
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json)
Hash identifier: gAx0+v31F3dRnE4z9xDZNXFKDoFnpeuvODJzv0EH7xo=
Subject key identifier: 4B:AA:B1:5A:6E:EB:94:29:B0:B8:AA:0D:74:36:E5:A4:E5:A4:97:AB
Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
Manifest number: B7
Signing time: Mon 27 Jul 2026 09:11:43 +0000
Manifest this update: Mon 27 Jul 2026 09:11:43 +0000
Manifest next update: Mon 03 Aug 2026 09:11:43 +0000
Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: kxS5OjNiQ2FQydvHNbDEAawV15YYoCUtPTp/IuR2TMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Validity
Not Before: Jul 27 09:11:43 2026 GMT
Not After : Aug 3 09:11:43 2026 GMT
Subject: CN=6a6720cf-abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:7b:48:fd:11:32:f8:72:43:1c:e4:5c:df:
b5:ea:8d:a7:45:fe:d2:2a:d4:ff:fe:c7:8b:b4:89:
18:ad:b1:fd:7a:50:52:54:8f:99:57:16:48:71:8a:
2b:87:89:c9:b6:74:34:52:2a:73:98:c7:9c:86:5c:
36:e2:8a:62:2c:9d:a2:dc:1f:b1:b0:25:bc:6d:60:
20:34:0e:18:1c:38:c2:39:d7:c3:f9:f0:db:79:f8:
79:53:aa:03:92:f9:13:97:11:4b:a2:18:6f:43:d9:
8d:45:84:a5:0c:6b:4a:be:7e:dc:b8:ff:91:9b:c5:
e2:f5:a1:4f:20:13:e1:8f:0b:6c:20:ba:c9:81:1a:
c7:1b:a2:72:56:df:74:69:3b:18:c4:c3:a7:ce:2d:
d0:72:4f:ac:48:58:3e:78:e1:eb:bf:8d:67:91:e8:
e4:f3:7c:59:9a:f3:83:6a:bf:97:11:c1:59:c6:24:
b0:ea:45:73:9e:79:87:2c:24:57:18:36:fa:e0:0c:
b6:4b:a0:4f:be:7a:c3:14:82:ec:45:7b:f5:ff:ee:
0a:ee:2e:6d:70:12:98:76:48:f0:35:5c:1e:d3:12:
b9:89:8e:5c:0e:87:ce:11:56:e8:95:3b:f8:d0:08:
07:8a:8a:13:f6:95:07:97:83:0d:9f:e3:86:46:67:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AA:B1:5A:6E:EB:94:29:B0:B8:AA:0D:74:36:E5:A4:E5:A4:97:AB
X509v3 Authority Key Identifier:
keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:28:4b:68:e7:d4:f3:37:01:98:5a:96:52:e4:b0:9f:d8:
2f:26:b4:9f:15:87:54:01:24:1a:87:6f:79:de:ab:51:70:c3:
6c:57:d5:aa:67:a8:c8:05:b4:fd:b0:d1:68:7d:57:30:be:b2:
26:c1:3b:f1:8c:1a:56:19:91:e0:89:61:93:35:35:8e:da:89:
12:01:9c:11:39:a8:6e:9a:61:a3:e1:83:79:b5:d2:e5:bf:2a:
89:7f:a7:dd:49:c0:d2:61:81:44:5c:83:e2:53:b9:81:da:17:
39:a8:d6:ad:19:69:12:24:a6:12:54:a4:82:af:6e:75:66:09:
6d:d3:59:e1:32:a9:c5:16:08:0d:ae:18:92:e9:6f:67:f6:6a:
14:e1:04:b1:bc:f9:c1:9c:66:68:cc:76:47:1d:18:5d:c5:26:
4b:da:91:2a:50:6f:cd:d9:b7:ac:7e:46:de:27:8b:47:95:13:
79:00:6f:ed:ad:ea:dc:bb:6b:de:3b:b5:3e:d8:95:1e:3b:09:
8b:f1:9d:47:e3:f5:90:a3:2d:09:56:5a:f3:8e:b6:7d:79:8b:
ba:dd:5b:bf:70:ba:22:88:4e:4a:df:0d:3d:93:13:71:e5:69:
91:63:25:9a:9e:bf:21:96:37:77:3e:f3:1c:82:86:17:a9:1f:
7a:bc:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:59 2026 by rpki-client