
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json)
Hash identifier: jK4iY/bj9vVMIOV5RVrMPEognrM4JuuUXLfbUO0Au/Y=
Subject key identifier: 94:13:3F:E8:4B:CC:AD:59:2A:24:D0:DC:97:A6:04:82:20:03:2E:17
Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
Manifest number: 7F
Signing time: Sun 05 Apr 2026 07:04:43 +0000
Manifest this update: Sun 05 Apr 2026 07:04:42 +0000
Manifest next update: Sun 12 Apr 2026 07:04:42 +0000
Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: FYYd6RzvBIoFVkrcvp2LnSrZv7bo3OqM3C5r0XtQ4EU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82
Validity
Not Before: Apr 5 07:04:42 2026 GMT
Not After : Apr 12 07:04:42 2026 GMT
Subject: CN=69d2098b-1d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:5a:8e:95:f3:0a:53:91:e4:fe:d6:4e:95:
d7:d4:20:fa:5a:9e:73:e9:59:4d:e1:d7:16:26:d8:
29:ba:6f:1a:5a:32:3f:a1:5b:e8:f8:6b:07:3f:0c:
d1:42:5f:49:f9:5c:4c:ab:13:d4:38:12:e7:33:b7:
8d:99:6e:39:c2:e8:08:44:80:fc:1a:ea:25:07:da:
3b:9b:f1:84:ee:cb:76:85:16:a1:89:cf:fa:ef:3c:
48:f4:36:e5:1f:96:fb:11:65:0b:bb:05:a4:c2:8f:
c8:cc:34:03:60:dd:00:43:e7:ca:ab:4c:4f:62:29:
3e:c1:42:c4:10:85:0b:97:2c:cc:e1:8f:74:27:0b:
b0:4c:82:9a:58:ec:2a:fc:91:ab:5e:16:83:45:88:
ce:32:4a:a8:8f:da:18:83:fa:72:25:35:cf:3b:26:
ea:c9:c4:a3:69:db:5e:72:93:49:ad:ed:a7:c3:35:
33:87:85:56:bc:43:a0:a4:75:f5:1b:74:54:c6:76:
d0:7b:4a:34:05:4e:1e:1b:09:bc:12:86:58:9d:d6:
f3:7e:28:a3:64:a4:c9:e2:de:2b:38:41:1a:e8:93:
af:7d:87:91:31:df:f7:b3:1a:eb:dc:b6:e1:58:97:
51:56:28:e6:b9:ea:7a:cd:9e:8c:5f:5e:47:44:a7:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:3F:E8:4B:CC:AD:59:2A:24:D0:DC:97:A6:04:82:20:03:2E:17
X509v3 Authority Key Identifier:
keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:90:19:30:c4:96:dc:ff:d1:1a:e1:8a:a8:3c:8e:f6:ce:
a0:44:b8:95:74:de:5e:f5:cd:9c:8b:f9:88:37:58:bb:77:59:
c2:5a:0b:79:09:5e:fb:19:c2:7a:b2:7f:6c:58:e6:1e:3f:29:
b7:5d:3e:e4:57:e5:2d:66:99:5f:e6:e8:4c:4a:84:2c:d3:8e:
a1:7c:62:65:b5:3e:99:7b:a6:81:a4:68:f6:7f:71:8f:de:35:
e7:1e:f8:b2:20:2a:27:fd:27:9e:11:29:37:05:10:d9:40:e2:
1c:ce:8d:84:8f:e4:0d:fd:f7:a9:a0:a7:27:5d:af:0e:0d:f5:
3d:91:e3:d2:e0:bb:b3:c6:cb:81:7a:fb:3d:0d:40:fa:3b:a0:
84:51:08:79:af:76:c5:87:7a:95:f0:a9:b2:49:44:77:1b:cb:
d2:a8:58:06:5a:cb:de:33:47:2b:7b:e8:94:8b:47:a6:1d:0a:
2c:96:34:e2:66:49:8b:08:da:d4:3f:13:15:68:f1:2c:2a:58:
5a:15:fb:ef:94:c9:bf:3c:60:b0:dd:3c:80:a4:e5:65:08:3c:
51:da:8b:7d:15:fa:03:4f:86:46:7c:f0:2f:9d:32:ea:b0:ba:
4f:48:b5:84:2c:4b:1d:a1:65:1c:de:02:16:10:54:e7:0f:61:
e2:99:79:2d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3
MEU4OEI4MjAeFw0yNjA0MDUwNzA0NDJaFw0yNjA0MTIwNzA0NDJaMBgxFjAUBgNV
BAMTDTY5ZDIwOThiLTFkMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxJlqOlfMKU5Hk/tZOldfUIPpannPpWU3h1xYm2Cm6bxpaMj+hW+j4awc/DNFC
X0n5XEyrE9Q4Euczt42ZbjnC6AhEgPwa6iUH2jub8YTuy3aFFqGJz/rvPEj0NuUf
lvsRZQu7BaTCj8jMNANg3QBD58qrTE9iKT7BQsQQhQuXLMzhj3QnC7BMgppY7Cr8
kateFoNFiM4ySqiP2hiD+nIlNc87JurJxKNp215yk0mt7afDNTOHhVa8Q6CkdfUb
dFTGdtB7SjQFTh4bCbwShlid1vN+KKNkpMni3is4QRrok699h5Ex3/ezGuvctuFY
l1FWKOa56nrNnoxfXkdEp8j5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlBM/6EvM
rVkqJNDcl6YEgiADLhcwHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC
NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF
MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp
em1na1BjaXF3NjNEb2k0SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAJP5AZMMSW3P/RGuGKqDyO9s6gRLiVdN5e9c2ci/mIN1i7d1nCWgt5CV77GcJ6
sn9sWOYePym3XT7kV+UtZplf5uhMSoQs046hfGJltT6Ze6aBpGj2f3GP3jXnHviy
ICon/SeeESk3BRDZQOIczo2Ej+QN/fepoKcnXa8ODfU9kePS4LuzxsuBevs9DUD6
O6CEUQh5r3bFh3qV8KmySUR3G8vSqFgGWsveM0cre+iUi0emHQosljTiZkmLCNrU
PxMVaPEsKlhaFfvvlMm/PGCw3TyApOVlCDxR2ot9FfoDT4ZGfPAvnTLqsLpPSLWE
LEsdoWUc3gIWEFTnD2HimXkt
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:12 2026 by rpki-client