
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: WFPa0pMSWSQf8mFm57mjwyCUW4EVJE2Ph5kxTesFLXI=
Subject key identifier: CB:84:FF:95:B0:92:D0:70:95:D0:5C:A6:F5:43:17:F8:18:AA:BF:1E
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: 01A8
Signing time: Mon 20 Apr 2026 23:39:42 +0000
Manifest this update: Mon 20 Apr 2026 23:39:41 +0000
Manifest next update: Mon 27 Apr 2026 23:39:41 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: pcGDQMRmMM2SCnKHmVH+pO8fWX4Hifqg4TMtvZYb4so=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: Jpr2rdfDo4+UmyigrHHOPqRZP94BLcmyPwbnjdRwNGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Apr 20 23:39:41 2026 GMT
Not After : Apr 27 23:39:41 2026 GMT
Subject: CN=69e6b93d-686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:97:58:57:93:55:39:24:91:ce:93:8e:89:
07:c8:8b:88:19:f1:0d:47:d3:e3:7d:e5:5f:a0:73:
6d:28:7d:2c:0d:75:e1:6a:fa:2e:18:e9:ad:18:89:
20:54:8a:fd:0b:c4:16:d9:d7:38:ed:43:2a:a9:95:
c4:d5:38:ae:5b:9b:1a:ca:a4:de:d0:c1:20:8e:08:
cd:a4:9e:14:11:da:02:62:62:fb:be:99:06:08:76:
97:98:c8:fb:c7:d9:09:9a:e1:b8:d2:47:af:d2:c8:
ba:3e:60:47:57:f5:92:25:60:35:80:1e:ec:61:5b:
c2:9d:8d:24:ea:06:26:39:00:78:69:b3:49:3b:a4:
c0:c4:19:28:12:08:9c:04:00:7f:01:57:60:46:b4:
fd:24:7c:23:d9:40:61:82:b1:ee:8f:77:7b:4d:cd:
69:ca:4d:47:db:c3:6c:40:95:35:80:eb:4c:41:72:
72:b0:26:fd:f9:ad:3f:3b:0f:83:29:ed:a6:79:07:
69:d9:bd:31:64:3e:6a:c3:cd:ec:17:d6:b9:1c:3c:
48:f4:e5:45:75:68:ae:fd:64:b2:40:de:04:d4:10:
f3:10:62:9e:10:cd:95:c5:5d:82:ba:5a:6c:97:a2:
12:01:03:5b:e5:cc:0b:47:e2:22:f6:24:74:6a:0d:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:FF:95:B0:92:D0:70:95:D0:5C:A6:F5:43:17:F8:18:AA:BF:1E
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:33:36:e8:d2:83:ba:96:78:12:53:60:ef:c8:d0:5d:d6:
f1:26:72:bf:57:d7:c2:5d:41:07:d3:fe:01:43:7d:1e:ae:29:
f2:87:f4:ba:75:e4:9f:d4:e5:a1:5d:4d:1c:41:27:ff:fc:27:
aa:bb:8e:7f:5c:c1:7c:b9:6e:ee:3c:2a:b8:f1:2a:db:f5:34:
47:12:9c:8c:cf:19:58:43:42:86:46:77:9e:c9:22:30:09:91:
70:8d:cc:99:33:3e:a1:cc:e7:68:b5:0e:13:8f:9b:a8:df:f4:
e5:a8:23:8e:e4:fc:b8:b3:cb:61:e1:38:99:87:47:e1:24:8e:
70:19:01:c2:b5:43:ee:a2:7a:6d:77:a0:59:c2:e9:b9:ce:04:
de:fc:b9:1a:95:01:a8:27:dc:a1:eb:db:86:8c:30:7f:1a:89:
41:00:64:31:3b:74:1b:cc:c1:58:41:ef:6d:ff:06:b7:58:a4:
97:37:d0:f4:42:06:b3:58:e8:62:52:80:83:00:a2:65:76:00:
01:ae:d3:64:64:cf:5d:da:5c:00:dd:0c:d4:a7:17:a6:ac:4c:
81:e3:1d:2c:dc:9c:2f:05:d4:d1:d8:d9:9a:41:b5:5a:75:e8:
50:ce:01:e1:53:77:72:f4:08:ca:44:d9:e3:6d:56:22:9c:d8:
e1:b2:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:22 2026 by rpki-client