
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: kzGWTypnL4AL01raBJaWIx8KlZmDF+LzCGCJ2f3PpMc=
Subject key identifier: DF:13:19:34:7C:38:2B:E4:C7:98:20:BE:2A:F7:D9:46:72:58:ED:D6
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 0172
Signing time: Sun 05 Apr 2026 04:12:13 +0000
Manifest this update: Sun 05 Apr 2026 04:12:12 +0000
Manifest next update: Sun 12 Apr 2026 04:12:12 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: gFRYOufe8hnBeNNMnl2/Y9ZjpkYGM2m+33s50kODsxg=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: hsvg83rgR4LLPwkP5NM04Dace/cP92iXdlcSROFWaew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Apr 5 04:12:12 2026 GMT
Not After : Apr 12 04:12:12 2026 GMT
Subject: CN=69d1e11d-717b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:d6:34:29:23:6a:fc:af:d1:9f:b9:6c:5a:
b7:40:c1:91:9e:11:75:e6:a3:cb:86:55:bf:43:47:
ab:62:d7:5a:69:2d:98:e5:1d:75:94:5f:ef:7b:90:
8e:25:80:91:09:2c:25:93:bc:f4:59:5e:ed:82:e1:
d4:36:9f:95:09:49:bc:20:13:81:f7:e1:95:35:f1:
3d:24:5c:b9:f3:88:0d:92:09:b8:84:6b:08:7e:35:
3b:86:c2:f6:4d:c5:dc:13:52:e7:13:48:95:63:3f:
cc:e3:4b:de:7a:bc:9e:52:81:d6:f2:2c:ff:41:b5:
6c:2a:eb:1a:d6:d8:18:9d:c7:a1:88:71:b9:0a:5b:
6f:f7:f9:2a:7c:45:1e:08:3a:76:fc:61:61:b1:bb:
d9:11:ed:5f:1d:c2:fa:e3:f2:5b:88:31:e1:ce:81:
57:ba:39:26:fe:99:49:32:60:2c:54:93:49:10:4c:
fb:7f:8b:1d:8e:ce:b9:25:ce:ac:7b:e2:16:2f:71:
0b:2e:a3:1b:11:6d:72:0d:d7:9b:3f:db:ed:c0:85:
a5:60:c0:62:29:bc:cb:68:38:d8:0d:de:b0:cb:d1:
66:6b:79:93:63:6d:fc:34:d2:bd:17:5f:08:b5:d6:
ea:17:bd:7c:62:c4:85:e4:c6:71:65:c7:6e:ba:68:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:19:34:7C:38:2B:E4:C7:98:20:BE:2A:F7:D9:46:72:58:ED:D6
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:91:22:dc:70:2e:ab:18:e1:c4:fc:9f:3f:2e:d1:ba:57:
f3:8c:7c:7c:1b:74:d8:c0:fe:25:f7:60:c5:05:f4:64:62:14:
b2:c2:79:01:ba:db:42:08:82:7f:a2:7a:b3:59:88:4e:cf:d4:
e0:f2:87:44:34:f6:b7:2b:ac:e1:5f:6b:c6:76:31:d4:d3:9c:
b4:61:43:12:c0:e9:7e:69:7b:0d:c8:73:26:fa:28:a1:14:12:
ef:9a:75:c5:20:e6:84:f0:99:a9:4e:25:09:68:1f:45:f4:b3:
90:9d:3e:b9:1f:df:25:c3:08:03:7b:44:ea:ed:d5:ca:f3:39:
75:be:da:6a:70:af:26:5d:25:08:96:16:9a:4d:31:2c:1e:aa:
2a:9c:79:08:e7:11:e3:5b:f1:cd:ff:29:2e:2e:59:75:54:03:
b2:cb:5e:9d:f8:07:10:05:b6:16:93:f0:c1:89:15:4b:95:cb:
cd:8f:25:ed:3c:91:b9:2c:22:e3:14:f5:0b:72:af:61:ee:a9:
d5:fa:bf:9b:c8:8c:06:cf:8c:49:9e:f8:38:e8:c6:8a:02:f1:
30:2f:38:3c:2c:5d:a5:95:49:10:3d:91:4a:ab:cb:2b:c4:43:
3a:76:48:ea:2b:c2:62:b8:e8:5b:f2:3e:db:8f:75:95:c6:86:
75:88:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:05 2026 by rpki-client