
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json)
Hash identifier: njKYNZW5+uPswLrJmja1wwagLY9quHtH9hTwmjbQfcA=
Subject key identifier: C9:0A:4E:C5:60:AA:4C:7A:82:82:7B:20:46:5E:D6:EE:D2:EA:1A:82
Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
Manifest number: 06A1
Signing time: Sun 26 Jul 2026 23:16:31 +0000
Manifest this update: Sun 26 Jul 2026 23:16:31 +0000
Manifest next update: Sun 02 Aug 2026 23:16:31 +0000
Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: 1wmDbUsuVBT7l4YrGwEqzU7kG9g3puzilUotvo5wtK4=)
2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050
Validity
Not Before: Jul 26 23:16:31 2026 GMT
Not After : Aug 2 23:16:31 2026 GMT
Subject: CN=6a66954f-25f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:51:2d:87:1b:80:ad:1c:da:7f:50:b6:c1:
e9:6a:57:7a:94:ec:4a:90:b0:29:a2:52:77:1d:49:
7a:d8:98:65:9d:eb:62:5e:a6:24:de:81:da:5b:46:
f8:74:6a:f8:68:81:bf:5f:e1:32:ab:68:eb:30:f9:
d6:ab:b3:60:ce:8e:00:d6:d7:2a:57:d5:27:e1:5e:
2a:37:4e:8d:ff:a7:eb:62:b1:11:b2:1e:28:d0:d1:
8b:f2:38:2e:41:25:e7:ef:04:22:e3:00:ca:9c:87:
98:8b:8e:49:9f:0c:23:fb:2e:ec:93:f8:d3:5e:a9:
1c:30:ae:82:13:c8:4e:77:61:56:e1:55:c2:97:50:
29:e4:22:41:9b:78:aa:13:a3:18:59:80:3e:c4:a5:
aa:35:0a:37:4e:3d:e7:cd:e3:4e:bd:72:4c:8d:c3:
dd:08:ab:8b:66:7e:c8:79:de:cf:27:62:f7:b2:ca:
bf:83:d3:1d:32:56:eb:cd:58:0a:14:b9:d4:06:50:
24:93:5e:73:d6:c0:c5:20:94:98:de:15:02:4d:66:
aa:af:b2:21:bb:22:64:3c:a8:d8:a2:36:8f:0e:b8:
d4:55:23:e2:a7:b5:ee:42:c6:4a:fe:e7:6e:97:f0:
d0:eb:7c:66:2f:55:62:8c:b4:d5:72:c0:10:1b:47:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:4E:C5:60:AA:4C:7A:82:82:7B:20:46:5E:D6:EE:D2:EA:1A:82
X509v3 Authority Key Identifier:
keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:38:b8:51:1c:af:5f:ad:8d:05:8a:8b:4f:c9:36:07:e0:
2d:02:0b:d1:3a:bb:04:fa:e9:f2:54:b1:80:03:ed:76:2b:96:
8a:33:8f:97:6d:cf:fb:cb:39:5e:9e:e7:17:1a:f8:48:f5:f3:
49:9c:3c:43:f6:86:44:09:b2:c6:88:a5:b8:85:77:b8:9d:f9:
3a:64:fa:3d:f4:cf:7c:13:ec:32:d2:4b:40:09:37:11:bf:16:
b7:43:32:dc:8d:5b:0a:27:41:cc:71:d1:d1:5a:a7:72:f2:27:
b6:96:9a:67:d5:44:dd:70:78:e6:d8:8c:40:1c:55:83:bb:a6:
f4:f2:e5:4a:b9:33:1e:ac:4a:79:2c:34:64:ed:4f:c4:67:66:
87:13:06:a0:6b:94:10:ef:37:40:21:09:5e:ce:f3:62:37:2c:
7c:d0:60:a5:72:b8:da:f1:9b:00:f4:42:63:08:3c:10:b8:04:
76:2e:26:0f:51:69:e6:b1:51:ed:c1:66:7d:b9:70:b8:53:ae:
77:1f:17:f8:4c:a3:0e:ec:93:b8:0f:86:29:30:68:00:c1:b4:
73:76:6d:84:21:82:aa:60:36:5c:ed:79:17:47:0c:12:86:66:
36:15:2d:7d:b8:96:d4:74:04:5c:b6:a9:05:cf:b3:a0:46:05:
d0:8e:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:04 2026 by rpki-client