
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json)
Hash identifier: wsNFmDfXkZVu2Xb2y9QtkqmO/enzpkNfakESv0rIpwo=
Subject key identifier: 6A:0E:8A:DF:AB:7A:BF:F6:7A:AF:1D:5A:55:76:EC:4F:27:A6:31:04
Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
Manifest number: 85
Signing time: Mon 27 Jul 2026 08:00:05 +0000
Manifest this update: Mon 27 Jul 2026 08:00:04 +0000
Manifest next update: Mon 03 Aug 2026 08:00:04 +0000
Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: hrKObN4cMPGs4Bv52xfzLgOxyi8QDDdScyMvYW5D0Zw=)
2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Validity
Not Before: Jul 27 08:00:04 2026 GMT
Not After : Aug 3 08:00:04 2026 GMT
Subject: CN=6a671005-36fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:5e:30:c1:38:9a:1c:1d:65:53:a9:20:ff:
db:5e:13:59:5b:9b:4f:dd:b8:0a:62:46:e4:7f:9c:
ee:0a:cd:b1:ae:5f:44:be:1a:6b:7e:8a:73:a3:6b:
a2:9b:5e:a7:4a:92:2f:16:94:0e:e1:58:e1:47:41:
e4:26:e0:ed:0c:76:d3:4c:e8:db:ea:3f:43:4f:b1:
ff:13:1c:73:0e:4c:c8:bd:8e:d8:91:25:cd:28:f4:
d6:bd:74:4c:99:39:4f:0f:6f:7a:05:3c:05:1e:ab:
d5:a6:5b:f3:16:c2:98:a5:2b:16:85:f2:07:c7:12:
2d:7d:18:89:43:05:7e:ec:03:c1:11:33:8f:3e:25:
cb:07:37:06:b0:66:50:14:48:91:60:39:a4:16:f0:
48:f2:99:06:0c:e0:38:44:71:6a:d5:b9:9a:86:0e:
af:e1:a5:2b:f0:d2:2e:b5:36:c3:de:55:1c:35:e5:
8b:ea:2c:8e:04:ab:4f:31:2a:ba:77:83:9d:5a:3a:
e4:4e:eb:28:d8:eb:4a:b4:95:ca:1b:32:4d:fd:66:
06:ca:23:04:84:09:65:d3:55:b9:6f:1b:89:e6:99:
14:4f:dc:98:49:b7:94:32:84:1b:6f:33:a7:a3:09:
b9:2a:15:bc:73:6f:90:40:21:43:6e:97:b0:37:21:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:8A:DF:AB:7A:BF:F6:7A:AF:1D:5A:55:76:EC:4F:27:A6:31:04
X509v3 Authority Key Identifier:
keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:36:94:99:c4:47:56:0c:a1:08:aa:c4:70:13:fd:53:63:
38:1d:83:04:38:a0:09:ff:f5:fa:b3:91:9a:1a:20:1d:f9:5f:
a8:78:6f:71:0e:72:f4:ae:e6:da:b1:ff:31:e7:ba:43:99:97:
80:c5:69:a7:9c:91:e1:36:5b:5c:2c:63:41:1d:b8:55:b4:d7:
b3:de:d8:1f:e6:73:9e:7c:43:56:b5:ad:c3:d5:e1:2b:a5:69:
76:69:ac:f8:14:56:3d:40:95:58:4b:e0:7d:d1:fd:f9:91:f1:
4e:86:80:73:4a:c9:1b:f1:91:05:e6:15:ad:ae:8e:6d:96:d9:
36:57:c3:e2:9c:12:9e:22:c8:4e:c2:87:f0:3f:e2:aa:00:f5:
2b:06:1e:2a:d4:aa:67:51:f8:f8:c4:01:1e:1e:75:4f:97:01:
5e:eb:a8:4c:54:2f:9f:df:76:ff:1c:a9:b4:90:7d:6b:02:4d:
85:1d:b8:e2:df:7e:74:f3:0a:23:3a:91:75:28:4f:ab:27:98:
68:4b:c0:4f:63:14:14:54:d6:54:7c:66:5a:92:7b:55:bc:ab:
7a:75:78:86:da:84:f5:00:84:9e:46:83:92:71:93:93:bc:85:
87:f5:9e:43:dd:0d:b7:c0:b6:07:93:68:f7:96:10:ad:90:e9:
a4:8d:0a:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxQUMxMTAvBgNVBAUTKEVFQTkwMUI3RkIzM0ZCNTBDRjA0QzU5ODFGOEJFRjZD
NERFQzM1RTIwHhcNMjYwNzI3MDgwMDA0WhcNMjYwODAzMDgwMDA0WjAYMRYwFAYD
VQQDEw02YTY3MTAwNS0zNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6ZeMME4mhwdZVOpIP/bXhNZW5tP3bgKYkbkf5zuCs2xrl9Evhprfopzo2ui
m16nSpIvFpQO4VjhR0HkJuDtDHbTTOjb6j9DT7H/ExxzDkzIvY7YkSXNKPTWvXRM
mTlPD296BTwFHqvVplvzFsKYpSsWhfIHxxItfRiJQwV+7APBETOPPiXLBzcGsGZQ
FEiRYDmkFvBI8pkGDOA4RHFq1bmahg6v4aUr8NIutTbD3lUcNeWL6iyOBKtPMSq6
d4OdWjrkTuso2OtKtJXKGzJN/WYGyiMEhAll01W5bxuJ5pkUT9yYSbeUMoQbbzOn
owm5KhW8c2+QQCFDbpewNyGHEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoOit+r
er/2eq8dWlV27E8npjEEMB8GA1UdIwQYMBaAFO6pAbf7M/tQzwTFmB+L72xN7DXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDFBQy9BMzAyQUI0NkM2
OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0xRFBCTVdZSDR2dmJFM3NO
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05lSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDFBQy9BMzAyQUI0NkM2OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0x
RFBCTVdZSDR2dmJFM3NOZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbuU2lJnER1YMoQiqxHAT/VNjOB2DBDigCf/1+rORmhogHflfqHhvcQ5y9K7m
2rH/Mee6Q5mXgMVpp5yR4TZbXCxjQR24VbTXs97YH+ZznnxDVrWtw9XhK6Vpdmms
+BRWPUCVWEvgfdH9+ZHxToaAc0rJG/GRBeYVra6ObZbZNlfD4pwSniLITsKH8D/i
qgD1KwYeKtSqZ1H4+MQBHh51T5cBXuuoTFQvn992/xyptJB9awJNhR244t9+dPMK
IzqRdShPqyeYaEvAT2MUFFTWVHxmWpJ7VbyrenV4htqE9QCEnkaDknGTk7yFh/We
Q90Nt8C2B5No95YQrZDppI0Kpg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:05:31 2026 by rpki-client