
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json)
Hash identifier: TSpqKfi2WtTKG53Q1q9VrC8il0gDG2AgHjmWrvOjjfA=
Subject key identifier: B3:D2:AB:6B:2A:8B:B5:C1:32:57:2C:74:67:11:36:19:76:84:1D:F9
Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Certificate serial: 0680
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
Manifest number: 0678
Signing time: Sat 04 Apr 2026 22:19:59 +0000
Manifest this update: Sat 04 Apr 2026 22:19:59 +0000
Manifest next update: Sat 11 Apr 2026 22:19:59 +0000
Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: yrteQcmPl6x0orQzp5AJKqo8ngHrLENrti2IAHoixrM=)
2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: Dbe7f6X4+CPJEylNpNLDJwF1y5Hhd5iHSBe5Hc4QBYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Validity
Not Before: Apr 4 22:19:59 2026 GMT
Not After : Apr 11 22:19:59 2026 GMT
Subject: CN=69d18e8f-7027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:db:c7:43:fc:3c:e6:30:5d:fa:cd:66:4c:
4c:f0:e7:a5:fe:be:53:88:b4:b6:15:af:62:b5:f6:
ee:8d:fe:90:86:b9:3f:5e:19:9b:ee:d6:4a:6e:1e:
b4:3c:1d:dc:ab:6a:64:a6:96:79:80:c1:a7:fb:64:
04:d4:c0:a2:ac:1d:05:1a:98:c1:11:93:49:3c:59:
7b:4e:7d:7e:98:77:ed:60:03:e2:c9:dd:22:0a:fe:
d2:e2:c7:ef:7e:81:61:b8:2a:3b:2a:3a:b4:30:5c:
c9:c1:29:61:f9:52:a1:6d:33:52:b7:55:20:cf:b2:
ec:e8:17:12:60:49:2c:75:15:49:41:7d:71:39:1e:
9e:4f:b4:95:d5:a8:7a:46:5c:5c:80:bf:d7:b2:ed:
35:b9:f1:2f:6d:80:4c:5e:4b:35:9d:c2:2b:2a:11:
1f:da:16:26:0a:b1:58:e9:86:ec:ba:6a:50:79:d8:
ad:5d:65:ac:dd:6f:39:c4:05:29:ea:e3:81:0b:de:
70:34:d5:56:da:33:2b:fb:de:17:04:30:c1:6f:ea:
42:ab:f3:03:8f:2d:56:9b:c3:87:2e:ca:ce:0a:ee:
7b:ac:42:13:e5:27:fc:56:9e:04:00:7e:96:d9:5f:
fc:d0:a0:e1:e2:1b:f4:4c:db:93:e5:80:39:8b:22:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:AB:6B:2A:8B:B5:C1:32:57:2C:74:67:11:36:19:76:84:1D:F9
X509v3 Authority Key Identifier:
keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:f4:75:be:a1:3c:4e:f5:b7:4f:6c:84:a6:45:ce:e5:b4:
9b:a1:d6:78:f4:db:f5:31:84:3d:ac:91:98:b9:21:07:d0:95:
5f:ad:fe:bc:a7:56:33:d0:55:a4:35:18:6e:e0:08:c9:bf:74:
42:f5:89:ee:4c:2e:02:20:64:2e:06:ec:99:81:fb:28:68:83:
33:38:a4:fb:c4:69:5c:25:e8:b5:da:08:c5:38:88:c1:ee:eb:
e3:d1:8c:b5:e4:9e:0d:7f:3a:10:35:46:36:b5:df:6e:a4:63:
9e:ad:46:c6:c5:85:73:2c:05:88:0f:cd:4a:98:57:db:30:a0:
df:41:15:a4:aa:22:d2:cf:09:a6:b2:62:d9:98:16:48:d2:95:
ef:d7:74:86:f6:a0:dc:fa:43:46:cb:ef:6a:bb:10:4d:8b:43:
6c:29:92:fc:b6:02:01:cf:a6:85:2d:fe:f5:cc:ec:38:f8:a2:
d2:ce:68:ed:5d:e3:68:81:49:dc:6e:58:0f:cc:d6:b5:83:3c:
b5:1f:fa:2d:c2:8d:7f:db:5d:a2:ab:0f:60:86:b0:0b:e5:57:
ac:be:ff:91:6a:4b:96:69:30:cd:e4:a5:74:74:49:39:3f:23:
d7:6d:4b:02:ba:71:05:bf:91:ad:35:4e:f5:75:2d:0c:da:e4:
53:1b:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:12 2026 by rpki-client