
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: QdHxmC9etXju81wkRZ9KXqNu00q7LzeX+ZSqW084MGM=
Subject key identifier: 50:06:D2:81:00:76:A9:35:A9:55:A0:F8:EF:C0:A2:B7:02:20:B6:12
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 025C
Signing time: Wed 25 Feb 2026 01:07:24 +0000
Manifest this update: Wed 25 Feb 2026 01:07:24 +0000
Manifest next update: Wed 04 Mar 2026 01:07:24 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: p0Ni8hMRUpBQfZdQTXeFP0JZLz6Ks1rr0htJr+trC8A=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: a7dxXCx6MYR+XHKV7x8741sygGvBY9tuPGBJ3I6LZes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Feb 25 01:07:24 2026 GMT
Not After : Mar 4 01:07:24 2026 GMT
Subject: CN=699e4b4c-7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:b8:5a:21:b1:cd:d6:b8:4d:03:b1:c3:a5:
ea:87:79:ee:e4:10:2d:2c:10:33:8f:f2:aa:5f:ea:
bb:3c:a6:68:11:72:07:0f:87:3d:f1:2e:19:2d:30:
cf:77:90:46:13:47:5b:0a:16:08:92:d9:da:39:4e:
4c:92:4c:16:36:37:45:4d:18:d9:43:85:4f:0a:3f:
81:6d:61:bd:7f:c3:c5:5c:b8:2d:0b:b5:48:1d:69:
98:26:34:b6:df:9d:3f:9e:34:76:de:c9:47:ab:4c:
8c:82:ee:30:31:22:4b:9d:4f:f7:40:63:95:e1:59:
2a:9f:a6:40:14:7f:33:d1:6d:15:7a:f5:a8:fe:30:
1b:12:99:52:0e:e7:8f:e9:c6:39:5e:ae:a1:4a:f7:
f9:97:04:8f:51:66:c9:6a:14:32:86:75:27:a8:db:
97:ce:f5:43:03:29:5e:36:c6:fc:9e:1c:76:72:8e:
d0:aa:a1:46:79:bf:64:e4:70:2e:41:08:c2:be:98:
a7:93:29:54:62:41:5a:93:08:e4:f7:20:12:44:7b:
ac:3a:40:81:e8:db:ca:1f:3e:c3:f6:c2:70:66:3b:
e1:45:84:cd:42:1f:4d:3e:05:27:c0:74:8f:c0:11:
a6:da:14:b0:73:b7:1e:74:fe:a8:03:00:3a:a0:c0:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:D2:81:00:76:A9:35:A9:55:A0:F8:EF:C0:A2:B7:02:20:B6:12
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:ce:bb:3c:c8:fd:45:22:32:5a:41:22:c1:3d:55:69:3b:
29:60:f4:da:b4:16:df:32:8d:f5:cf:cf:7b:e2:54:98:6f:6c:
ae:6b:d7:fc:d7:f6:12:8f:db:99:2b:e8:e2:3f:56:79:8b:1f:
b3:fb:e3:b3:ab:9c:5a:69:c3:28:65:e1:32:63:21:33:68:de:
db:eb:84:3a:37:f6:8b:25:3e:1a:28:44:77:81:6d:c4:95:da:
6c:1c:de:47:ba:56:a5:3e:fd:5e:93:f0:2b:50:41:6b:d5:5f:
e9:94:9e:5e:ba:31:9c:a9:8c:b2:96:20:de:70:b9:38:a1:7c:
9d:0f:0e:52:b8:b0:05:8d:61:4e:77:13:ee:95:2e:a0:a8:0b:
fe:50:d8:9e:69:9b:11:9f:30:7b:fe:3c:46:c6:f5:db:c1:29:
0c:7e:bc:23:f4:84:65:1b:ca:90:65:09:de:19:3f:f0:ec:e5:
2c:52:f6:46:08:4b:ae:88:1e:8c:13:50:eb:97:bb:1d:73:05:
e5:15:86:19:10:87:3c:aa:be:0e:f0:ba:4d:91:6a:4b:6f:a9:
7b:c0:96:59:8e:53:cc:7e:f9:be:8d:73:ff:00:a1:4a:ba:f4:
70:6f:9b:09:02:0f:48:48:1d:00:b9:58:6d:69:23:e1:ef:73:
86:85:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 03:12:02 2026 by rpki-client