
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: Jbk/fWYWNMPRqdOHLNLzVoTaJWUPv4ByWxf9e1NFeVs=
Subject key identifier: 6D:CF:0D:28:BD:7A:B2:04:F2:60:C6:E9:1E:8C:F9:54:41:03:5C:0A
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 0267
Signing time: Wed 11 Mar 2026 01:20:52 +0000
Manifest this update: Wed 11 Mar 2026 01:20:52 +0000
Manifest next update: Wed 18 Mar 2026 01:20:52 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: CDAgsK4ArzIb9b1Wdju6jcgm2wOzs7Sm2+h5/WijbJA=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: +r2WtPGJv8MiPhxLT7XXflRVbJqr2/eUE2D9wDQRaQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 01:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Mar 11 01:20:52 2026 GMT
Not After : Mar 18 01:20:52 2026 GMT
Subject: CN=69b0c374-5f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:28:8f:ee:95:ca:97:5f:2a:83:65:bc:1b:
5c:6e:a2:ce:2f:0f:24:1c:69:eb:6d:9e:79:a6:dd:
85:7f:58:67:11:c7:ee:58:44:3a:6d:8d:c1:c8:52:
9d:e8:74:a7:f2:bf:7f:c4:8b:d9:3a:47:e0:8f:b8:
90:21:45:50:83:91:2f:42:0d:7b:8c:5f:d1:1b:a4:
54:70:3b:ca:57:c0:da:32:50:4a:8e:7d:07:cf:d3:
1d:33:01:a5:3a:d4:cc:8e:9b:3e:3f:e7:1e:95:76:
0f:0c:d6:de:f9:c5:2b:09:c5:53:81:a9:09:c8:76:
50:4f:36:5a:89:1a:36:43:cd:23:82:78:c0:52:90:
c4:01:91:ac:72:20:bc:99:28:fa:67:ea:c6:b6:09:
ff:70:92:a8:4b:9a:40:5a:6d:fe:c9:c6:0f:6b:8a:
b0:7a:14:49:84:5c:74:e7:d6:90:72:16:4d:7a:4f:
73:c8:dc:99:0a:dd:ae:bf:6f:c8:72:cb:4b:26:47:
59:dc:5c:16:3c:44:1e:84:85:d7:ed:e9:c5:34:a6:
11:02:52:14:75:ea:d7:f4:9d:dc:3f:43:e1:06:23:
d4:58:40:51:4d:98:80:30:67:67:ad:e5:9e:c2:a8:
0a:3e:78:17:69:00:1b:36:1b:37:30:7b:f7:ba:aa:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:0D:28:BD:7A:B2:04:F2:60:C6:E9:1E:8C:F9:54:41:03:5C:0A
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:d2:ef:d6:0a:c5:3d:9b:13:3a:56:83:77:68:f6:ae:4b:71:
96:2b:61:ef:fd:d1:57:10:e3:56:d6:99:e3:90:88:5b:54:88:
28:01:e8:b2:af:93:d5:95:65:d6:69:67:0e:f7:a2:fc:92:a1:
3a:7e:42:dc:a2:bb:c5:67:98:9f:42:53:66:ed:c7:6b:08:8f:
06:a2:c4:cb:f1:5c:9f:84:f1:7b:1a:39:2a:96:bb:fb:8a:4c:
77:08:63:02:0a:d8:b5:91:0c:68:c6:cc:86:e5:64:98:0b:9f:
bf:83:83:c6:09:c4:ca:64:be:02:7f:f7:72:c1:0c:6f:2d:ee:
90:d9:7d:2a:fa:61:4d:e9:8c:74:dd:e9:65:ec:6e:59:4b:d7:
b4:7b:12:98:3e:7f:18:29:f3:84:87:ce:1c:d3:c4:ac:34:ca:
e0:ce:69:03:75:cc:2c:bd:68:66:36:f2:29:cd:f2:82:df:8c:
9b:01:8a:9d:9f:60:95:f9:5b:3f:5f:41:d1:59:96:48:a6:9d:
c0:56:23:78:0c:1f:90:18:03:cd:ba:2b:ed:b3:ae:fb:f1:69:
24:dd:28:b9:41:aa:8b:39:e9:dd:df:7e:ba:d8:27:d1:65:6f:
a3:4b:13:dd:9a:97:fe:bf:32:18:81:a3:ad:3d:15:4c:15:aa:
8d:2a:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:21:33 2026 by rpki-client