
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier: WVHkoLQsPWA6tJUKWaxIDZmIHGGzs84gOEDeamaCB7k=
Subject key identifier: 3A:70:B7:5D:1B:71:BA:50:FC:CF:98:E6:DF:03:39:5C:5F:08:D7:AF
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 06F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number: 06ED
Signing time: Sat 04 Apr 2026 21:55:24 +0000
Manifest this update: Sat 04 Apr 2026 21:55:24 +0000
Manifest next update: Sat 11 Apr 2026 21:55:24 +0000
Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: TrqoKa0Brp+4pXXat2BTtiF7/8GbhxPcE83C3Hnv32c=)
2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 4BP9RA5edvRIYEOJDfl9qmd/eccUjRwBS2/hmKl9/us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: Apr 4 21:55:24 2026 GMT
Not After : Apr 11 21:55:24 2026 GMT
Subject: CN=69d188cc-3094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:fa:9f:2e:5e:c0:ce:34:ce:03:58:a7:32:
1e:69:2e:c8:1a:7c:03:d1:08:1f:a5:11:11:b1:15:
89:18:2e:9a:54:80:ac:7a:06:76:f5:4d:25:d3:0e:
16:1e:d9:e3:65:63:cc:9a:bd:18:a6:ca:9d:5f:0a:
31:17:ba:c8:d4:6b:af:c4:d5:eb:06:88:5d:dd:52:
56:98:94:4b:33:7f:ae:ef:a1:74:51:bc:89:ff:f0:
b6:52:54:81:5a:96:70:c5:d4:d5:07:f0:9c:e3:aa:
ad:f8:60:53:8b:0e:bf:2e:83:64:d0:94:cb:9e:ad:
8d:bd:6a:98:20:9c:33:99:7a:15:18:31:16:42:3f:
8a:1f:c5:39:46:17:d3:15:a8:f4:d5:4f:44:54:25:
77:42:63:49:8a:ac:99:f4:36:85:e7:96:da:0a:69:
5b:cf:b1:e4:b9:67:1e:a5:6e:da:61:bf:ae:39:b8:
8a:cf:47:c8:74:3d:df:23:7a:a7:8e:50:05:02:50:
f5:1a:fb:db:1d:dd:93:8f:b9:74:33:4d:13:d5:a3:
c3:10:9d:2f:a6:9e:e5:3b:6c:8b:0d:90:59:a4:fd:
38:43:cd:37:b6:d2:0e:6c:f8:5a:91:38:78:df:e3:
e3:53:c8:94:f6:e4:c9:f2:e6:5a:2a:83:39:cf:81:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:B7:5D:1B:71:BA:50:FC:CF:98:E6:DF:03:39:5C:5F:08:D7:AF
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:9f:b3:dd:e0:81:73:c7:26:d9:2d:d0:f5:08:48:09:71:6a:
e3:4c:72:78:18:f1:10:0c:14:06:24:d7:ec:d3:c9:2d:8b:e3:
da:0a:7e:9a:f5:aa:02:40:12:09:6d:88:f7:f0:bb:c9:54:2d:
61:3a:13:57:13:4e:33:68:89:3e:6a:67:b6:cd:d1:14:ed:15:
87:e8:53:68:da:b1:43:e9:08:63:f8:46:c2:1f:dc:2e:ab:1e:
41:66:82:df:04:74:c5:fc:b0:a1:a1:2d:9b:fd:02:e1:e5:2e:
78:00:94:ed:59:03:d4:05:97:d2:15:63:99:73:d4:8d:b7:cd:
70:78:b7:56:be:83:eb:6c:b8:62:1d:77:7e:71:00:82:0a:96:
8a:29:ef:d9:e9:5d:5a:45:d0:1b:65:22:33:cb:b4:5c:dc:a9:
c5:05:1f:3a:d6:0c:5d:35:b0:b6:8a:d2:8a:21:71:84:cb:ea:
11:4d:db:79:96:c4:45:f2:c0:44:c5:60:52:19:d3:a2:2c:21:
ed:33:39:97:01:6c:f2:0c:a6:7d:68:ee:c7:1e:ed:7c:b0:87:
11:d8:7e:31:80:69:7d:30:ea:04:4f:84:b0:38:e5:e1:ec:d6:
de:17:c1:74:44:9f:42:21:ec:ef:2a:13:99:e8:40:35:26:bd:
88:ff:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:31:48 2026 by rpki-client