
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier: H445s6N7tieoJGKNEsvcIygFLaRjRzRXBzi1QYm9KOk=
Subject key identifier: 15:5D:91:15:60:95:54:F8:DD:81:C3:A6:FD:B5:EC:42:11:C8:8E:E2
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial: 091A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number: 0AA7
Signing time: Sat 04 Apr 2026 20:04:56 +0000
Manifest this update: Sat 04 Apr 2026 20:04:56 +0000
Manifest next update: Sat 11 Apr 2026 20:04:56 +0000
Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 9eM1+jVebgMfau2g8NrH+pX3y7KBL5cQZuLw0sM7M2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330 (0x91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Validity
Not Before: Apr 4 20:04:56 2026 GMT
Not After : Apr 11 20:04:56 2026 GMT
Subject: CN=69d16ee8-22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:38:97:9c:27:42:ed:0d:4f:e6:b1:a8:22:
ee:fe:dc:21:90:67:fd:36:02:d1:7e:05:f0:07:81:
47:2d:fe:47:f0:d0:bc:07:21:14:89:59:aa:1f:5d:
76:c2:7a:cb:3c:74:e5:07:e8:0b:c2:09:fa:a9:71:
a6:1b:a3:e5:a5:2c:e5:c8:41:ed:d3:0c:10:dd:14:
a1:d8:09:2f:a6:ed:24:43:81:02:00:7a:98:28:39:
f4:8c:46:3d:98:ec:c2:6d:2c:59:64:f8:4f:5c:26:
39:39:39:2d:7c:ed:58:23:2a:c7:0a:3a:15:64:a2:
6b:5e:e5:57:89:e1:26:38:a1:fb:ad:da:05:fe:23:
f1:0c:c9:69:2b:2b:86:49:b2:b7:7b:64:7a:19:b7:
b0:46:f6:53:a9:c2:70:43:c9:93:de:67:70:00:ec:
41:5e:1e:c6:1b:ef:f2:ca:ea:2d:ac:ec:ed:8c:bc:
ff:8f:48:3d:be:56:df:09:26:60:c4:ab:92:bb:43:
68:46:7b:e0:44:a1:38:94:0b:9d:0e:be:70:e4:7c:
e7:62:38:e5:6b:c8:06:3a:b4:d5:dc:44:05:8d:13:
a0:ba:e8:28:2d:dd:eb:8a:8d:e3:93:16:d6:96:19:
01:a8:4e:11:99:d5:ac:44:61:2f:8d:47:8c:b6:7e:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:91:15:60:95:54:F8:DD:81:C3:A6:FD:B5:EC:42:11:C8:8E:E2
X509v3 Authority Key Identifier:
keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:42:fb:e1:7e:3c:eb:19:a7:08:a7:06:9a:cf:bc:06:fe:b4:
af:73:d0:9a:15:ca:11:9d:dc:86:2c:4b:87:7d:b6:b5:fa:76:
57:de:6d:25:9b:3b:aa:a1:9f:c8:78:c2:d0:9a:af:6f:56:35:
73:c2:25:db:ea:d2:6a:ec:24:a0:cc:39:73:94:21:99:03:86:
3a:29:57:92:9c:cf:8b:2c:6f:88:62:3b:d7:d3:98:6b:c4:78:
24:1b:52:dc:cf:73:4a:54:05:d9:77:40:8a:cd:97:4a:26:ca:
54:47:f9:9c:d2:69:63:27:31:a0:32:cc:03:30:a6:e5:77:e4:
01:9e:92:64:dd:18:21:da:23:31:15:90:d1:ec:13:22:09:bd:
7e:5a:81:05:4e:d3:10:13:55:b0:f3:04:f1:87:0d:ed:c4:10:
9d:05:94:d8:8b:8b:c7:6d:53:9c:a3:96:c4:fc:1e:56:5f:34:
fd:b8:e7:8b:ac:1f:96:fa:dc:fa:5a:07:51:b0:e1:42:b9:c1:
e5:09:c4:6c:cf:8d:ee:67:42:bb:72:95:d6:5a:40:f0:98:cb:
1a:46:84:93:40:38:b0:6e:30:34:fc:73:d9:87:5c:a2:c9:4c:
1c:e2:5b:90:b1:c0:59:86:28:cd:f2:74:f9:e1:3f:f2:5e:c7:
b8:15:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:42 2026 by rpki-client