
$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: 9Nkb0VHyuVegTOm57hcS0bauaX8Us3Z7UJfNWCYmmV0=
Subject key identifier: 29:98:EC:3B:CA:A8:4A:19:2D:EA:5E:89:ED:B6:2A:75:98:42:1E:24
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 07D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 07B7
Signing time: Sun 26 Jul 2026 22:14:57 +0000
Manifest this update: Sun 26 Jul 2026 22:14:56 +0000
Manifest next update: Sun 02 Aug 2026 22:14:56 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: TMuiW8Vh3e2fzjt49rHb60o1OnTFQxK4JQo7/4QCUys=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003 (0x7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Jul 26 22:14:56 2026 GMT
Not After : Aug 2 22:14:56 2026 GMT
Subject: CN=6a6686e0-4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:32:3c:d2:d2:d2:44:60:ed:96:a9:cd:7b:
06:c2:ea:fe:9f:7f:16:a4:d0:8e:0c:d7:bc:7d:6b:
02:07:4c:4c:c3:94:95:0d:e8:d5:9c:78:67:b4:dd:
44:cc:5f:d6:42:2c:d3:a3:54:62:82:99:a4:16:2a:
72:93:ad:3d:8c:6f:91:d3:9c:30:04:ea:16:18:56:
f0:fd:2a:31:0a:bb:fd:a9:dd:c5:db:4c:95:ea:8b:
9c:99:a1:fb:b5:68:d3:ac:ba:e3:83:50:55:c5:33:
c3:5b:ec:58:3b:af:da:02:55:95:2e:11:1a:ec:de:
f1:71:56:67:c1:12:a8:23:fc:9c:48:2b:5c:9c:7d:
2f:5c:fa:48:a5:92:1c:e4:26:f2:7e:fc:c3:b5:61:
24:c6:9c:a9:89:9c:00:67:a5:e8:b8:94:62:c8:e3:
5f:8f:13:06:88:aa:77:0b:48:54:05:6a:de:32:2b:
cd:59:cd:fe:77:9d:a1:51:e8:78:8c:3b:f0:7e:85:
71:49:7a:fa:03:90:b9:c7:e4:59:f2:46:06:24:ce:
80:ed:de:99:cd:f7:6a:e4:4b:74:5c:a0:c9:51:d8:
bd:4a:59:2b:43:91:ef:ff:11:26:74:6b:92:78:4b:
ec:fd:3a:32:ae:90:6f:39:4e:28:b8:cc:9d:e9:0f:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:EC:3B:CA:A8:4A:19:2D:EA:5E:89:ED:B6:2A:75:98:42:1E:24
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:8c:2d:73:e1:f3:e3:41:81:25:7b:ec:46:17:c7:73:42:
66:46:39:d0:c9:85:1d:2d:c5:6f:46:b4:85:27:d9:7f:94:e4:
fe:87:af:8e:0a:5d:74:7d:89:17:2d:a6:29:52:ea:7c:85:1e:
6b:02:2e:86:a9:ae:b1:d6:cf:a6:d6:f0:fa:8d:7d:10:f6:fe:
06:db:04:96:9c:3f:87:1e:00:76:0e:aa:60:88:5d:a0:d8:59:
a1:9a:ab:2c:30:e5:9f:9a:34:e2:62:9b:8f:8c:b6:c2:6b:6e:
90:a1:9e:1e:ea:6d:a9:99:1e:de:fb:28:8a:71:78:35:d8:64:
fd:d2:58:d5:cc:f8:79:21:d2:6b:d3:a4:01:6f:3c:cf:46:1f:
f3:e4:30:63:3e:c7:94:c2:69:89:d2:e7:37:b3:06:69:10:b9:
b8:3a:3a:a1:e6:73:69:41:95:4f:b3:18:22:bd:61:2a:4e:e3:
c7:fd:ca:b0:a6:44:a0:4d:f1:db:87:a0:2b:45:36:63:22:79:
51:02:09:d8:98:51:0b:a5:7e:b9:35:bd:e8:d9:4d:e6:74:8d:
70:ac:b2:f6:2b:8b:ff:f6:ee:f6:12:69:e3:29:cd:99:8f:f3:
25:97:68:66:ad:9b:83:f9:6b:97:25:2b:cc:b6:69:4e:90:b2:
74:f4:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:23 2026 by rpki-client