
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier: GG0usWQkSXq99X9AFX7ogfYybwZR80I4N2b1zI6TIPY=
Subject key identifier: E1:77:CF:17:3E:6B:0A:07:E7:B1:4D:7F:14:6A:FF:EB:31:56:2D:D0
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number: 67
Signing time: Sun 05 Apr 2026 07:19:11 +0000
Manifest this update: Sun 05 Apr 2026 07:19:11 +0000
Manifest next update: Sun 12 Apr 2026 07:19:11 +0000
Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: SjW4CwJVv1VaEv1qTHvJIWFLfXIQoF+IK/CQWPyBIsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Validity
Not Before: Apr 5 07:19:11 2026 GMT
Not After : Apr 12 07:19:11 2026 GMT
Subject: CN=69d20cef-662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:66:9e:74:4d:31:fa:a4:25:0e:15:64:ac:
38:74:e6:02:82:de:0e:e8:13:cf:5b:3c:0b:a0:de:
97:90:e3:cb:92:08:6b:2c:e1:89:3f:db:af:06:49:
be:c7:ab:10:85:96:33:c4:3c:06:45:40:4d:1f:85:
c6:90:a9:a7:df:4c:b4:9d:30:b8:c2:35:ca:a9:25:
d4:7e:2d:bc:38:02:2d:76:b7:1d:11:be:1e:7f:2d:
4f:0e:cb:8c:7d:c6:8e:32:90:22:4b:f6:69:12:21:
81:c6:09:db:bb:69:53:7e:04:0c:63:84:01:f9:e6:
c9:b4:c2:9d:f8:6a:63:9b:2e:3f:41:e9:7a:b0:05:
45:9e:68:cf:79:4b:3d:1d:ed:51:8e:72:da:d2:b0:
5c:bb:19:74:8e:d0:b7:64:bb:03:93:2f:72:b6:89:
9b:d1:a2:f9:c1:4b:b1:ec:f0:43:71:0e:09:51:aa:
8d:0c:70:2c:84:9d:8a:34:17:8b:d4:d5:24:78:1b:
c2:da:c2:a3:6c:b4:6b:45:21:a3:ad:d7:37:47:92:
74:b5:69:f8:a0:7a:45:ce:91:6c:63:66:f9:78:17:
2e:a5:b9:fb:ae:90:96:b4:f4:14:dc:aa:2d:9c:56:
9a:ce:27:22:ff:d5:20:5c:dd:60:2d:ae:95:dd:e2:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:CF:17:3E:6B:0A:07:E7:B1:4D:7F:14:6A:FF:EB:31:56:2D:D0
X509v3 Authority Key Identifier:
keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:bf:1b:d5:57:2e:5a:a6:29:83:7d:ad:37:42:54:df:e6:99:
79:31:b2:8f:16:af:c8:c5:d5:7d:2a:f7:00:d1:d3:d2:19:06:
79:94:3b:f8:9f:7e:76:3c:5e:ef:54:ec:6a:9c:c4:f5:96:95:
f8:cf:70:d0:79:7e:5a:6d:1a:7f:76:95:5f:53:d2:48:56:b9:
af:c1:cb:1e:2c:fc:a9:eb:d8:b5:28:6b:e3:bd:9b:cc:81:9f:
8e:68:14:81:d2:22:14:24:af:0e:df:c0:ee:7f:b9:19:20:0a:
af:78:df:f9:03:b3:86:d0:53:96:d0:37:5b:47:df:41:d2:c4:
4a:ef:0e:b9:b3:da:1c:cb:aa:b3:1c:e9:17:85:18:62:d1:c5:
24:a8:be:2d:8c:2a:05:03:66:5f:12:84:51:31:53:5e:72:64:
0e:96:4f:5b:11:87:cb:b8:db:26:24:85:01:16:21:72:6f:e4:
70:57:7c:36:c8:c4:fd:e3:41:25:8d:5a:6b:2b:c3:13:85:e0:
05:68:8e:7b:05:de:b9:0e:79:85:4d:e8:5d:e3:11:8e:8e:bf:
ca:3a:a6:4e:d4:a4:66:2c:c2:67:4a:7b:01:80:07:d3:a6:f5:
8d:86:0e:73:33:83:e4:7b:93:db:df:7a:f0:93:df:8b:48:53:
73:0a:08:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:04 2026 by rpki-client