
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: kkKKOce8rPlg9WB7/TQDrB5L5wQbEL9Ku8mc73l/kc4=
Subject key identifier: 87:AA:65:0E:95:C7:80:82:64:DC:ED:3F:2E:3D:A2:E4:52:DE:F7:C7
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0BEB
Signing time: Tue 28 Jul 2026 19:13:01 +0000
Manifest this update: Tue 28 Jul 2026 19:13:01 +0000
Manifest next update: Tue 04 Aug 2026 19:13:01 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: d3nccbCnjkaZp+DM11Mklw1rn0usvg79JsaaOTobPlA=)
2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Jul 28 19:13:01 2026 GMT
Not After : Aug 4 19:13:01 2026 GMT
Subject: CN=6a68ff3d-eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:c1:c7:d1:13:88:6a:df:89:93:41:fd:19:
46:84:f4:d3:37:81:0f:87:6a:33:f6:a3:83:fc:d2:
ed:fe:05:2b:08:48:f4:6b:96:f1:20:70:3b:77:9a:
a6:ba:4a:83:5b:f9:ba:29:34:e8:14:d4:ac:52:8c:
99:2a:85:38:56:37:3b:36:05:8d:24:9c:c7:76:04:
59:2a:fa:0e:73:f8:19:73:d6:a4:d9:b0:91:cd:14:
75:fc:5e:98:11:4a:ad:06:1f:17:81:9c:a3:87:df:
0b:74:cb:1b:77:42:d1:7e:dd:00:d1:f0:88:0d:d9:
b5:4d:58:05:e1:ea:71:af:da:78:94:35:65:45:5d:
5b:3a:2a:31:5d:94:1c:b0:cb:6c:0e:99:cc:3a:d0:
10:5b:70:9c:e5:82:f7:1b:ec:97:75:54:e8:63:f3:
13:64:20:3c:01:b1:3e:b8:48:6e:05:c6:69:bd:36:
5a:83:48:2c:86:d0:7c:35:89:0f:46:08:cf:ba:2d:
13:af:97:d1:d1:0f:54:65:f8:4a:6b:73:0e:29:1b:
11:35:29:49:08:b9:23:c2:83:d9:5d:62:46:42:f0:
e9:97:29:e1:43:73:03:2b:8e:a6:dd:34:49:3a:c8:
6c:89:31:ae:a1:fb:ee:48:4a:ca:18:02:df:77:55:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:65:0E:95:C7:80:82:64:DC:ED:3F:2E:3D:A2:E4:52:DE:F7:C7
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:69:a8:f1:03:c0:b4:87:3d:73:67:17:ee:97:61:96:9f:34:
8f:20:cf:09:de:00:34:d5:dc:19:59:ff:47:ab:29:24:55:eb:
97:38:65:bd:fe:41:0d:e7:d8:b2:f1:9d:9e:2e:20:43:1e:0c:
b1:45:b8:8f:91:e0:54:c4:d0:c4:04:5e:b7:c0:9b:ca:11:d5:
f6:ba:bd:ec:fd:43:23:5c:c9:de:ce:ba:7d:d3:01:ca:05:c9:
aa:9f:20:41:20:ec:a4:1f:33:c6:a6:29:ec:ab:c2:ab:13:94:
89:26:bc:7c:56:2a:78:50:37:6b:24:14:83:2b:f9:a7:4e:56:
18:3b:33:ba:89:5a:e2:99:e3:9e:71:9d:e2:6b:be:79:ab:57:
c3:a9:5e:61:51:d1:ac:9a:4f:2b:d4:c7:10:f0:ab:b9:8f:a8:
bb:98:6c:62:2b:82:18:19:7b:a1:26:83:b0:f2:d3:1d:cd:af:
8f:53:b5:7a:25:67:8f:58:e6:1c:66:5b:ab:2c:3d:4a:e1:cf:
ff:8a:14:44:6c:87:39:5a:a1:ba:f4:b7:a1:1f:2b:d2:93:c2:
fb:a3:3b:31:1d:32:72:ae:9d:2d:d5:56:78:95:3d:bf:51:9f:
b2:be:bf:3a:09:59:47:d3:e4:4e:8e:31:e3:c1:63:3e:79:e7:
48:41:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:20 2026 by rpki-client