
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: islsjwW1HaQPcJGtSp1r/dBxSws/bc13PwPWWsbgE1E=
Subject key identifier: 86:43:68:70:30:D8:C7:87:0A:78:3A:69:A0:39:03:D7:49:71:81:05
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0CF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 158B
Signing time: Sat 04 Apr 2026 18:00:52 +0000
Manifest this update: Sat 04 Apr 2026 18:00:51 +0000
Manifest next update: Sat 11 Apr 2026 18:00:51 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: 6wK4c9C1UwMu9/RrgMw8MnP6JwS1dAdyOMCVDQ1aSik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Validity
Not Before: Apr 4 18:00:51 2026 GMT
Not After : Apr 11 18:00:51 2026 GMT
Subject: CN=69d151d4-b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:85:92:7c:0c:3d:13:f4:07:8a:66:47:41:
82:2b:b9:e1:cf:99:cf:09:4f:d0:1c:1c:a5:5e:cf:
19:51:13:47:a4:94:8e:43:e0:a3:d7:c0:e0:73:b4:
2e:b8:f1:05:1d:42:c6:73:20:4a:65:4d:e3:cb:d6:
b5:14:fd:54:a3:2f:64:84:14:ed:87:1e:3b:75:07:
f2:03:29:c2:54:de:98:bf:a0:21:c5:88:18:98:ea:
0f:3a:5e:e9:65:33:5b:f7:96:cc:ec:bf:8e:ea:27:
22:98:b9:04:1c:9e:d1:e4:da:d7:44:26:1b:5f:c4:
c0:e9:d5:d9:20:10:0d:66:9f:f8:64:43:79:39:44:
b3:b5:f0:52:f4:45:5b:da:8a:39:59:e4:b9:b6:6f:
ad:4b:ab:27:53:1b:86:9a:2a:db:ad:b5:40:d6:3b:
75:ca:43:a2:bd:11:7e:bc:2b:14:f2:bf:be:8c:10:
74:f3:25:55:23:e1:77:65:c9:fa:a5:bf:c4:72:83:
e9:ee:c1:fc:66:9e:c7:72:3e:1e:1e:89:1d:59:75:
63:9b:91:65:29:ce:5c:4e:1a:f7:ad:fe:db:91:fa:
58:db:34:59:c4:55:63:33:9c:21:71:1e:4b:b0:38:
5f:2f:28:34:21:5e:4d:79:8c:a0:83:13:21:2c:ac:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:68:70:30:D8:C7:87:0A:78:3A:69:A0:39:03:D7:49:71:81:05
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:70:c8:9f:18:af:52:41:1d:94:56:ee:27:fa:35:77:a3:
97:46:d1:0d:d0:50:92:17:28:d7:ad:49:a6:6f:51:96:1a:14:
82:ed:53:b5:bf:c6:a8:b7:04:1f:d7:06:5b:77:c3:96:1b:35:
f9:e3:c1:05:8c:27:3a:6e:54:5a:56:1a:fc:72:50:75:4a:4c:
17:09:78:12:26:e9:ae:67:2e:0f:33:ed:95:d8:27:2a:34:bf:
38:dc:73:15:97:1d:61:90:46:34:b7:f4:8e:c5:ce:9f:6b:60:
dc:81:9c:ee:16:38:b2:0e:cc:e3:e0:af:70:57:f4:ed:e1:ff:
ab:75:1d:cb:87:d0:80:ad:91:0b:58:9a:41:48:ff:ec:19:3f:
8e:03:e7:80:e4:41:cc:00:a2:c6:82:84:05:b2:13:80:ce:ef:
a5:69:0a:b4:76:e0:40:7c:4a:78:c4:be:e1:b1:3f:2f:d4:16:
80:e3:eb:e1:34:ef:70:dc:1e:e6:45:7c:43:d0:6e:04:84:c3:
51:37:bc:9c:4c:86:b1:9f:17:6a:67:20:bc:d3:4a:82:ef:c6:
53:da:6e:36:49:42:76:13:fc:8b:86:d0:6f:60:fe:61:97:8b:
f2:cc:2d:2a:f7:e6:31:19:11:39:6f:37:35:1f:92:b6:cf:ea:
d8:17:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:09 2026 by rpki-client