
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: Dwyt/D8fDqYX/DnV55QOXIuiaEBHK60IgYNNQf78Kv8=
Subject key identifier: 50:21:D5:25:B5:4F:57:47:3E:39:2E:2F:83:74:3D:40:6E:03:1A:08
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0D0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 15BC
Signing time: Wed 20 May 2026 18:09:19 +0000
Manifest this update: Wed 20 May 2026 18:09:19 +0000
Manifest next update: Wed 27 May 2026 18:09:19 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: GEv2+QBrbRmJ2JXnNnnVZ/3hesLl5SqpzVWvZYGFg4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Validity
Not Before: May 20 18:09:19 2026 GMT
Not After : May 27 18:09:19 2026 GMT
Subject: CN=6a0df8cf-a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:11:77:41:d9:ca:f4:8b:98:c2:76:33:bf:
02:d5:b1:4b:e6:ae:96:6b:97:ec:7b:51:05:64:93:
e8:31:21:97:66:20:76:3f:3a:b5:51:8b:db:ca:80:
18:1d:b8:95:d6:52:61:2c:fd:e6:74:50:a7:58:83:
2b:08:c8:96:0f:89:5b:b4:ff:cc:f8:f9:75:9d:59:
b0:69:f3:86:e0:8c:0d:8d:43:b9:d0:a0:bf:27:d8:
36:63:fb:43:37:47:ac:06:21:9f:9a:84:7d:9d:92:
74:c3:ac:47:94:9e:0b:d3:33:60:fe:09:6d:26:ef:
ed:28:a8:73:28:f5:08:93:dd:36:0f:ee:0c:a4:cb:
da:e3:3d:df:df:0a:e2:64:2d:96:12:d4:70:c3:ea:
d3:c1:1f:84:35:de:b4:03:a6:34:83:a5:6f:b5:ec:
9c:1f:60:9d:1f:ca:1d:97:47:30:c4:17:cf:c1:e7:
10:04:06:b6:75:af:73:e0:7e:72:7f:13:20:bf:72:
eb:4f:96:3f:30:f3:8b:46:f4:7a:a4:8e:cc:b6:9d:
59:1c:e0:3a:59:d6:7b:64:80:b9:ba:6d:90:aa:e2:
b6:1f:70:ed:3e:17:67:51:05:8f:28:aa:d3:62:30:
31:dc:0d:94:93:ce:ea:eb:6d:0e:19:30:09:a9:e8:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:D5:25:B5:4F:57:47:3E:39:2E:2F:83:74:3D:40:6E:03:1A:08
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bc:79:af:32:2d:84:2c:96:b8:64:63:55:0f:f4:7c:f1:69:
c5:2f:70:16:23:bf:b3:7a:46:27:e8:3e:3b:88:24:6e:7e:95:
42:77:67:ea:76:6e:d2:7b:ca:a3:45:eb:76:5d:1a:a6:f7:7e:
a3:6d:e2:38:e3:ca:1f:15:f5:36:f0:13:59:67:17:06:09:9d:
da:41:3d:1a:8f:15:f7:e9:10:db:e2:f0:29:43:e1:83:bd:f5:
4a:32:48:56:5e:3c:65:8c:9f:b0:67:bd:01:90:7e:e7:bb:08:
5a:9a:39:ee:50:a6:d4:ed:1d:fb:fa:01:92:d4:41:a3:89:25:
f2:08:43:af:67:26:7c:7f:31:4d:19:3f:e1:ed:53:d2:d0:31:
c6:92:5d:51:7d:fb:fc:e6:02:cb:e0:59:ad:f1:fa:73:67:fc:
17:f8:1b:39:84:a7:f1:c7:a4:94:57:8f:06:de:12:2f:fc:19:
33:88:5e:77:6f:24:27:16:61:8b:06:e6:f8:01:2f:eb:21:64:
94:fc:46:f4:ca:bf:13:ba:52:fd:22:05:44:5a:52:81:7e:0f:
af:9b:71:35:4e:08:93:0b:d8:ad:a0:99:22:d0:da:65:2e:74:
5e:05:7c:2e:01:a1:29:c9:ee:c5:b7:f1:76:58:81:7f:92:4a:
01:99:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:01 2026 by rpki-client