
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier: LXAaBOTMT0G34VRT8tcMdbtQOsN3/TLOG1USeSjIVZU=
Subject key identifier: DC:6E:70:8B:13:1D:02:F6:0C:51:CD:19:00:91:5E:86:29:6D:CB:46
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0BC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number: 0BA5
Signing time: Tue 28 Jul 2026 19:23:07 +0000
Manifest this update: Tue 28 Jul 2026 19:23:06 +0000
Manifest next update: Tue 04 Aug 2026 19:23:06 +0000
Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: SYiQgU4sjE9OBJ+0hnakbb7EXC5nPV18Zejr1DvvA00=)
2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: /1SCEQVpr9moafPfMLqizcxn36EGeIZ1g7YGNLkjf1E=)
3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: OKEj9HXa1f9g4uR6sVBPFlkPnTkz7D9Cnlvm3kiY8Tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Jul 28 19:23:06 2026 GMT
Not After : Aug 4 19:23:06 2026 GMT
Subject: CN=6a69019a-da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:09:ac:52:eb:c6:03:55:73:0c:cd:9d:fd:
5e:b1:71:c5:c2:52:e6:e6:e0:73:bd:81:f6:a5:9f:
e9:1f:f4:1c:e9:8e:f2:66:72:c0:5d:c3:19:69:29:
b4:43:99:28:a1:4b:99:d5:57:39:8a:dd:13:5c:89:
28:af:99:65:dd:7d:99:a5:1d:0e:c7:6e:9d:ea:e4:
0d:15:fc:be:a0:9f:06:7c:41:82:cd:28:1f:18:99:
2d:04:6a:d6:c1:b0:76:60:f5:dd:1b:ab:54:4e:e2:
2f:34:2d:15:5f:c8:61:d0:39:31:27:69:d7:68:b2:
56:1b:86:9c:d8:2f:f5:65:85:89:d4:7f:83:73:84:
7e:19:34:0a:51:9e:5c:dd:7f:f3:ee:86:59:90:1e:
2b:5f:84:95:6a:de:5c:ee:6c:ee:e3:57:7f:ef:d8:
9b:e2:bd:a0:b7:2d:72:e6:8c:65:55:a1:c9:8d:38:
80:e6:c3:0b:93:dd:79:d5:d0:78:44:cb:fe:2a:d1:
21:24:fb:3d:e3:a0:5f:ce:17:4d:dd:4d:99:6e:84:
9f:d1:53:af:e6:ad:97:0e:f1:3a:29:62:f7:ad:d0:
12:ac:50:34:00:64:6e:dc:44:c5:31:90:68:51:2e:
3c:af:60:da:a4:ee:7c:8e:12:04:1b:17:1d:57:80:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:70:8B:13:1D:02:F6:0C:51:CD:19:00:91:5E:86:29:6D:CB:46
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:43:68:65:45:50:68:dc:77:47:e2:56:5f:4d:85:5b:69:
c3:54:72:01:fc:36:a2:9d:a8:8b:ea:3c:6d:d1:0d:fc:1a:5b:
6f:2c:54:a6:f4:ed:c7:35:67:36:34:ab:4c:a3:92:66:44:43:
c8:f2:e2:c3:3e:09:cc:48:05:8f:38:27:10:da:cd:95:f2:de:
65:38:17:11:8a:fe:6b:13:82:12:ee:3d:fa:8e:f4:89:11:27:
d0:54:16:8d:44:dd:e3:2e:af:9e:d5:a6:b3:14:4a:77:4e:77:
c6:1d:cf:1b:78:a2:b2:d8:0c:d1:5a:91:9a:21:19:8f:d2:2d:
a0:b8:eb:6a:ba:78:6a:25:ba:77:ad:61:cb:7d:64:89:f3:c3:
c5:ce:1d:a9:ae:7b:d6:8c:f2:72:93:8a:c6:99:77:3a:1c:bf:
17:a2:08:05:11:84:8d:8f:6a:f1:d9:d6:6f:db:f0:23:3a:2b:
eb:47:6a:ca:9c:30:72:15:a9:c5:56:58:ec:53:79:0c:48:9d:
41:f9:16:73:07:bb:3b:ff:71:68:3a:71:3a:63:9c:f3:24:fe:
d7:ba:ed:48:79:e1:b7:7d:8d:a2:24:4a:82:6a:20:a9:05:56:
09:7a:d5:ab:9c:a4:0b:d7:0d:e8:6e:cd:f1:65:d8:3c:5a:d3:
02:3a:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:26 2026 by rpki-client