
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File: EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier: QZzsC6BEUQ64dkYm/OV3LqSBIGGMGTEPdMSrtF4q5Hs=
Subject key identifier: AC:B7:19:C4:AA:9A:0C:89:CF:19:B5:73:AD:69:A3:81:7E:30:3E:55
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer: /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number: 0194
Signing time: Mon 27 Jul 2026 06:09:11 +0000
Manifest this update: Mon 27 Jul 2026 06:09:10 +0000
Manifest next update: Mon 03 Aug 2026 06:09:10 +0000
Files and hashes: 1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: oXxKt6Ohmf3DtJmsJRQfQPB2Sspx/7gksie6k5Yo5A4=)
2: 6B10AF52379A11F0B3AC7740C4F9AE02.roa (hash: s7GLGtp6WWZ+8tGGQw/IP17opBzX+2RCOigurVObf4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Validity
Not Before: Jul 27 06:09:10 2026 GMT
Not After : Aug 3 06:09:10 2026 GMT
Subject: CN=6a66f607-8d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:2b:f1:e7:72:93:2e:cd:bf:10:00:14:75:
08:8b:92:20:46:af:eb:ae:0a:0b:23:ed:37:49:c0:
0c:02:11:94:99:63:91:42:47:87:72:60:15:73:2f:
7c:89:ea:bc:b1:a2:e7:1d:21:4a:92:ad:b2:04:f1:
00:5d:13:4b:1d:7c:46:b7:0e:29:b6:e6:84:db:78:
28:3e:83:e0:8e:93:aa:e9:0f:d2:c6:fa:9a:3f:c1:
a0:9a:9d:38:44:4b:6a:42:c1:86:08:bd:57:ac:bb:
35:cf:e6:24:84:f2:7f:24:49:96:3f:fc:33:47:f7:
40:b5:3f:85:c9:fe:52:ff:df:57:8c:b4:df:13:9e:
d2:61:4d:8c:a1:02:45:ae:89:f8:0a:e7:f7:b6:c2:
ea:8e:27:61:47:01:23:44:12:42:23:cb:b6:6c:a8:
f6:f4:79:da:24:4f:10:d8:85:25:64:c4:73:46:82:
0d:e5:29:90:de:a7:90:ff:cf:f5:9a:22:87:0c:8c:
04:09:2e:03:98:4e:fc:8a:91:d3:25:0c:fd:e5:fd:
6f:05:d5:fc:a1:60:4f:9b:e6:b7:dd:c2:88:e2:bc:
61:b2:30:32:83:fd:76:12:f4:92:b9:e4:06:4e:34:
23:72:5b:9c:a5:bf:1e:15:86:a6:af:41:68:a6:57:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:19:C4:AA:9A:0C:89:CF:19:B5:73:AD:69:A3:81:7E:30:3E:55
X509v3 Authority Key Identifier:
keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:03:34:ab:4d:00:17:fd:74:0d:fd:b7:41:d2:fa:6a:60:
40:66:7b:36:24:9e:6e:4a:bc:44:40:09:f5:78:24:24:03:f6:
a7:a0:69:39:d7:7b:a5:c0:35:f9:32:14:73:be:63:b3:71:80:
10:c0:95:3a:05:52:5d:fe:37:d2:bd:69:dc:aa:20:24:66:03:
4b:3c:28:d7:e0:46:08:91:ac:a2:6d:54:b6:94:82:d6:7e:14:
f0:49:00:25:34:ad:02:55:01:60:1e:07:d8:c9:67:d5:7f:64:
46:7c:69:7b:35:19:8d:ae:90:5f:c1:07:05:bd:91:92:19:3a:
21:f0:80:e6:0c:b8:27:48:d5:81:cd:4b:5a:8c:d9:65:f2:2a:
4f:db:ae:58:85:c8:b4:f9:13:a7:01:5c:71:e4:71:b7:69:93:
b3:15:b9:c2:a8:c2:4c:99:4b:d9:75:c2:63:82:1c:1d:d2:91:
d6:dd:37:eb:2a:40:d0:7b:73:80:07:28:4b:fa:f0:6a:2b:6f:
32:24:a9:8a:20:8c:dc:00:00:2c:b5:14:6e:64:8a:dd:20:ac:
3e:b6:f7:d5:8a:11:10:31:6e:e8:ee:ef:85:1e:c1:82:4b:c3:
8c:15:e4:38:7d:c7:06:16:3e:43:cf:d4:7e:48:a5:4a:51:5c:
75:b1:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:30 2026 by rpki-client