
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier: obgTsfGRTnW/3PoLfNt///aiCxfV4V5B4NL8+v0tb6w=
Subject key identifier: 30:8D:E5:8D:55:B6:DC:16:91:AD:C7:00:6E:87:C1:05:81:87:88:F9
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial: 08C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number: 08A6
Signing time: Sun 26 Jul 2026 21:13:41 +0000
Manifest this update: Sun 26 Jul 2026 21:13:41 +0000
Manifest next update: Sun 02 Aug 2026 21:13:41 +0000
Files and hashes: 1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: vrNxfuzCAoe/Ud8hz/UiRyUDAtbfXXh2iDQ9FkxxFYc=)
2: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (hash: ffFlZZGQ0iwDML1pEzeR++cufgSgn2eJebqm0V7/KKc=)
3: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: +r2m4LZBOfeFC8llerWWOPpo5aVgzOjABbJBM71Zx6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Validity
Not Before: Jul 26 21:13:41 2026 GMT
Not After : Aug 2 21:13:41 2026 GMT
Subject: CN=6a667885-ba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:5a:de:6b:4f:69:3a:74:a3:0e:8f:a8:6d:
3d:65:c1:7a:75:3d:d6:24:0e:a3:a9:dd:5c:bc:03:
39:b0:53:51:ea:27:d3:44:47:64:53:7c:3b:c3:75:
c0:63:b3:89:f0:fc:18:d8:e3:ef:c4:20:aa:41:1a:
1a:33:ac:96:91:0c:d5:98:c4:c4:4f:f0:0a:b4:8e:
70:98:90:ff:38:73:81:04:95:3c:ad:50:42:43:cf:
f5:be:4e:fb:47:bb:49:cb:ab:0e:76:4d:6e:78:17:
45:66:64:5f:68:c6:37:06:4e:1c:93:13:1f:66:ef:
47:f5:00:77:f6:e4:f5:ec:42:80:8f:79:5f:50:b7:
61:45:af:80:c9:b2:d7:ee:46:06:f9:65:8c:fe:53:
49:31:9a:5d:8b:02:a0:5a:4c:9e:c7:72:9f:83:e3:
7c:3f:d4:ed:53:b6:39:0e:ea:0f:d4:b9:e7:eb:dc:
11:33:4f:5c:38:d2:b2:e2:84:38:2e:bb:f1:c1:09:
2c:13:62:c0:4c:41:c0:cb:6d:1e:c2:83:20:4d:a3:
1f:88:02:0e:8c:33:aa:7f:42:d2:56:5a:4f:4d:eb:
2d:86:4a:09:7b:ac:01:ec:b6:0d:b4:36:96:b3:e1:
e0:04:fa:c8:d7:03:68:51:72:25:6e:49:f3:44:ac:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:E5:8D:55:B6:DC:16:91:AD:C7:00:6E:87:C1:05:81:87:88:F9
X509v3 Authority Key Identifier:
keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:9a:3c:56:1e:f3:e3:bb:37:08:5b:59:11:76:6c:7d:58:
3a:2c:66:01:54:71:41:0f:f0:b6:1f:40:83:01:3a:26:82:75:
87:6b:6f:f0:5b:ed:92:db:62:e6:df:41:50:35:0e:f1:5c:5d:
5b:2a:84:6b:7e:0b:89:fc:e9:ac:53:11:6b:04:21:53:2c:4d:
e8:f7:12:75:e6:50:e8:ec:5a:0b:b1:25:02:8f:79:4a:08:ad:
37:f3:f3:ac:3e:42:7b:08:bb:ec:2d:6e:03:83:f0:2b:a7:9d:
ae:84:42:ed:5a:61:eb:34:80:d4:d6:b1:e1:73:7c:bc:06:38:
9b:f5:bd:d2:c8:5a:53:d8:57:45:a6:2c:23:d1:ac:63:f4:9c:
55:be:f6:5f:95:0d:9f:ab:6e:ba:2c:b3:a0:d3:85:d4:b8:46:
66:79:5a:45:42:9e:4a:61:5b:1b:a2:b6:1d:a6:32:bc:27:bc:
d8:71:19:e9:10:bb:0a:d3:37:2a:d4:3a:4f:28:1b:9e:a1:25:
75:ca:d5:b8:49:25:9a:49:e0:06:f7:2d:93:58:26:c2:a7:7f:
cf:fb:44:52:55:9a:e1:02:ae:ad:22:b0:88:a5:2d:02:18:df:
29:ab:d7:77:11:94:15:bd:ae:04:e5:9d:86:47:ee:57:98:1e:
58:a7:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:25 2026 by rpki-client