
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
File: hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft (raw, json)
Hash identifier: c6KpB/NUks1uJoqPVMVRDAI7jv7Daj8rTFA4y7jkm0c=
Subject key identifier: 7E:3F:CA:49:8F:F6:13:1E:79:65:1F:39:D8:39:A0:82:43:C4:CD:8D
Authority key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
Certificate issuer: /CN=A91BF578/serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
Manifest number: 09
Signing time: Mon 27 Jul 2026 11:34:40 +0000
Manifest this update: Mon 27 Jul 2026 11:34:39 +0000
Manifest next update: Mon 03 Aug 2026 11:34:39 +0000
Files and hashes: 1: hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl (hash: zTNbWnldAzovlHMmsK7bFMtShhgeMLdjtuTfKgeUmUY=)
2: EDD96AAE7F4811F19E46568395A30FBC.roa (hash: Wmt85iJENOVXXmg3SFuE0XKh364Rsjv2WardtpRUQfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl
rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
Validity
Not Before: Jul 27 11:34:39 2026 GMT
Not After : Aug 3 11:34:39 2026 GMT
Subject: CN=6a674250-ce5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:22:13:e8:71:e9:53:f7:5b:20:6d:4d:5d:
df:e9:ee:38:4b:ad:c1:a0:4c:66:9c:1a:4c:55:2a:
3e:a6:6c:fe:e2:ae:8d:41:b7:76:f1:78:41:ab:1b:
1b:47:71:e1:7c:ef:65:84:37:e9:79:ab:9f:62:4a:
66:23:20:f6:66:60:a5:09:df:0c:d5:e8:93:2e:fe:
2c:14:ac:17:7d:81:36:99:59:f7:43:9d:17:58:3d:
85:b9:01:54:41:49:c5:b5:b4:fb:1d:07:05:44:0b:
70:fc:bf:49:04:38:76:b7:9b:c7:76:fc:bc:d3:c6:
0e:cc:9f:c4:81:c5:e9:d4:2f:a7:7e:58:bc:f0:c2:
19:af:da:89:d0:87:7c:5f:6e:ef:dd:82:99:0b:da:
4a:bf:42:60:53:a2:5f:a7:30:41:8e:8f:b9:a2:ed:
7a:be:2f:27:4b:63:bf:42:3d:ab:07:1d:30:d0:e6:
89:61:69:69:74:83:6d:77:e4:16:f1:c2:3e:03:2d:
c2:b8:22:1b:31:32:8c:fd:b4:d8:bc:c8:2f:68:2a:
fb:42:14:e3:05:b3:4b:87:17:9f:00:37:9e:6d:a3:
c3:c8:ab:ac:a8:e5:1d:20:46:f4:f1:8c:eb:62:68:
1b:e0:3e:e4:d0:47:5e:73:83:29:4b:36:07:63:bc:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:CA:49:8F:F6:13:1E:79:65:1F:39:D8:39:A0:82:43:C4:CD:8D
X509v3 Authority Key Identifier:
keyid:85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e9:90:6f:a3:80:f4:c0:4f:ce:14:f8:c0:88:22:7b:b1:94:
de:1e:37:9b:5e:88:e1:dc:61:54:31:98:f3:7d:7f:b3:ba:39:
64:00:9c:8a:1b:a5:b7:6f:f3:a3:e4:ff:df:af:d7:bc:b2:76:
80:bc:25:f4:1e:93:0f:f5:03:0c:e9:de:d6:8c:bc:b1:a2:7c:
06:ec:c1:21:e1:8b:13:cb:a2:d8:15:c1:cf:e8:77:9b:79:ac:
8a:33:10:b9:d6:e4:e4:f1:18:10:6b:1c:9e:fc:96:f9:d9:77:
86:9c:5a:ae:8a:a1:df:99:33:9f:f9:e8:bc:44:a3:2a:4f:16:
53:93:aa:dd:19:3f:52:41:f4:e6:43:04:0b:aa:75:75:ff:cb:
c3:14:9a:44:45:3e:1d:ce:67:ec:81:28:25:8f:60:a3:42:e8:
c0:79:b4:e9:12:30:3f:6b:ba:43:75:0c:f3:68:0f:8e:66:31:
2c:2e:f5:44:a9:97:f8:50:ea:4e:7d:95:e3:48:59:95:3a:0a:
8e:c6:bd:a1:b3:98:9c:4c:e1:01:bc:48:53:89:e0:b7:35:2e:
21:e6:cf:04:9a:27:64:d6:cf:a4:78:c6:f0:e9:cc:14:81:12:
53:91:ee:62:e4:cb:0f:0d:ec:54:50:31:d3:d5:5d:39:86:5b:
6c:c9:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:17 2026 by rpki-client