
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier: G3OHiDmd3HD3k/umKeuLlHKolfyGOrQifbCMPdGs8EQ=
Subject key identifier: FE:14:AC:BF:6C:25:A4:C7:DF:EA:0A:C6:3D:75:8D:D0:BD:B4:AD:BB
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number: 77
Signing time: Sun 05 Apr 2026 07:08:11 +0000
Manifest this update: Sun 05 Apr 2026 07:08:10 +0000
Manifest next update: Sun 12 Apr 2026 07:08:10 +0000
Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: tNvtabWm1+h0B690XwRZLhxPkc6vAbRr62mqAf4WHCw=)
2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: b8E22OnaIEiCrA4yJOZi7F0AFzWqNO6MaNrnTrS8sIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Validity
Not Before: Apr 5 07:08:10 2026 GMT
Not After : Apr 12 07:08:10 2026 GMT
Subject: CN=69d20a5b-c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:ce:87:85:10:65:aa:b6:f1:2c:25:94:3a:
8e:4a:b0:8b:74:10:67:2c:99:0e:57:d3:85:12:7f:
57:3c:23:3e:80:85:27:35:44:d5:bc:58:98:28:e2:
4e:54:90:c6:0d:25:ef:d8:42:ea:77:64:a1:54:63:
25:f8:89:96:09:f1:65:7b:8f:3b:90:36:e3:a8:71:
06:41:c4:97:60:c2:67:bb:e2:bb:a6:83:12:b4:08:
7f:43:fc:f0:2c:78:6a:2c:25:20:f4:dd:83:36:a6:
07:98:02:de:6e:9c:a0:e5:79:ca:dc:7f:ba:f9:e6:
d1:83:80:ed:68:69:57:ad:89:ff:53:fa:0f:75:91:
9b:5f:ef:f5:8f:03:b6:13:9b:d6:77:93:f9:71:cf:
95:38:78:52:42:9f:09:6e:0d:84:aa:25:fb:c5:de:
b0:ec:2d:e5:3b:01:df:16:2c:6c:73:52:18:bb:73:
e6:b4:6f:54:41:6a:40:89:72:98:24:00:77:83:21:
df:7f:5e:19:f8:c4:05:4b:3a:e4:fa:9e:9c:ad:ad:
b4:1f:e4:39:b7:d6:f5:96:49:ef:78:e7:ca:b2:63:
3b:e6:a3:b6:b7:67:7a:28:5d:21:6f:4d:a8:56:c3:
ac:21:40:0f:e7:bf:f5:a9:39:11:30:b6:eb:f8:36:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:AC:BF:6C:25:A4:C7:DF:EA:0A:C6:3D:75:8D:D0:BD:B4:AD:BB
X509v3 Authority Key Identifier:
keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:e1:a7:d3:d2:e8:37:8c:bb:58:e0:bf:da:25:c4:c2:b9:95:
3b:8f:5f:e3:18:8b:65:a3:d1:5b:d4:79:49:22:21:37:ad:b0:
98:08:57:69:65:84:44:74:e1:6c:ff:0d:29:05:eb:83:5a:b6:
a8:be:99:70:fc:e2:2c:35:82:fd:33:ac:a7:9b:ae:bc:05:93:
5d:d6:9d:e4:98:5e:7f:04:75:34:57:4b:fc:ce:c1:35:f8:25:
46:cd:c4:6d:c3:a8:e2:33:6e:7d:10:79:ab:47:8c:0a:c5:cf:
ce:c5:1b:a3:d9:4c:0f:2b:02:e7:b0:3c:15:8f:54:29:f9:b0:
fa:e9:72:f2:81:cb:5d:6e:cd:5b:57:55:60:36:2a:4f:a8:ed:
41:06:6b:0c:69:c4:a2:84:31:df:1e:5c:94:0f:03:3d:e0:f4:
d1:8c:55:82:27:ff:ab:a2:d9:0f:71:53:96:3c:24:e1:cb:f6:
4b:4b:eb:04:0c:0b:e5:7b:e3:da:ed:ee:0b:f5:1a:04:ea:77:
c5:5b:0d:e7:25:d1:d2:c9:26:df:54:b5:72:44:13:90:50:af:
e5:8a:1c:09:be:9e:79:55:cb:bd:94:1a:c8:21:09:72:e8:d8:
45:b1:e2:4b:74:02:b9:5b:2a:8e:ef:83:ec:47:ed:2a:84:34:
53:7a:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:43 2026 by rpki-client