
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier: PSILpxQvnNhrCA4UJQHpKOCj5r5Z4WGmlTLLDz4BMAI=
Subject key identifier: E9:6E:3F:1B:96:F9:98:0D:3A:59:A9:90:F2:9A:11:F8:85:DA:F1:75
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number: 0287
Signing time: Wed 29 Jul 2026 02:54:28 +0000
Manifest this update: Wed 29 Jul 2026 02:54:27 +0000
Manifest next update: Wed 05 Aug 2026 02:54:27 +0000
Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: bBZxEjLUWB4FS3mZk9jqHogZE1UQsB67ghGXGcKt5ao=)
2: 1B8AAA547EA811F1B1B4ABB165A30FBC.roa (hash: CrxDIG23oExmjO7SdSCqEOfcY+3UGQ0HeSLQRNX0rk4=)
3: 7E9B367C7EA811F1A854ADB365A30FBC.roa (hash: Eu4ivh0ocxW3L/+Wz018Tp2rtHk2MvNF/CFT6tWavaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Jul 29 02:54:27 2026 GMT
Not After : Aug 5 02:54:27 2026 GMT
Subject: CN=6a696b64-a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:a2:14:51:32:77:66:80:35:4c:46:a1:46:
ee:58:96:b7:88:be:a0:9e:13:53:aa:d2:48:de:4e:
26:83:49:bc:40:89:29:ea:b2:15:92:dd:82:b4:9e:
a3:46:7a:a1:17:61:6b:b9:61:df:ec:97:01:73:ef:
db:bf:df:7a:95:44:35:5e:d4:d9:bb:7d:7e:89:dc:
a6:18:09:89:40:54:a6:28:b8:78:8a:87:d9:50:79:
35:3b:88:75:2b:ba:37:44:60:15:8d:e0:cb:b8:46:
43:90:f7:b5:c5:67:01:3a:94:74:c6:ca:73:d0:d4:
9d:38:c1:be:aa:60:62:fe:a4:b5:93:37:b1:10:1e:
9e:dd:44:71:1c:3a:cd:9c:49:7c:84:fc:90:9c:64:
d0:5a:e3:4e:1e:e3:dc:22:12:52:74:f1:49:01:b8:
4f:f8:54:fd:da:60:b3:ec:82:4f:d0:f1:a0:f3:e4:
b0:50:21:89:b9:05:1d:7d:1f:eb:48:f4:b2:55:f4:
fa:d2:a6:b2:3f:8f:64:cf:b4:18:9a:f0:c0:1d:c6:
57:c7:c3:55:7f:96:be:c2:53:2c:d7:7e:ac:37:d0:
9e:27:e3:f7:5d:b7:a3:36:1d:a4:8e:0b:15:a0:dc:
59:4f:98:58:84:8e:67:8e:5a:48:e2:36:a8:8d:91:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:3F:1B:96:F9:98:0D:3A:59:A9:90:F2:9A:11:F8:85:DA:F1:75
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:5a:6b:b2:19:b2:16:0c:40:68:50:69:5b:31:4a:23:69:
4c:96:72:17:ee:af:91:58:b0:fd:cc:a9:fc:41:e4:b8:eb:fd:
d4:e6:aa:d2:70:01:ce:28:69:cf:df:67:04:3a:9c:83:fb:67:
d2:0f:aa:c0:ff:8e:0d:c0:2a:6f:ef:00:83:44:79:80:cb:dd:
b2:ef:14:af:65:91:d5:7d:72:36:d4:d4:40:6c:31:45:02:27:
88:0f:a9:3d:99:12:22:84:96:d6:f2:23:6a:26:35:d4:33:ae:
35:2c:05:d5:22:72:d5:b8:4a:41:f3:db:f5:e3:39:72:12:b1:
c7:56:26:a5:d9:93:04:3e:8e:5f:4c:1d:d5:25:2a:5a:04:1b:
d8:69:e5:8f:1a:aa:9e:b0:08:76:20:9d:ae:75:82:09:b3:4b:
6f:cd:7b:af:a1:4f:f4:13:42:fb:1a:b9:6c:c7:57:ae:7d:ef:
8f:ba:40:eb:ec:b9:99:52:69:4d:ce:5c:be:e4:1d:97:92:40:
df:69:ee:95:6b:94:23:06:29:c1:cb:49:63:46:e0:25:06:eb:
e5:12:4a:3e:d4:3d:8f:d9:84:0e:86:e9:c8:f7:a2:6c:82:b8:
4c:d5:5b:e9:1c:53:d5:29:ea:be:b0:8c:4a:75:83:4b:c3:52:
bd:23:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:27:21 2026 by rpki-client