
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier: 9KVb8bjcZ5FsF58CeNRiQIgsynhPHFRP9+e3MUR6B48=
Subject key identifier: EA:BA:14:BF:1C:53:60:49:1B:7C:34:3F:75:D9:99:85:86:07:50:60
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number: 67
Signing time: Sat 13 Jun 2026 08:05:47 +0000
Manifest this update: Sat 13 Jun 2026 08:05:46 +0000
Manifest next update: Sat 20 Jun 2026 08:05:46 +0000
Files and hashes: 1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: HrILlzrB7ddGrt0vGKmdBZckgKN9PoZpd2fBqY4AkAM=)
2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Validity
Not Before: Jun 13 08:05:46 2026 GMT
Not After : Jun 20 08:05:46 2026 GMT
Subject: CN=6a2d0f5b-cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:8f:c0:15:e8:c3:37:73:e4:c1:fb:05:f7:
fd:03:a7:2b:3d:e1:06:cc:95:4f:15:26:55:6d:ea:
89:c5:11:85:f3:a5:10:28:5f:e8:68:7d:8c:1d:b9:
e3:f1:ea:c7:d8:55:5e:0a:17:33:c1:c4:28:d9:cb:
ec:60:d6:cd:24:01:44:de:47:b7:4d:70:9a:69:44:
a7:16:68:60:34:b8:aa:c4:1a:fb:64:19:1b:a6:72:
b3:e5:41:95:c1:34:a4:82:9b:52:81:ee:31:e7:58:
c1:6f:2a:d9:53:1e:e9:2d:88:a6:1c:38:4e:5f:31:
3d:0a:fb:64:1f:be:e7:7f:3e:b3:ed:7d:f5:64:6c:
64:48:ec:1e:ab:19:41:7a:d7:6e:7b:65:2d:da:8b:
19:00:78:9e:14:a4:1d:eb:94:cc:22:a0:18:cc:da:
d3:4a:fe:42:0e:cf:29:ef:4e:67:12:be:e1:b7:31:
78:32:3e:ff:33:46:a8:c8:82:b3:c6:59:17:5f:56:
39:5a:52:1f:90:d5:32:cf:66:fb:e9:9b:4a:bf:3a:
1e:a2:5d:99:bb:ea:e3:92:fe:0a:33:00:0e:25:58:
83:fa:cf:3b:ed:19:a9:72:35:c3:5f:20:5d:c7:80:
5e:a5:ad:90:94:22:e4:8f:20:30:28:7f:3f:87:ec:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:14:BF:1C:53:60:49:1B:7C:34:3F:75:D9:99:85:86:07:50:60
X509v3 Authority Key Identifier:
keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:b9:77:8b:29:af:e4:6d:f2:83:4f:19:c4:22:45:f4:d1:
51:e6:a4:34:66:7b:d9:44:d0:68:d9:8e:00:e9:39:37:46:c4:
d9:58:71:93:c9:83:5d:da:ff:65:04:73:52:39:f1:28:c1:1b:
c0:4f:a9:0a:d2:ed:91:07:6b:4d:53:2d:a4:4a:af:e4:69:21:
b2:9b:67:8b:dc:35:59:02:c3:7c:bf:69:ec:66:c5:20:dc:6c:
16:c3:7d:ae:15:38:fd:9a:40:f0:67:db:52:8f:71:d6:1c:84:
46:72:63:7c:c1:06:b4:2e:5d:5e:ff:62:2b:13:c1:50:52:3b:
b7:dc:0a:76:a6:26:3f:83:d3:31:b4:92:c0:d9:ce:ba:6c:90:
88:5e:e5:27:55:2f:11:81:f9:1f:23:33:e7:41:cf:fd:5f:f6:
d0:9a:21:ab:5c:69:f6:15:11:39:d0:ea:99:ac:79:ca:e7:4e:
5e:54:b9:a4:bc:2c:4d:23:a3:07:ed:49:71:24:0f:a3:a1:2e:
60:be:7f:d0:b2:91:25:ee:b3:d1:4f:86:98:62:cc:df:06:85:
41:7e:6f:53:b7:99:05:7f:14:73:90:0b:09:58:b1:47:fd:5c:
03:19:3e:da:bf:39:2a:db:50:70:59:2b:13:42:82:4b:35:9e:
8e:0c:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:05 2026 by rpki-client