
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json)
Hash identifier: wBYRFIPO2C+Jf11HqJANMARxLY1noC4qd1fVc7cirvA=
Subject key identifier: A4:5B:93:CC:CF:20:B7:F8:B0:80:EA:A4:C9:82:5D:6C:8A:7E:64:84
Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Certificate serial: 1BE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
Manifest number: 1BB7
Signing time: Tue 28 Jul 2026 16:20:45 +0000
Manifest this update: Tue 28 Jul 2026 16:20:45 +0000
Manifest next update: Tue 04 Aug 2026 16:20:45 +0000
Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: /tIyGnYg2Vce2Ny+2P06kVeQUXzKYbAg/CXFjBsNWDw=)
2: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: OGm0uB3FR35hN/gFsyIV99ObU52GXmXg7+3oLUUM2jI=)
3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: nSC5zdMsQPFLTo2n37S2hHT1g8ZFIDvzCzjnrqu5sXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7143 (0x1be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Validity
Not Before: Jul 28 16:20:45 2026 GMT
Not After : Aug 4 16:20:45 2026 GMT
Subject: CN=6a68d6dd-070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:95:15:e9:fd:6b:8c:e7:e9:a5:ec:f4:08:
e0:aa:83:89:3a:cc:ba:5a:bb:87:22:8f:e0:3e:91:
7f:0c:f1:72:72:c4:fc:10:4d:b6:ab:b7:bb:c1:c0:
0c:13:71:38:d3:c8:0b:0a:7e:b6:1e:4f:d0:8d:d5:
9e:a0:8d:10:c6:0c:2e:28:4a:ba:b9:6c:11:38:93:
32:4e:4f:71:ba:20:16:f1:a2:56:f2:e3:3b:9c:e9:
fb:04:59:55:32:be:ed:10:5a:4d:b4:2b:34:f2:c1:
a3:75:ea:c3:87:69:bd:24:5e:b6:03:da:f3:4d:1d:
04:ce:83:31:72:a2:4d:82:1f:24:07:67:ea:00:a1:
a3:71:b8:67:e6:66:26:ba:ca:ec:12:d3:63:f3:8e:
07:a5:da:63:7b:84:c4:9f:79:1a:2e:37:52:91:28:
bb:fa:0b:6b:9f:db:0b:1a:9a:0d:74:b4:a2:1f:e7:
1f:47:30:e1:e7:7b:42:77:a7:a5:df:9b:7e:11:c5:
ce:33:e8:82:49:34:d9:52:ec:df:91:73:d9:50:d6:
64:ce:e6:c9:2e:0c:b9:a0:72:4b:b4:72:4c:b5:79:
79:40:89:58:be:e2:cf:b1:06:a3:2b:53:5e:f9:a6:
a2:15:00:f6:2b:db:ed:54:0d:d6:d6:5e:5d:75:d3:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:93:CC:CF:20:B7:F8:B0:80:EA:A4:C9:82:5D:6C:8A:7E:64:84
X509v3 Authority Key Identifier:
keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:6d:eb:00:8f:97:c0:90:75:9e:2b:6c:f3:d2:8a:c8:5b:
35:cd:c8:a7:02:2b:11:75:9f:c7:26:1b:ef:06:56:87:8d:fa:
98:ca:b8:bb:65:fb:f5:6e:86:df:56:40:92:10:90:5a:29:72:
4d:08:26:03:a1:7f:9d:83:48:a1:ee:8b:34:db:4b:a4:37:bf:
93:9d:e4:ea:48:72:3f:b1:aa:32:66:c5:c4:ea:92:3b:da:11:
77:3b:cd:82:f2:34:c1:4c:d0:37:16:b6:f0:1b:76:08:0c:d6:
ff:c2:f7:b3:25:e2:f4:24:a2:53:3e:82:4d:b4:01:4a:47:3e:
7a:c4:bc:1f:b5:2e:ec:65:c8:88:73:12:6f:08:b5:89:b2:46:
65:83:d8:fb:6c:12:32:92:3b:af:4a:dd:55:e2:b4:a3:e0:bd:
e4:3e:d6:57:d6:eb:9a:e5:58:f4:1c:89:36:1b:98:5a:5c:55:
ba:ff:9a:a9:49:c4:cc:74:4c:09:33:c3:58:7e:5c:a7:a1:d1:
b8:d5:8d:d6:27:d4:11:bb:95:0e:98:e3:68:06:7f:ab:5a:44:
a9:14:26:47:e5:72:ef:64:7f:b6:5a:dc:a9:79:63:c0:44:34:
c6:95:69:3b:1d:d2:87:25:f2:25:eb:50:cd:27:57:ae:0a:63:
62:5e:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:07 2026 by rpki-client