5a:97:16:33:
db:aa:50:c2:ec:06:68:b3:98:8e:24:ed:43:dd:7e:e4:a7:29:
72:cb:45:ce:65:51:64:5b:79:d8:b0:dc:71:5b:2d:c5:69:7a:
02:65:f9:3d:aa:6a:6c:83:48:6e:ce:3f:70:c0:88:f2:6e:73:
bf:7e:1e:02:9e:01:79:6a:98:24:f7:ef:e7:42:95:ed:67:dd:
24:ba:c7:ef:43:84:2c:cc:f0:c7:28:d6:dc:3c:68:d3:63:5b:
66:32:56:54:5a:a6:af:9e:91:0e:2b:f6:20:0d:61:50:5e:60:
b7:68:71:e3:fc:80:3a:dc:dc:95:1a:30:31:07:0d:3f:e4:f3:
73:e0:4b:08:b9:3a:89:76:78:21:48:09:c4:5e:ab:cf:7f:54:
98:0f:23:70:df:e9:34:fd:db:3f:b1:93:63:90:e3:c6:c2:d3:
0d:40:2e:a1:c4:3e:8b:cb:9f:d4:68:c2:f2:02:a1:ee:76:01:
bf:87:3d:09:f7:e7:3b:9f:88:4e:f4:a5:ab:48:33:58:21:22:
07:58:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:25:20 2026 by rpki-client