
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier: YkO2E12wTGzvi7ZNXrcBlsV83jaIrNgb5pgZgUyOC3M=
Subject key identifier: 3A:FF:53:FF:14:7A:46:F7:83:DB:91:9A:6B:86:6E:58:C0:C9:FD:BD
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number: 02B2
Signing time: Mon 27 Jul 2026 02:48:15 +0000
Manifest this update: Mon 27 Jul 2026 02:48:15 +0000
Manifest next update: Mon 03 Aug 2026 02:48:15 +0000
Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: Wdm9ZStuON1gA22OZ9p8/FgJxm7ccgnQ+G78WB26DBg=)
2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Validity
Not Before: Jul 27 02:48:15 2026 GMT
Not After : Aug 3 02:48:15 2026 GMT
Subject: CN=6a66c6ef-13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:0e:60:90:89:74:b6:66:e6:a6:ec:f3:d1:
e2:ff:10:d4:2e:29:14:6e:14:d1:c6:02:30:0c:89:
dd:36:83:8a:32:bf:aa:e6:c6:27:0c:2e:07:ec:dd:
3e:89:4a:26:63:59:bf:42:a4:45:f7:f1:9d:9b:b8:
13:5a:84:09:d0:13:0d:e4:34:49:84:6a:f0:e2:9d:
6d:28:4b:de:98:a8:ac:20:8c:2b:02:db:f6:a5:7a:
b8:20:a2:f8:c8:a5:47:3f:99:a5:46:d7:c9:9b:46:
5d:7b:fe:c6:91:12:e8:a3:18:15:d1:16:20:fe:87:
92:9d:b2:22:82:10:fb:c6:02:c7:a1:c4:b3:21:06:
36:f0:b7:bb:e5:2a:18:51:13:1c:c9:f2:d1:fd:5f:
48:c9:03:6f:74:c6:7f:58:76:7c:3e:87:1e:3c:ad:
ff:c7:f2:e7:11:0d:f0:d1:ad:d7:ae:4f:5e:04:a5:
ba:69:d2:35:cb:72:0a:e0:03:0a:f6:88:5d:41:86:
77:43:03:ef:fa:fd:ab:b8:b7:43:da:0c:fe:fd:29:
ea:1f:15:42:d2:0e:85:23:03:8d:b3:17:be:9e:29:
6f:21:63:1f:f2:fa:eb:dc:db:e3:02:1b:60:ee:ac:
47:04:13:fd:de:b4:bf:52:3a:53:3f:9f:cb:7c:34:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:53:FF:14:7A:46:F7:83:DB:91:9A:6B:86:6E:58:C0:C9:FD:BD
X509v3 Authority Key Identifier:
keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:55:e8:63:ce:5c:17:1c:9d:ec:62:15:6f:91:34:24:5a:
80:52:79:63:0c:63:e2:e4:98:9e:90:b6:74:cc:9c:97:d5:1d:
2d:ee:aa:ce:5b:4c:51:2d:ec:0d:60:e3:ca:c6:81:92:1f:f3:
7b:62:01:d3:d6:9c:ab:bc:e7:08:03:02:5f:ba:f7:69:93:2d:
af:61:e8:36:31:8a:87:1f:3f:0e:aa:ab:4b:75:f4:93:b7:18:
e9:87:31:c4:2c:a1:16:06:37:ef:5e:19:28:f6:13:6c:74:b2:
de:40:e8:f7:67:62:f4:f4:89:a2:19:1a:3e:e0:21:b0:a1:5d:
a8:99:56:f9:9c:dc:33:b7:86:bf:de:c1:9e:89:3c:17:90:fa:
53:84:2d:f0:f5:f3:bd:b1:69:22:2c:3a:d3:ca:d2:10:0c:bc:
f5:24:84:41:ba:c0:48:e8:ab:78:91:3f:7b:a7:50:cc:6f:9a:
f7:c0:93:48:34:f8:94:58:91:59:35:3f:a7:8e:8e:40:26:7b:
b8:de:36:59:b2:fb:26:a8:45:18:61:7a:4d:d7:f8:b3:68:88:
e0:3f:96:da:b6:6f:da:5b:b0:e1:0e:84:bc:19:52:20:4b:f1:
07:c5:2e:05:58:6f:e4:92:77:82:75:46:9d:de:2a:f3:2a:a5:
d2:3a:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:49 2026 by rpki-client