
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
File: P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json)
Hash identifier: uLZrdGGsk933iWV/7UIA7/ANfvZblINatBbjzdUK0JA=
Subject key identifier: 6B:F7:58:96:E5:92:73:E0:D7:0A:0D:BD:9A:4B:21:01:87:D1:06:57
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial: 0BDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
Manifest number: 0BC7
Signing time: Thu 16 Apr 2026 18:52:39 +0000
Manifest this update: Thu 16 Apr 2026 18:52:39 +0000
Manifest next update: Thu 23 Apr 2026 18:52:39 +0000
Files and hashes: 1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: GSne6hQoe7VU7tpi4afrlIL1day98L8cwSmvV25Rr9Y=)
2: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: pKr8yU46bzkgepRuOhx0qrjQP+ajOBOvuvImXMjNl5M=)
3: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: PFnTC09cAoqCoBorNAGMNJ3mW6exO1vhuxEz+nu9KcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3035 (0xbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Validity
Not Before: Apr 16 18:52:39 2026 GMT
Not After : Apr 23 18:52:39 2026 GMT
Subject: CN=69e12ff7-b2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:1d:3b:7b:fa:d2:aa:fd:f5:2a:55:0d:28:
d5:f5:e8:4c:55:b0:c4:2a:d6:6d:56:f2:27:9a:f3:
39:41:5c:69:0e:e3:1e:64:bc:ca:a4:f8:7b:74:ec:
64:70:14:c8:f8:e2:e6:40:6c:cf:17:60:9a:fa:06:
12:96:3c:c0:fd:6b:09:ee:8e:80:7f:0b:4d:3f:b6:
e0:2b:6f:56:c2:54:ca:63:54:60:13:9d:eb:2d:72:
d8:3f:4c:93:5c:67:c5:52:b3:eb:18:a8:4d:88:64:
43:e5:be:72:5f:11:2a:cd:3f:bb:4a:0a:46:a3:30:
49:cc:41:7f:f1:75:fe:c7:b6:8e:f9:ae:cd:b6:4b:
5e:ea:eb:a3:9e:aa:db:2f:ec:d0:7d:a4:a2:23:ec:
55:bc:0e:a0:61:11:ab:b3:fc:99:b3:be:d9:4e:5b:
e1:92:c8:9b:fb:2c:63:49:ef:63:1d:57:21:2b:68:
8e:b0:b1:33:c2:ac:0c:b9:db:f7:86:73:01:e4:cf:
33:05:35:5a:23:40:77:79:cb:5d:dd:c4:83:90:c2:
7b:79:87:12:78:f1:27:52:a2:0e:cd:48:73:cb:2b:
fa:9f:d6:a6:50:2f:1f:72:3a:06:85:21:ea:b1:2c:
e4:3f:d7:1b:c8:a8:27:38:f1:8d:db:49:6c:cc:67:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:58:96:E5:92:73:E0:D7:0A:0D:BD:9A:4B:21:01:87:D1:06:57
X509v3 Authority Key Identifier:
keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ae:98:a4:3b:b2:aa:ea:49:80:da:77:c1:9c:e0:68:f5:b2:
30:57:d0:79:f4:f1:95:bf:ea:29:d2:fc:b2:48:42:14:53:72:
b9:61:fd:27:8c:ed:7b:57:2c:c3:a3:2e:e6:0e:8b:49:f7:91:
52:fc:47:2b:0f:04:24:f6:ee:37:d7:11:5c:2e:74:c5:20:f0:
76:9a:78:39:28:2a:ef:7d:c3:38:8e:54:96:3f:65:f1:61:e9:
0a:fa:73:c8:42:85:75:11:34:bd:07:3b:f0:4b:39:0e:04:b3:
58:67:36:ae:85:73:ba:3a:67:d2:55:f4:55:a8:51:e5:9a:0a:
51:ab:fe:16:1b:d3:de:aa:d6:77:6e:83:22:63:5f:e5:c8:0a:
49:8d:63:8c:bb:97:26:c5:fb:cd:f9:39:74:d8:32:d7:c2:a1:
ae:3c:76:51:fe:e3:99:c5:28:e2:92:36:5b:27:37:73:4c:1f:
5c:cf:fe:e1:0f:85:2e:72:d6:d0:b9:bc:6a:e4:65:05:10:4a:
68:33:78:62:c4:c7:45:07:47:7d:22:44:1e:57:b7:97:7c:60:
43:2d:f3:bf:22:69:fe:22:bd:52:6a:2c:fc:ea:2a:47:77:4d:
c4:ee:c9:54:04:fa:54:1e:09:e2:66:03:ea:39:1f:ba:f3:72:
c6:49:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:44 2026 by rpki-client