
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: p1sb1nacRUIvs/zcG2btyzvayuAM0t+hhEXTcTkeQmI=
Subject key identifier: 68:F4:3F:B1:0A:AC:A4:1D:6E:49:60:8F:73:EC:23:82:27:CB:78:F5
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0BE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0BD4
Signing time: Fri 12 Jun 2026 19:02:28 +0000
Manifest this update: Fri 12 Jun 2026 19:02:27 +0000
Manifest next update: Fri 19 Jun 2026 19:02:27 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: intdaGfwgtxNYwXvKHB2qB1FVgblvX034DOkjJ9Qsgc=)
2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3046 (0xbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Jun 12 19:02:27 2026 GMT
Not After : Jun 19 19:02:27 2026 GMT
Subject: CN=6a2c57c4-f8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:5a:17:3d:c2:81:75:be:cd:3a:e6:3f:20:
f3:98:33:25:02:05:4f:31:a2:f5:29:8b:e2:9f:b2:
6a:d1:b8:f1:f0:3d:68:89:00:88:47:10:94:fd:4a:
06:73:d2:b5:85:57:91:40:86:06:16:84:f7:46:40:
0f:f7:e8:ae:d7:e6:24:ed:9e:4f:74:06:20:1b:9e:
26:9c:27:3a:77:1d:21:90:64:9a:9f:5b:73:54:ba:
22:84:ea:7d:dd:0c:1b:c0:ae:52:7b:59:43:8a:8e:
54:4f:b8:db:10:35:66:ef:53:c8:44:b7:b0:b4:bc:
33:ba:6f:b5:4f:93:16:80:a2:d4:bb:63:7d:3c:60:
d2:83:1f:69:4a:1c:17:03:a2:e7:0e:3f:75:ad:c9:
32:c9:83:38:f8:35:ec:c9:54:f9:42:d4:e2:90:23:
86:02:01:7c:e1:4b:bd:f9:aa:c3:79:0f:bd:56:d6:
a4:80:35:5f:b5:95:85:34:03:97:b7:1e:85:57:2c:
fe:92:d0:8d:36:7b:66:4c:5b:82:fd:67:37:50:b4:
37:a5:16:b8:68:8f:3b:0f:a7:cf:3b:72:b9:cf:4f:
d2:fe:9d:32:82:31:ab:6d:78:14:33:d6:2b:b9:4d:
4d:18:42:99:3b:27:d6:c8:b8:28:ee:28:b3:ad:43:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:3F:B1:0A:AC:A4:1D:6E:49:60:8F:73:EC:23:82:27:CB:78:F5
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d9:6d:00:cd:7d:2d:78:48:be:b7:3e:18:cb:e6:7f:1a:fb:
c2:ac:b7:a9:f8:72:59:ee:f2:3f:e2:89:10:f2:04:bd:72:41:
ec:b8:5a:24:15:1a:8b:23:cd:0c:2a:4c:8f:39:e5:1a:ba:08:
d2:e8:c3:db:c7:f5:ab:a2:1d:f3:0c:c3:e6:21:07:22:49:01:
b1:78:a4:60:8f:7b:41:15:11:45:a6:a6:42:b5:1d:bc:29:47:
11:19:b8:8f:eb:8d:5c:29:c7:39:6a:46:00:d1:53:33:f3:fa:
6c:bd:b8:d8:d1:57:12:cb:ad:aa:7b:cb:7a:42:2c:84:f9:d5:
05:c4:a1:69:45:82:a7:e7:87:6f:36:e4:a0:b2:74:56:e0:4a:
33:e9:27:ed:38:27:22:d1:f5:b1:e9:d3:0e:0c:84:7a:bc:7c:
7f:3c:19:f3:0f:1a:df:3a:44:30:6e:a0:cd:9f:ee:a5:1c:55:
c6:cb:8d:87:7d:65:cc:ae:88:95:5e:21:29:3e:21:7f:5a:d4:
40:70:8c:43:8d:12:b6:82:31:e5:f8:c7:f4:9a:ce:49:aa:be:
81:26:db:d5:d3:8d:eb:f1:11:8b:4b:75:de:44:7c:a9:db:c8:
d9:a5:45:41:be:6d:19:ec:04:2b:38:56:a5:d9:42:88:82:7d:
52:76:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:46 2026 by rpki-client