
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier: hQGdmRh4Rk4dRSABZxvg158i5MZ0zrGFUp/cH37UnZE=
Subject key identifier: AE:B9:A7:6D:8C:66:30:A7:BF:9C:CC:04:90:99:88:AA:1C:CE:F5:DF
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number: 265F
Signing time: Sat 04 Apr 2026 15:40:15 +0000
Manifest this update: Sat 04 Apr 2026 15:40:14 +0000
Manifest next update: Sat 11 Apr 2026 15:40:14 +0000
Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: pNceS6VVcqXo+fhTmclJXJZTESv928LPoAxMtI2ksJk=)
2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: ueVNReZo6meY996fdhGVkYb8RWaLqcwirYFMYjvQObc=)
3: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: toFZWG4e9XZyczzfjTX6cXsPpN+8LUyofu/rvS6jkb0=)
4: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: kljQEVIomShFc5jF8vTm9M41wLxW8/F3Hxsn24YoM74=)
5: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: XYzNXz1bE+l2XGJ3ebIjddpWT2dkbew2K443TSmAkNE=)
6: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: NZdmLOsnZDNXAMGcOdhI3q4yB4aAOv7p2/cOPmiJe3c=)
7: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: SQTld78qnXyeYc8UteanISoaKYi+6Nmu6hvrhUZ9aUk=)
8: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: RTOGKejUdNcBVaptPhu6f0aYuxe1ymwva6QLNzjueuk=)
9: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: DgtUOB2WpmAwriA13XT1e6HnKLeJSw2MXGDQTJbwll8=)
10: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: +Oja7U4t8Lb0LZ6fvOYpK5rIngmBRvyB89ZXtC/NBOI=)
11: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: WN9q7rQQBf46/jC5IO4qXkvHnVaxKh9FNi0LfFFu2KQ=)
12: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: NjuhjolNH8v8Btpog7H4mhNstJVuaTFcnmqdSWxxhHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9993 (0x2709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Apr 4 15:40:14 2026 GMT
Not After : Apr 11 15:40:14 2026 GMT
Subject: CN=69d130df-ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:c2:d4:28:d1:1f:f6:19:4e:73:69:9a:be:
74:73:2e:e7:3c:26:56:a9:c1:6b:9e:3a:8e:1d:20:
21:28:4c:e8:f3:2a:5f:13:6b:a9:81:1e:85:3a:34:
9a:49:ca:3e:6c:c7:a2:2a:5a:1e:ce:e3:e8:25:fe:
ad:02:4e:c5:3f:18:dd:ba:59:f7:18:9e:c3:ce:2d:
a2:2e:72:4f:c4:80:22:d0:08:31:5d:a6:c3:cd:9b:
9c:a8:31:0f:41:81:ca:9e:b4:68:b6:5e:43:91:bf:
1f:49:86:d2:fb:02:0e:3c:12:aa:0d:88:1b:d1:33:
70:1b:0f:95:d1:1b:d0:3c:fe:6c:8f:e6:3a:26:a3:
1b:e2:ae:dc:e5:af:40:00:ce:44:d4:6c:41:b3:44:
6a:88:28:0f:23:59:57:4d:d1:0d:92:5d:7e:56:8f:
f6:0a:21:60:60:cd:07:b0:4c:51:41:be:d5:29:b6:
e8:38:27:0a:0e:ac:bb:78:5a:20:4a:33:89:b6:9c:
0b:8b:24:c1:70:56:b7:54:3a:52:42:78:b9:00:84:
45:fc:08:21:d2:1f:ff:2c:62:36:17:d8:3b:00:b3:
e0:49:89:3e:6c:d4:ee:1a:98:80:75:8f:72:fa:27:
44:bb:e1:d8:65:d7:66:39:8e:d6:d1:03:c1:4b:72:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:A7:6D:8C:66:30:A7:BF:9C:CC:04:90:99:88:AA:1C:CE:F5:DF
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:d7:d3:5d:6a:9e:3e:5c:e9:a3:0b:19:ec:0d:32:cb:ec:
ab:30:bc:b8:8e:06:e7:f9:c3:9b:d8:86:5d:c8:94:0f:2e:18:
36:bf:12:bd:19:0d:c9:cf:21:f5:13:8f:00:6e:85:92:46:94:
44:88:d8:6d:d9:cf:20:1d:19:1d:6c:67:6a:f1:b5:df:36:83:
3c:3b:a1:30:d4:34:bb:57:a1:9c:c7:e5:98:b8:43:5d:ad:2f:
8b:92:3f:5c:8c:34:1d:be:cc:c1:ad:ca:e4:05:f4:68:dd:3e:
cd:86:8c:14:f4:ff:eb:3d:82:ec:15:36:a1:07:87:a7:8f:85:
db:7e:ec:e8:c8:39:05:b5:95:3e:91:b1:5d:fd:fe:a8:25:74:
de:8c:d2:67:36:44:09:79:b8:1c:e5:9a:4b:4c:b4:4a:9e:3b:
50:a7:4e:b4:6f:43:76:55:41:86:09:6f:ac:76:af:a5:e5:85:
b7:7c:4a:d5:b0:60:c3:f3:76:e7:f6:63:51:da:b0:60:5d:72:
f3:57:91:7a:97:18:86:54:7e:0d:d4:0e:62:64:1f:da:6b:b6:
12:67:fa:53:0d:aa:be:ba:d4:6f:c3:10:d4:41:0d:ee:de:08:
89:bf:1c:4b:30:e2:d4:31:5c:58:7f:cd:4f:0a:3e:95:1e:c3:
52:c1:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:09 2026 by rpki-client