
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json)
Hash identifier: H6zzX5YbCVWkyeeaCeG8Zm2Q/rlmCrz1+V++pbR5b8A=
Subject key identifier: 18:D0:AB:26:38:05:B9:85:09:AE:A1:0F:3A:11:79:26:A4:D9:C7:52
Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Certificate serial: 0C2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
Manifest number: 0C09
Signing time: Tue 28 Jul 2026 19:05:28 +0000
Manifest this update: Tue 28 Jul 2026 19:05:28 +0000
Manifest next update: Tue 04 Aug 2026 19:05:28 +0000
Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: zPqi3zZuD2nylVOHKiGiCyLb9YT786fhSkb+NR0qJPs=)
2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=)
3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12
Validity
Not Before: Jul 28 19:05:28 2026 GMT
Not After : Aug 4 19:05:28 2026 GMT
Subject: CN=6a68fd78-950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:4d:e0:30:28:22:d3:b8:54:38:65:1d:71:
d1:21:11:a7:36:11:a3:cb:45:41:00:89:2c:ec:bb:
16:36:cb:08:51:f6:99:d9:3f:bb:5e:29:57:a7:73:
b9:3b:2f:28:af:3d:99:01:53:ab:ff:76:d6:5d:54:
f0:12:e7:c4:d7:61:ef:40:dc:f7:d5:c7:e3:14:dd:
5f:be:56:12:c8:ee:6d:3d:b6:32:be:d3:22:b9:ca:
c5:0f:d0:c4:28:52:42:da:2a:41:ae:a9:42:5b:9e:
2f:96:98:b9:ef:26:d8:6c:c7:a3:a8:cf:c9:6e:62:
0d:b4:d6:55:50:b8:fe:37:f4:08:ca:86:c6:c8:0a:
86:66:65:20:33:c4:1b:4e:28:3e:96:13:36:a8:15:
2a:be:5f:64:f7:26:f6:89:4f:a9:32:18:3f:b5:b4:
fa:ac:f4:7d:a5:26:16:a2:d6:c5:8f:f2:fb:98:83:
09:18:85:8f:0b:e9:3a:89:76:28:5e:9d:b8:56:6b:
c1:71:73:36:d3:02:15:55:97:95:6a:23:df:7f:63:
c1:3a:c6:2c:d2:b0:8f:95:0c:6f:53:59:2d:c8:6f:
42:b0:60:fd:60:c8:87:99:47:e3:c4:76:e7:d6:fa:
13:e3:7c:39:18:bd:86:54:20:67:68:f5:50:ab:fe:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:AB:26:38:05:B9:85:09:AE:A1:0F:3A:11:79:26:A4:D9:C7:52
X509v3 Authority Key Identifier:
keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:19:21:56:33:4c:ac:cf:d2:a1:da:e2:d0:20:d3:3c:39:
c3:24:70:2a:c4:03:1c:98:c9:0d:22:93:1c:25:9f:47:8e:1e:
d7:ef:2c:40:eb:d2:ca:5c:32:98:c7:3e:0e:3b:e0:a4:1f:33:
c7:65:a8:9f:04:cb:ee:bc:eb:87:5f:eb:2c:d9:c6:76:d8:e2:
84:d2:ee:73:27:ce:63:c3:06:2d:33:aa:3c:50:2f:5b:3d:74:
c5:6f:a7:6e:47:a1:7c:7c:37:98:8d:7e:8d:51:25:6c:27:87:
f3:9d:7b:f3:46:be:41:9e:35:8b:4b:78:99:a6:0c:16:9b:32:
8d:bd:06:08:e9:a3:e9:e2:03:f3:d0:0a:48:51:fa:ae:d1:cc:
85:72:fc:1e:78:90:74:88:9d:5a:98:86:7f:35:79:79:d2:85:
af:58:62:72:d9:8d:a1:eb:01:d8:56:f6:97:9b:6f:17:61:61:
5b:1a:ab:29:69:ff:d5:6b:c7:5a:99:d6:65:6e:bb:0e:76:a6:
fd:5a:93:c3:6b:4b:b5:76:e7:6f:36:d1:bd:62:eb:72:f8:38:
58:29:54:03:5b:ab:d7:bd:ea:e1:95:16:4d:ca:2d:d5:1a:a7:
6b:3c:ec:81:d3:ab:0b:96:ee:16:48:88:99:09:98:c4:ed:01:
aa:0a:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:24 2026 by rpki-client