
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier: Euok2FGjRvuM6sec27VtBoOFJM+W/wNfrRSb6H5hoz8=
Subject key identifier: 2A:27:67:F8:F2:F8:1C:E7:C3:57:66:08:76:5E:D7:C4:6E:A1:83:42
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number: 4C
Signing time: Tue 07 Apr 2026 07:42:05 +0000
Manifest this update: Tue 07 Apr 2026 07:42:05 +0000
Manifest next update: Tue 14 Apr 2026 07:42:05 +0000
Files and hashes: 1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: uqd1NGaKM4LIU41jPbWIq0Iz5ns9PwjW1a31P7/xJmE=)
2: A07D8B96229611F1A7D0762CAF833773.roa (hash: T2vZQOLMibHqgQVOX6XcQKXn3xWaS5ULxK4K1nOSVG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Validity
Not Before: Apr 7 07:42:05 2026 GMT
Not After : Apr 14 07:42:05 2026 GMT
Subject: CN=69d4b54d-b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:af:ea:b7:1b:ea:e0:45:54:54:97:96:d3:
e9:22:3a:d0:a9:0c:6b:98:6c:6e:c7:ad:7f:38:87:
25:c2:08:df:c7:11:d3:f4:b0:3e:3d:ba:fb:b2:bf:
2c:5d:7c:05:59:bb:b1:03:57:a6:41:e4:4b:2c:92:
7e:c6:36:fe:7d:66:48:59:8c:c8:8e:e6:31:fe:fd:
50:8a:50:bb:70:41:5f:b2:ee:51:d7:68:f3:f7:57:
b5:37:37:63:ef:ca:67:88:3e:46:a5:e9:0a:4c:b1:
eb:e9:ed:40:4a:ae:17:44:6a:67:35:c5:6e:8a:7e:
96:cb:0c:82:11:16:a3:06:b2:96:0e:2d:4b:dc:50:
0c:8b:a3:5e:2b:94:85:96:67:14:be:c7:d1:5a:e2:
1d:fa:1f:97:bc:f0:b1:59:19:19:37:3b:dc:7c:4b:
92:5e:04:80:f6:fc:14:3f:4f:e6:08:e4:11:b2:8d:
68:b7:6b:5b:97:a8:35:7d:0a:42:b7:7a:13:ce:fe:
2b:1e:51:b0:cc:8b:9f:58:32:a3:20:50:3a:d5:54:
88:87:86:2f:39:45:db:2f:83:cb:bf:df:81:6f:fd:
d2:b6:cf:28:a6:52:69:5f:b2:db:b2:e5:51:85:ea:
fd:99:eb:37:11:c9:25:f6:03:a8:f3:83:a2:f6:ad:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:67:F8:F2:F8:1C:E7:C3:57:66:08:76:5E:D7:C4:6E:A1:83:42
X509v3 Authority Key Identifier:
keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:c8:4d:cb:d2:e6:1c:24:5a:0a:aa:3e:0e:a6:bb:14:a8:
0c:07:a9:97:79:23:e9:98:48:30:01:88:be:a2:64:09:24:07:
51:e1:28:a5:9e:8a:99:87:bb:54:48:b2:a9:b7:72:8d:dd:14:
4e:3a:66:93:6f:6b:8c:56:3e:d2:4c:5a:cd:5b:ab:9f:21:ee:
00:68:cb:40:bb:c0:16:7f:05:82:92:ea:a5:af:cc:7e:f3:b4:
a3:91:29:ba:99:5e:3b:d8:c7:b3:8c:d8:f2:82:94:9b:b6:d9:
9a:5e:33:2a:2b:d6:a7:6e:ee:b0:94:04:d3:98:1f:27:c3:34:
80:f2:fc:d4:b7:40:fe:d0:4a:e5:5d:82:b1:a2:ee:0a:1e:34:
7d:d1:73:ae:4e:a0:02:98:58:25:17:88:67:2f:50:67:9c:6b:
12:26:07:0f:48:0a:6f:7f:ab:6e:3d:91:d5:46:d6:1e:7c:04:
2f:5c:6f:25:24:53:5e:fd:04:57:37:6a:f5:19:cf:73:9c:60:
18:56:b1:90:aa:9d:3e:e1:d5:52:43:68:e3:47:dd:1c:dd:59:
ac:0e:7a:c8:d5:8a:c1:dd:8d:c8:90:f0:28:73:1e:ae:22:91:
6d:eb:3b:22:d6:6b:44:65:f7:a7:3c:95:37:cc:de:2a:dd:eb:
02:0b:f1:b5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkREMDExMC8GA1UEBRMoRUU2MEJFRkM5NEJDMEY3NEJEOUQxMTE1NkUxNUJBMjNG
N0VCRTVBODAeFw0yNjA0MDcwNzQyMDVaFw0yNjA0MTQwNzQyMDVaMBgxFjAUBgNV
BAMTDTY5ZDRiNTRkLWI4YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpXa/qtxvq4EVUVJeW0+kiOtCpDGuYbG7HrX84hyXCCN/HEdP0sD49uvuyvyxd
fAVZu7EDV6ZB5Esskn7GNv59ZkhZjMiO5jH+/VCKULtwQV+y7lHXaPP3V7U3N2Pv
ymeIPkal6QpMsevp7UBKrhdEamc1xW6KfpbLDIIRFqMGspYOLUvcUAyLo14rlIWW
ZxS+x9Fa4h36H5e88LFZGRk3O9x8S5JeBID2/BQ/T+YI5BGyjWi3a1uXqDV9CkK3
ehPO/iseUbDMi59YMqMgUDrVVIiHhi85Rdsvg8u/34Fv/dK2zyimUmlfstuy5VGF
6v2Z6zcRySX2A6jzg6L2revRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKidn+PL4
HOfDV2YIdl7XxG6hg0IwHwYDVR0jBBgwFoAU7mC+/JS8D3S9nREVbhW6I/fr5agw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0NBNzUwQUNBQzQ3
MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNTOW5SRVZiaFc2SV9mcjVh
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN21DLV9KUzhEM1M5blJFVmJoVzZJX2ZyNWFnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
REQwL0NBNzUwQUNBQzQ3MDExRjBCRDVBNjIzOUM0RjlBRTAyLzdtQy1fSlM4RDNT
OW5SRVZiaFc2SV9mcjVhZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAcRMhNy9LmHCRaCqo+Dqa7FKgMB6mXeSPpmEgwAYi+omQJJAdR4SilnoqZh7tU
SLKpt3KN3RROOmaTb2uMVj7STFrNW6ufIe4AaMtAu8AWfwWCkuqlr8x+87SjkSm6
mV472MezjNjygpSbttmaXjMqK9anbu6wlATTmB8nwzSA8vzUt0D+0ErlXYKxou4K
HjR90XOuTqACmFglF4hnL1BnnGsSJgcPSApvf6tuPZHVRtYefAQvXG8lJFNe/QRX
N2r1Gc9znGAYVrGQqp0+4dVSQ2jjR90c3VmsDnrI1YrB3Y3IkPAocx6uIpFt6zsi
1mtEZfenPJU3zN4q3esCC/G1
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:27:23 2026 by rpki-client