
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json)
Hash identifier: TXhDZD6aXe+eotfRU0r2nqjNgWcfituT96ucd9/TvZw=
Subject key identifier: 5B:CE:B7:B7:FA:CB:FB:8F:29:F3:41:FC:23:CD:97:62:0A:78:5B:6D
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
Manifest number: 018E
Signing time: Mon 27 Jul 2026 06:09:40 +0000
Manifest this update: Mon 27 Jul 2026 06:09:40 +0000
Manifest next update: Mon 03 Aug 2026 06:09:40 +0000
Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: PavSzYbQzOTTTjkGgFLAAR23snMyXrJ7ikY4jAwspYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Validity
Not Before: Jul 27 06:09:40 2026 GMT
Not After : Aug 3 06:09:40 2026 GMT
Subject: CN=6a66f624-3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:82:b5:dc:99:e1:ec:20:ea:6e:a9:55:dc:
79:f6:aa:ed:46:ed:01:27:68:88:e8:da:58:3e:90:
a1:ef:62:69:89:66:03:a4:f8:c9:c8:6a:d5:3d:f1:
11:21:5d:64:38:af:02:14:ea:29:00:91:27:b3:63:
49:3f:5f:f1:ab:2d:da:0d:7e:e7:37:5a:69:fc:2c:
e2:0b:bd:6d:ce:ff:5a:a4:bc:23:97:55:ce:a2:c8:
6e:e2:35:a1:41:e7:6f:ff:19:fa:7e:f1:ff:c1:6b:
de:5c:23:e1:15:27:9d:7c:f2:57:db:0f:e8:63:a8:
c3:97:ed:a6:e2:12:62:26:8d:b4:be:cc:34:0a:b5:
59:c3:12:3b:c6:28:01:65:7d:66:78:a6:da:23:a8:
c9:e3:c6:42:02:48:f7:df:1f:2d:2d:96:c6:b4:6c:
6a:57:78:be:5d:d1:50:ec:d1:64:60:f0:4b:31:32:
29:fd:11:28:6c:0e:24:03:da:b0:25:6d:41:16:8f:
93:39:24:63:a5:78:fd:6d:ae:f6:31:cd:58:5d:a8:
8f:65:70:40:a8:f4:c3:8d:38:8a:c8:a7:f6:63:76:
ad:e0:50:22:70:76:e8:9f:d9:d4:e2:41:84:44:b9:
15:3c:74:55:7a:ea:a5:8a:d8:0a:82:cf:a1:e9:1d:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:B7:B7:FA:CB:FB:8F:29:F3:41:FC:23:CD:97:62:0A:78:5B:6D
X509v3 Authority Key Identifier:
keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:40:4a:fd:6b:a4:2a:15:69:1c:72:ca:27:b5:98:cf:70:
10:8a:80:b7:14:13:f4:47:e8:07:02:ea:8a:b7:10:89:6d:8b:
b9:90:1f:d2:da:b5:c4:13:8f:51:11:42:cf:8a:72:71:24:48:
bb:1c:63:2a:91:be:25:30:e9:a3:54:84:2b:83:53:1f:74:61:
79:69:cc:b4:03:b9:e2:14:32:cd:a3:a1:36:ab:c0:c9:27:62:
1a:9e:44:58:c7:fb:8e:f1:8f:f4:5e:39:d7:7c:f0:5d:8e:92:
e1:a7:b2:65:89:2d:96:76:91:91:56:22:11:be:cf:7e:42:39:
5a:00:43:2e:d5:6a:72:3a:1f:f3:27:e0:9f:8a:88:2a:a6:9a:
41:70:a9:a7:bb:16:b6:82:da:c9:14:c9:60:7a:b4:ed:43:14:
44:12:a8:53:db:2d:15:0e:7d:a8:40:98:dd:18:9a:0f:6e:d4:
7e:65:12:26:89:33:f3:61:b4:9b:79:0a:49:07:e6:ad:22:ad:
98:12:6e:c4:38:49:0c:07:b0:81:a8:aa:93:1c:af:e3:a9:45:
dd:24:26:a2:22:af:1f:2f:bb:e2:c1:fb:8e:30:58:43:eb:80:
22:20:25:e6:64:c4:32:be:06:3f:d5:e1:ff:78:73:00:73:dd:
9f:3a:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:43 2026 by rpki-client