
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: M3qzl6+X+ptgsoWcfGPFMikPrZZsjK0Sr08cMci1jpE=
Subject key identifier: AE:AF:3B:B0:B8:2F:A6:55:03:E1:90:9B:CE:06:B6:8B:C3:DF:86:42
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0BC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0BB1
Signing time: Sat 04 Apr 2026 18:53:25 +0000
Manifest this update: Sat 04 Apr 2026 18:53:24 +0000
Manifest next update: Sat 11 Apr 2026 18:53:24 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: 4zFg4XWTiqQXSekSN/dFptaayvUiq2qZdn59oMQGUDc=)
2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Apr 4 18:53:24 2026 GMT
Not After : Apr 11 18:53:24 2026 GMT
Subject: CN=69d15e24-a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:e9:09:73:9d:81:46:d8:dd:b5:03:de:96:
dc:c3:88:16:6f:e3:08:b9:d6:33:e8:83:dd:cb:60:
ef:42:f9:a2:4f:01:94:45:1b:6b:55:30:50:ba:39:
cc:e6:fa:e8:6e:f6:5b:84:81:06:1a:7e:7b:ca:2c:
8e:db:ad:d9:e7:81:24:0a:30:e4:e3:ec:63:d7:10:
57:e6:72:8e:1b:4b:00:43:3a:88:d8:c6:fd:ae:04:
55:c2:61:72:a2:75:ef:ef:f7:24:ad:44:76:b4:1b:
bc:2d:9a:a8:92:45:da:26:cc:61:b1:b6:45:59:1d:
1b:6c:df:3b:2c:ca:cd:10:a4:06:15:f8:69:2b:b4:
9d:8c:45:86:e2:80:38:a7:b7:b2:8a:70:6e:93:90:
e7:3f:32:95:2d:3a:e0:d2:f0:d8:69:ab:c9:5f:b9:
15:20:e4:8e:dd:46:92:75:48:89:eb:55:e6:17:04:
da:6c:f6:a6:e9:de:27:d4:43:4a:d3:d3:07:ce:67:
a2:8c:43:a4:3b:d9:68:5b:e7:05:fd:41:4b:c7:05:
9b:1a:c5:06:b0:ca:bc:83:e4:fa:4a:c1:76:c7:b5:
12:8f:7f:d7:17:ef:87:cb:59:8b:33:52:0f:94:2f:
16:e1:f2:c0:b3:9e:80:53:fc:af:ca:71:dd:27:c6:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:3B:B0:B8:2F:A6:55:03:E1:90:9B:CE:06:B6:8B:C3:DF:86:42
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:44:6a:1d:cf:42:c4:bc:e5:fa:2a:c0:08:8a:12:68:56:
fe:54:27:67:3a:e1:47:24:49:71:67:41:ad:8d:9d:cc:be:ab:
6d:06:6f:bd:61:79:40:7a:2a:5f:a3:dc:5e:8b:7f:f9:67:2e:
e3:86:36:44:67:44:26:bc:4b:7d:35:24:bf:f0:73:9e:55:d2:
cc:1a:ce:a7:b6:da:16:b4:f5:6c:7c:02:c4:21:e5:54:eb:1f:
cb:ca:b7:d0:20:7a:7e:62:84:06:96:11:51:68:a4:66:2f:74:
8e:c8:02:c7:7b:b5:ad:a6:c2:31:ae:b6:5a:36:7b:5a:fb:7c:
b5:25:e9:e8:1d:96:10:60:27:60:6b:68:96:53:24:4d:22:cc:
87:70:bd:f8:79:ff:cd:c7:ca:6c:bc:03:f6:bf:3a:49:63:e5:
44:dd:14:ac:a1:3c:bf:2d:fe:f2:e8:0f:45:b8:47:13:ab:37:
c6:aa:a8:13:2a:fc:20:be:8f:0d:18:f2:be:eb:30:d2:fb:f8:
a6:45:43:cc:61:e1:6e:be:41:cf:5b:52:db:0c:68:1c:e8:bf:
51:06:d6:3b:63:7d:26:da:51:e0:69:46:67:5b:0f:fd:b8:0a:
81:74:34:c1:53:86:57:87:fe:87:d8:1b:76:8a:ae:75:8c:0a:
22:6c:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:01:14 2026 by rpki-client