
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: pKS4avBVRcXrTlTgrwOwdIP86THEUk6i5887yabWsyI=
Subject key identifier: 35:80:99:7A:7D:DB:6C:7E:83:BD:11:2B:E5:5D:29:C6:0B:3A:27:DB
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 025F
Signing time: Sun 01 Mar 2026 02:52:09 +0000
Manifest this update: Sun 01 Mar 2026 02:52:08 +0000
Manifest next update: Sun 08 Mar 2026 02:52:08 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: OWL5H1whAAIm8Da5w/zLDDJnHyCjfVZNy3SHsGMskts=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: a7dxXCx6MYR+XHKV7x8741sygGvBY9tuPGBJ3I6LZes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Mar 1 02:52:08 2026 GMT
Not After : Mar 8 02:52:08 2026 GMT
Subject: CN=69a3a9d9-5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:32:e3:26:5e:65:37:06:6e:8a:71:ce:7f:
73:2e:ed:d8:ec:8a:1f:e8:17:7a:f3:35:19:5a:a8:
e8:d4:bb:7b:47:cf:24:93:72:73:12:37:41:9f:b3:
4e:d7:bb:87:ce:59:4d:e5:55:81:a4:f9:b4:f6:e2:
33:5c:13:ab:f9:70:72:76:02:7c:d7:f4:32:de:87:
bf:75:a8:13:2f:d9:ff:df:fa:91:5a:10:54:fd:81:
4a:f2:a7:ca:f2:e9:8c:34:c7:79:d7:cb:5a:b1:0e:
ac:a8:1b:be:5a:30:cb:02:1c:6c:ba:fe:2a:9f:4e:
c5:1d:71:34:1c:46:90:a3:53:d3:2b:05:86:3c:22:
fa:a8:52:ea:5b:41:05:73:2b:1c:33:b5:34:ff:f2:
88:c9:61:fc:6b:7a:9f:87:44:69:68:33:b0:3a:a2:
fd:79:2c:ee:88:0a:ab:fb:4a:49:71:fc:13:d4:e7:
ff:9c:13:10:cc:c7:4d:bd:3b:c8:4f:cb:da:5b:3a:
25:fb:86:6e:04:a6:67:d1:ed:ed:97:2c:52:63:b5:
77:83:2a:4c:b4:26:82:b1:0b:2f:15:bc:b3:a2:94:
bf:46:ed:eb:46:13:b9:28:a5:ee:33:17:7a:9e:a0:
e0:0e:e7:e9:ef:c0:70:f5:49:28:bf:23:7a:cb:6c:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:80:99:7A:7D:DB:6C:7E:83:BD:11:2B:E5:5D:29:C6:0B:3A:27:DB
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:37:dd:7c:f8:80:54:d9:db:68:11:0f:3f:2b:a8:07:06:
dd:cc:18:58:72:5c:b5:e7:90:f4:c5:be:3e:d3:45:bd:eb:a0:
d5:ad:f3:76:f4:c4:e9:30:e1:05:0f:dc:b9:40:64:89:c8:55:
36:e1:5f:8a:5b:01:53:d2:3a:a6:83:97:b6:8f:55:a6:4f:5d:
3f:19:ab:c9:87:5d:5e:06:d4:5c:e2:dc:ce:e9:a0:a0:22:28:
5e:83:40:c8:37:db:e7:74:fa:86:80:be:a1:aa:8f:bd:0c:57:
0f:62:d5:cd:7d:c1:bd:60:14:98:3a:73:9b:f5:3e:89:01:5e:
2e:5d:aa:0e:82:9a:af:1e:ee:4c:73:a2:13:9e:6e:b0:40:2a:
f1:28:51:92:f3:6b:04:b4:5b:63:8e:3b:91:5e:5b:e8:2a:c0:
37:de:5f:bd:95:e7:84:c8:9a:1b:b6:68:5a:45:47:02:88:26:
72:d7:59:b4:a3:83:c3:25:fd:1d:92:7a:13:83:2d:64:f6:fe:
e7:a2:b0:6e:ae:35:1c:44:c3:80:54:5c:73:42:d1:f2:03:40:
16:50:a3:67:9d:1b:42:f5:25:5b:ae:9b:2b:ad:d8:0e:2c:0e:
4b:70:fc:a2:70:ef:20:46:1a:ac:ab:6e:42:4d:9d:d1:7c:87:
02:a8:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 10:05:07 2026 by rpki-client