
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
File: _-7mekM0ZWGI_qX2-dfnpwWUnj0.mft (raw, json)
Hash identifier: OXzLqVEwriujqHri8vXowfVv6lu2YXV1TJ9+4TiTZ2I=
Subject key identifier: C4:24:33:0A:09:D8:21:82:23:5B:5F:6F:77:A8:96:52:09:D8:14:88
Authority key identifier: FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
Certificate issuer: /CN=A91ADCB5/serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
Manifest number: 08
Signing time: Sun 05 Apr 2026 08:31:17 +0000
Manifest this update: Sun 05 Apr 2026 08:31:16 +0000
Manifest next update: Sun 12 Apr 2026 08:31:16 +0000
Files and hashes: 1: _-7mekM0ZWGI_qX2-dfnpwWUnj0.crl (hash: CWhza8Jv01T7r6Fcvmb/nnvDJW6WKRjrGu+Q1WfJ9DM=)
2: 100631B8285311F189E6C14D98833773.roa (hash: OnSEmhCuD0RbgJQkhNAMR74l52P/16L6+HgI2JOjkDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADCB5, serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Validity
Not Before: Apr 5 08:31:16 2026 GMT
Not After : Apr 12 08:31:16 2026 GMT
Subject: CN=69d21dd5-7ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:5f:84:d3:54:96:25:15:63:db:ff:2a:54:
71:42:f2:3f:b8:4e:d3:f0:dc:ce:d3:14:16:03:fd:
fb:d7:3e:d9:a5:4f:3d:ba:1f:ed:ac:68:cc:a0:6d:
c2:d5:4d:f1:31:34:14:14:d9:72:69:6c:5e:20:fd:
8e:e9:e5:f3:bd:ca:79:e9:8b:a2:a2:fa:c9:49:62:
e4:2a:27:81:ce:dd:e0:e2:6f:e4:74:9b:3b:97:17:
75:83:60:c7:88:99:07:7a:95:35:e4:50:3d:b2:20:
6d:d4:36:e4:b0:80:e3:93:9a:e8:5c:b0:d7:9f:fc:
e6:c8:7f:4c:f8:11:f4:07:16:7a:ef:1e:10:ab:d9:
90:a2:8a:ee:23:72:2b:20:91:8a:cf:95:d8:20:10:
03:f1:79:70:e5:5b:90:fd:0d:04:ed:61:11:83:5d:
07:7b:d5:1f:3b:ba:3f:59:b4:21:56:70:88:ed:68:
6e:68:50:2e:4a:69:b3:93:31:57:fd:ae:75:ed:b2:
71:3e:32:d8:6e:4f:5c:d4:2f:b9:41:8d:5f:1b:bf:
24:76:05:b7:d4:da:10:78:b8:7d:2d:b5:6e:72:c0:
78:4b:4b:94:77:34:37:14:12:54:a8:83:07:b1:55:
f6:6c:27:2b:a5:d1:3a:57:b4:88:e3:1a:1e:32:75:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:33:0A:09:D8:21:82:23:5B:5F:6F:77:A8:96:52:09:D8:14:88
X509v3 Authority Key Identifier:
keyid:FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:74:e5:e5:c5:b9:d6:08:bb:21:08:19:75:e7:a0:e9:e4:
c3:15:8e:d4:a6:c1:b9:2e:d2:0f:3d:1c:5c:ed:96:31:88:7f:
53:fc:3e:b0:96:63:13:b2:54:55:63:93:17:ea:ba:2a:55:c1:
65:bf:89:3d:b6:0c:f8:2d:31:8b:2b:be:a0:72:26:6c:04:fd:
1d:d1:3b:ef:32:60:ba:1e:64:79:72:5e:5a:ac:55:73:f0:1b:
1d:41:73:ad:5f:40:d8:d1:f0:0b:8c:f4:56:03:8b:66:27:db:
dc:ac:b9:4c:3c:bc:8f:1b:3b:d6:fe:e6:74:b3:60:c6:d8:a5:
91:a8:4b:ee:39:1a:58:f5:07:3c:31:de:03:b9:3e:ad:14:30:
a8:02:33:31:fa:c1:3b:4e:5c:e9:62:41:64:5a:f4:be:3f:cc:
6e:e1:8d:e4:09:0f:db:ef:63:56:3b:79:8f:e4:d4:9f:87:38:
81:6d:46:c1:a8:fb:c4:cb:78:3c:0b:55:fc:6a:92:75:2d:b2:
69:a8:e0:c8:05:da:8e:0e:25:8a:57:bd:74:57:77:92:f8:84:
b3:02:9d:ea:23:53:ec:d5:c1:6e:58:93:be:40:76:db:21:86:
96:47:b1:dd:f1:26:b1:b0:a5:81:c3:0a:e7:f0:a4:d0:b2:c7:
91:cd:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:14:44 2026 by rpki-client