
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json)
Hash identifier: A9UeJmQEwBFQ2lfHvjmmuCWVfWnUDT46WY5w9xTeHaQ=
Subject key identifier: F4:A4:33:E4:4F:D0:F2:D5:71:1F:34:2A:16:36:56:D7:EE:7F:AD:93
Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 06:16:27 +0000
Manifest this update: Fri 17 Apr 2026 06:16:26 +0000
Manifest next update: Fri 24 Apr 2026 06:16:26 +0000
Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: CE9JQA8GcKbopxCnsCW/tEmtQeyK7Esv9DtWIvI98BY=)
2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Validity
Not Before: Apr 17 06:16:26 2026 GMT
Not After : Apr 24 06:16:26 2026 GMT
Subject: CN=69e1d03b-a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:3d:92:d1:ee:73:19:f3:6b:52:17:5e:7c:
18:94:da:3d:8f:86:52:5a:4f:37:4d:f3:3e:7a:20:
08:1d:4f:96:1e:76:2e:2a:06:3c:41:67:0d:cc:cb:
76:21:14:07:9a:73:eb:40:96:19:78:a9:02:9a:2a:
38:5c:28:33:11:73:5d:a3:fc:dc:90:fe:1a:8f:22:
76:8d:2a:b7:c3:6c:62:be:83:ae:26:2e:21:f1:14:
49:5f:08:42:ed:9e:6a:5e:98:4f:76:f3:68:e1:ca:
13:7c:95:7b:49:44:4b:7c:06:ba:d4:0b:d3:f5:20:
17:d0:d9:b0:ae:4a:e1:c3:5d:29:8b:07:4a:b7:42:
ec:47:d4:27:f9:fe:0b:4d:12:49:db:45:6b:73:b5:
b4:81:7f:5b:28:ba:d8:76:4e:ee:b2:0e:cf:87:a2:
8e:c5:ce:df:9b:a7:81:42:d2:a8:96:92:0d:79:31:
19:79:3e:18:05:16:78:8b:84:f8:40:21:29:78:26:
06:3b:0f:7c:e6:e9:a2:1f:a1:eb:92:8d:bc:4c:85:
0c:d8:10:2d:4e:fd:54:60:40:be:af:92:0d:70:a7:
4c:b4:b4:1f:10:6b:35:d8:76:5f:34:96:7a:fc:30:
77:3f:81:ca:3e:9e:5a:b0:0d:14:b1:4e:6f:9f:f0:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:33:E4:4F:D0:F2:D5:71:1F:34:2A:16:36:56:D7:EE:7F:AD:93
X509v3 Authority Key Identifier:
keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:41:ed:c7:a1:dc:4b:c8:81:98:75:8b:b7:bc:e9:7b:82:ff:
65:10:78:09:33:18:f8:9c:72:49:71:24:83:a8:df:62:13:d5:
2d:9d:0c:f2:db:d3:bb:d5:1f:25:39:ab:2c:41:cd:a9:1f:50:
69:45:5c:6f:44:08:6e:95:c6:7e:4d:47:47:6b:3b:0a:13:a4:
77:54:77:db:36:b7:2b:35:f1:5b:d4:af:71:54:1d:2a:5e:72:
8c:4f:fa:b5:a5:cd:ac:60:f4:ba:d1:54:6a:a7:1d:02:7f:45:
92:87:f8:47:d9:a4:e1:a3:50:e3:a8:6e:38:26:a9:f2:e5:3a:
25:ac:b1:cf:ef:40:29:63:46:02:29:17:86:04:5b:2c:e9:9e:
55:67:2b:50:cf:88:96:d0:a3:3b:0e:4c:12:06:9d:02:05:e9:
a1:7d:4c:77:c7:d6:88:e6:a1:0d:34:6a:91:d4:cc:96:3d:80:
79:79:f2:1d:f4:49:d5:e9:20:54:0a:52:ca:d1:b7:16:4f:cf:
c2:3b:1a:08:89:38:e3:ff:60:7c:b3:ed:af:26:51:b4:05:ed:
54:33:16:1e:d4:7e:09:d1:b0:dd:b3:af:28:28:47:58:e2:ad:
1b:7b:83:85:c9:54:ff:9f:44:82:11:b4:a9:63:38:b7:41:46:
1f:a7:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:23 2026 by rpki-client