
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier: gNXERFmuZyfX1mpNv60o7y+dtJ0oeF/ySPtAT97UA70=
Subject key identifier: 3F:91:F7:CA:DE:88:C9:37:8E:DC:4C:98:84:A9:86:59:3D:84:CC:AE
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial: 07C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number: 07AA
Signing time: Sun 26 Jul 2026 22:12:20 +0000
Manifest this update: Sun 26 Jul 2026 22:12:20 +0000
Manifest next update: Sun 02 Aug 2026 22:12:20 +0000
Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: pZnUyDRWxXbeK+ZCIl5vypwJPznu98qR53JZeta97oQ=)
2: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: tQ+0QPRWhuVmQFBAmyQbfomAoZ845RNX8u98yKRH9zI=)
3: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: AZFFvvpWxnilxy4IK+Rl3jT7ZxfVA62vfLkMMczuUH0=)
4: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: 0wR/rhOxWSgg23pdfwy7r6LKP60Cetj8iF61Y/rz+os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Validity
Not Before: Jul 26 22:12:20 2026 GMT
Not After : Aug 2 22:12:20 2026 GMT
Subject: CN=6a668644-ff1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:e3:4b:6b:77:61:84:ce:7b:16:e4:d7:81:
f5:85:96:bf:c0:6f:81:2a:99:64:08:ab:79:bf:fd:
ec:cc:f2:7e:56:0d:86:df:0f:e6:62:e4:c4:93:f1:
66:8e:af:af:64:74:df:da:07:0f:88:82:3c:f8:1b:
7e:a6:3c:22:47:1a:bd:31:69:02:13:13:53:45:5b:
6e:59:30:77:0b:f4:0f:92:f2:f7:f9:ad:7b:58:e5:
1f:14:88:43:d8:96:70:8e:8c:90:f7:4a:f0:22:29:
9f:f8:81:b9:54:eb:92:88:29:bb:6e:06:16:cb:88:
81:72:bb:6d:f3:a9:e8:f9:6d:3c:c9:e5:e8:17:ac:
19:52:7b:0a:7d:11:86:3b:46:55:d4:99:8f:1f:c2:
00:ba:06:c7:16:dc:53:d4:38:eb:d5:88:ba:75:50:
ee:ea:1a:d7:0a:46:13:00:e0:64:42:52:54:d5:12:
a8:31:5f:69:40:9f:3b:8f:83:da:c0:84:1b:2a:06:
33:0c:00:40:ea:8b:3f:95:05:f4:52:4a:33:e8:05:
04:7f:16:78:3f:0d:e7:cd:a1:8e:ac:38:b5:f1:88:
26:6d:68:00:f5:05:cb:27:b6:90:b6:5a:22:12:2c:
05:99:00:52:bf:e8:cd:78:4e:b0:da:db:2b:ed:e1:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:F7:CA:DE:88:C9:37:8E:DC:4C:98:84:A9:86:59:3D:84:CC:AE
X509v3 Authority Key Identifier:
keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:52:4e:39:de:12:ed:24:e1:33:1d:ab:52:43:90:27:6c:98:
53:e4:b8:e0:25:70:ce:e3:8e:84:03:d5:b6:e0:b0:e5:10:5b:
e9:3d:a3:99:99:e2:fb:c1:a2:b1:76:25:73:9c:1d:e3:5c:a0:
09:38:5f:eb:1d:2d:1b:56:1b:85:5c:c1:d0:4a:25:4d:33:d2:
47:0f:ff:ba:90:b1:dc:86:2d:f7:99:14:e3:4f:ab:e0:6d:3b:
70:f8:1e:84:ee:be:66:af:f8:b4:f9:d9:8e:56:e9:5b:93:ce:
3b:cc:7a:95:45:58:99:60:55:78:91:84:22:96:74:9a:e8:8c:
61:f4:8d:42:20:2c:14:66:5c:3b:2e:4d:7b:2e:f0:4d:84:17:
dd:66:c8:48:2d:04:33:5f:46:02:fe:1a:54:f6:8a:6a:f5:68:
94:d5:97:2a:ec:94:6c:c4:bc:a9:eb:34:5b:b0:03:d2:3a:f9:
88:b0:8a:f0:7f:18:31:3e:99:5c:4d:fa:16:c9:08:60:7f:bf:
4a:6b:19:da:4c:d0:cb:ab:a1:c3:16:e8:66:68:df:4b:c4:fc:
c1:ae:b0:01:f2:b2:37:aa:89:23:aa:80:d5:68:11:2c:84:9a:
05:f0:c4:9e:65:4d:05:13:b5:ce:25:34:fe:f0:0e:34:34:d3:
fc:bb:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:55 2026 by rpki-client