
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json)
Hash identifier: r5XgdRuyaJ5rP/lhAJZlnlGOm2vJRMWSgEwb2UOOe/c=
Subject key identifier: CA:B8:8D:8D:72:82:32:56:F7:7D:0A:A7:46:06:DB:A7:89:2B:E1:0A
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial: 06AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
Manifest number: 0696
Signing time: Sat 04 Apr 2026 22:20:54 +0000
Manifest this update: Sat 04 Apr 2026 22:20:54 +0000
Manifest next update: Sat 11 Apr 2026 22:20:54 +0000
Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: vsP29lm6+fJTfb8ueB/PhTsJ35wa54/L0KLrrDi3rQc=)
2: 26E44986BE8311F0B427BB65C4F9AE02.roa (hash: jQ+4NA+ZTObH+zk/YV/hm9Hs11QWBVs/ESUiwwI1a0Q=)
3: 025F93342CC111F18F49A0CD8E833773.roa (hash: +JLotf+m/YHNBP+OERgCsRFnK8a10y9jhl0hyWUv7l0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Validity
Not Before: Apr 4 22:20:54 2026 GMT
Not After : Apr 11 22:20:54 2026 GMT
Subject: CN=69d18ec6-64af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:84:4e:67:f4:9c:81:b1:83:3b:8a:24:bc:
00:9d:29:a9:3b:77:5c:c0:1c:12:6e:0e:fa:8f:a2:
bc:27:81:80:39:0b:4b:a2:18:48:09:f8:1b:4b:06:
64:48:fb:d5:a4:e8:a2:9e:bc:8c:3d:f5:a7:dd:0b:
29:72:c0:10:7a:d8:8d:6b:45:d6:19:ae:73:96:46:
1c:27:fa:70:51:06:a3:d5:a7:dd:f0:2c:df:80:25:
17:2e:fd:cd:d7:46:83:83:f9:35:2c:df:53:e6:c2:
c0:eb:39:53:60:02:20:59:c1:6f:02:f0:fc:6f:c0:
94:53:1b:6b:d9:14:c7:fe:a8:be:49:02:f7:d6:1b:
5d:7e:9d:26:2b:f5:40:b5:ad:53:94:4c:49:03:55:
38:e8:2d:fa:df:e4:3c:47:eb:95:74:7d:0e:e6:a0:
7b:ad:03:e4:61:ae:62:98:fd:cb:b5:d2:5c:61:4e:
8d:67:c0:b0:07:29:64:3b:67:18:8e:55:33:f4:a0:
14:f8:55:81:47:bc:26:4c:27:ae:cd:1d:88:21:b1:
9e:6f:c5:0d:a4:eb:5f:6c:90:a4:83:3a:bc:ae:c9:
7c:e7:4b:09:17:a2:af:49:52:00:04:41:10:45:9c:
ca:70:b8:df:a1:a1:18:f2:cc:26:bf:38:95:7e:56:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:8D:8D:72:82:32:56:F7:7D:0A:A7:46:06:DB:A7:89:2B:E1:0A
X509v3 Authority Key Identifier:
keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:60:f1:18:e2:52:48:1b:4b:3a:b6:1a:66:af:e4:93:e9:8f:
63:bf:e6:7c:ec:07:7c:48:db:39:2c:45:c2:33:c5:91:fb:8a:
07:13:fc:15:f6:3d:f4:82:40:c6:06:fe:b2:a1:bb:b4:6d:88:
1b:22:0d:ce:9f:8f:78:89:ca:2f:7a:44:2c:f9:f9:5e:a6:54:
6d:a4:28:bb:6d:ed:3a:99:37:07:2e:82:9f:82:11:dc:23:fd:
c8:ce:07:56:63:38:c0:9e:30:3d:ef:4d:18:70:06:bb:2a:ec:
80:ee:6d:2d:81:32:08:20:77:95:28:86:70:87:3d:b4:5a:62:
1a:7e:b3:84:2d:0c:11:7f:b4:b3:f2:7c:56:c2:84:62:36:9a:
2a:31:69:1e:5b:76:4f:44:7f:29:c5:ec:77:2b:ca:aa:de:ba:
66:ad:6a:ef:de:d0:ea:94:0b:40:0d:57:5d:df:24:6b:df:30:
b3:ac:fd:a8:68:2a:de:12:6e:2b:74:7d:50:08:47:53:2a:b3:
67:d7:02:bb:ec:60:b9:a5:5c:f0:cc:76:cf:41:47:69:00:6a:
0e:00:53:de:33:8f:d3:d3:34:9b:5b:54:b0:05:a8:80:24:1c:
15:7d:91:33:bc:f1:22:29:bb:cc:c9:b0:4f:aa:b2:98:73:e1:
e1:de:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:15 2026 by rpki-client