
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier: edqhya9K/GpCfaUK9gp1aGTrFRPJ4+DY6csvQ4gvCnE=
Subject key identifier: AC:BF:56:88:30:8D:81:6A:2D:3F:72:D4:80:28:27:E1:E5:BD:52:D7
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number: FB
Signing time: Sun 05 Apr 2026 05:37:35 +0000
Manifest this update: Sun 05 Apr 2026 05:37:34 +0000
Manifest next update: Sun 12 Apr 2026 05:37:34 +0000
Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: hl4cW/ZAmkCAWL8cFhX2Kk7jhIOGi9vAi/pdbGQ3qBk=)
2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: Apr 5 05:37:34 2026 GMT
Not After : Apr 12 05:37:34 2026 GMT
Subject: CN=69d1f51e-0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:f2:06:c2:2a:1b:5b:1a:39:a2:c0:52:b0:
66:5a:4a:1a:f6:ae:70:9f:bf:33:1c:fe:44:e5:51:
78:50:51:4a:fc:e8:30:b8:6d:86:04:4d:0a:2e:20:
f7:1e:a9:7a:b0:8d:86:22:44:fa:23:06:d0:ed:3b:
f4:47:5a:29:54:e0:a2:83:6f:1d:da:25:80:3a:0c:
8b:e3:78:3b:6a:38:fc:03:d3:11:31:7f:9e:16:ef:
21:db:56:da:9e:a3:b8:fe:12:18:99:35:e8:8c:7c:
ab:e3:de:47:77:6f:b1:3d:85:76:9c:8e:85:06:f3:
6c:5d:67:9f:c5:a5:ee:a1:de:8e:33:60:47:bb:0f:
dd:f5:f7:fe:9a:c9:ed:a5:1b:07:1f:66:4c:8b:fa:
37:96:97:18:f1:dc:3d:fc:fc:63:92:9a:2e:77:19:
5b:f5:e6:26:86:a2:a7:ca:89:1c:a6:2d:fa:f0:bc:
c4:17:a8:d8:2d:57:90:b7:6b:d0:f4:8f:72:fd:39:
4a:5d:ca:4d:c2:54:2d:34:6e:a4:36:2c:36:0e:e5:
e3:37:49:57:20:95:a2:f1:2d:60:19:b1:d5:21:8c:
f8:16:0b:82:43:5c:7d:34:a4:ff:ab:eb:bf:09:88:
f2:c2:f3:c6:e9:35:8b:fe:a8:75:3e:63:09:5a:3c:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:56:88:30:8D:81:6A:2D:3F:72:D4:80:28:27:E1:E5:BD:52:D7
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:91:93:d6:ac:9c:d5:b6:e8:47:a3:54:1c:72:d5:87:56:
5e:b1:b5:1d:6c:3b:4a:8e:25:f6:9d:8d:f8:a0:4b:34:8f:9f:
0e:56:50:72:22:57:e5:3e:2c:38:8b:5d:6f:c5:4d:de:4a:a0:
4e:5b:16:ac:e3:bd:d4:73:9d:06:c1:1f:ab:be:3d:16:4a:92:
f6:33:e8:77:e8:36:6f:86:a8:54:19:20:84:4c:00:ff:25:f3:
49:64:76:e3:bc:f3:9d:04:12:1f:97:bd:10:69:f5:e8:ad:bc:
41:69:ff:76:ad:09:ac:e3:22:8d:83:1f:d7:05:82:81:9e:bd:
cd:f4:3e:d1:f4:3c:70:84:25:db:dd:64:00:b2:09:93:41:c2:
de:41:08:d2:a0:87:5b:26:a5:a7:d8:c5:a8:29:1c:1a:5b:94:
0d:92:cf:de:c6:b2:d5:60:35:45:7d:e8:75:8f:b0:39:5d:d8:
f9:93:f1:bd:12:bc:3d:f9:eb:11:c7:14:e5:8b:cc:49:e2:28:
85:08:30:c4:87:40:ed:4b:47:c6:4b:60:25:5f:b5:ca:f4:61:
13:e6:53:22:3b:a4:f7:d5:00:45:34:e3:c6:a9:f0:c3:8d:29:
59:29:ad:98:43:13:f4:9b:ba:05:97:21:29:e6:53:0f:17:d3:
d1:f1:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:37:34 2026 by rpki-client