
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json)
Hash identifier: oocSN+b3axwsCqdlVoBDaBQPefkEW/ar7YxGmyY5ZLQ=
Subject key identifier: 80:55:78:23:26:F4:AE:B7:66:31:73:54:AE:6F:92:61:5C:E1:C3:7F
Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
Manifest number: 77
Signing time: Sun 05 Apr 2026 07:09:30 +0000
Manifest this update: Sun 05 Apr 2026 07:09:29 +0000
Manifest next update: Sun 12 Apr 2026 07:09:29 +0000
Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: QVck2wnvtw0AWeR25i4BC207tIhO3faxjwOXNQg4iXA=)
2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Validity
Not Before: Apr 5 07:09:29 2026 GMT
Not After : Apr 12 07:09:29 2026 GMT
Subject: CN=69d20aa9-25ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:21:b7:db:1d:b7:c5:29:13:92:fa:9f:ab:
18:42:20:13:e1:a6:bc:23:5f:8f:bf:23:96:7e:ef:
2b:af:b6:3c:58:eb:d8:c0:61:a6:85:a5:5f:c0:c0:
1a:14:dc:8c:62:32:94:39:53:b7:37:97:be:ad:78:
46:15:36:16:0e:ea:f0:0d:9e:59:74:0a:b9:64:9c:
c5:d4:9e:f2:27:c7:85:cc:1c:4c:7c:c7:1c:a2:ad:
65:b2:45:36:8e:d8:5a:cb:2e:d3:7c:4d:e0:38:20:
a7:88:b1:c1:41:e3:46:81:e0:b8:a1:77:7f:90:46:
24:c2:c9:b2:c9:bf:f6:2a:c2:2c:e1:d5:60:a6:21:
cd:fd:84:a3:c8:60:a4:82:47:1e:0b:b3:cc:a3:8b:
45:4a:35:95:45:1a:cd:4a:7d:88:87:3a:f5:38:5a:
38:ba:1c:cf:f7:a3:ba:88:fe:e2:86:d5:2c:c5:78:
57:06:19:3d:fa:de:bc:0b:9c:37:8d:8f:1b:7e:b3:
4b:cb:aa:ce:41:52:d5:43:1b:8f:7d:a7:cb:42:53:
07:e4:2f:ff:d5:1e:c9:26:c8:18:a8:36:e7:bb:fc:
ad:90:6d:6e:d5:75:70:0a:37:89:cc:3c:f5:f4:2c:
6d:a0:f1:0b:ee:64:53:00:ce:83:27:a4:4b:a1:b6:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:78:23:26:F4:AE:B7:66:31:73:54:AE:6F:92:61:5C:E1:C3:7F
X509v3 Authority Key Identifier:
keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7d:fa:5d:17:da:0f:1e:9e:24:66:ed:e6:ac:9f:c3:0c:c8:
56:4f:59:6b:c9:66:7a:66:96:b3:da:b2:37:5b:c3:4f:42:32:
71:e0:82:e9:3c:fd:25:8a:a0:54:d7:d9:ed:94:24:bc:44:23:
c9:07:28:eb:9b:97:fc:c1:40:62:99:40:8a:4d:c4:d3:90:45:
44:7e:6f:d6:cd:24:bb:af:35:ba:fe:2c:22:58:7e:1b:98:cd:
e5:f3:7f:e8:b7:ac:42:42:12:68:b6:c2:c7:71:dd:2c:93:5d:
81:92:b7:3f:12:fa:a3:d8:38:73:2a:26:53:0f:4d:be:f5:3d:
de:d9:63:80:ae:97:8f:a2:38:6d:94:67:5f:19:bc:64:ba:7a:
d2:ea:73:e3:51:60:8e:8f:95:1f:ef:79:a4:ca:34:76:2b:28:
ca:ba:72:a4:12:8f:99:58:a0:31:94:46:4f:8d:8e:01:89:8b:
a8:55:69:52:d4:cc:fe:a2:7c:f5:6f:0b:34:b4:7e:f0:a6:62:
7b:d2:cd:a2:20:c5:99:1d:d3:7f:96:e9:11:e3:d8:c7:ac:32:
9c:a1:ca:fe:5f:8c:41:2c:64:0e:cb:1a:39:6b:c2:97:e6:9e:
5e:e1:79:6d:73:2d:1f:09:6c:f0:49:bf:47:ad:f9:96:10:99:
16:84:57:0f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MDhEOTExMC8GA1UEBRMoMkJCN0U2RjY0RTg5M0Q5MTMwNEE4QjI1ODg2MDM1MEQ2
NzUwNTRBRDAeFw0yNjA0MDUwNzA5MjlaFw0yNjA0MTIwNzA5MjlaMBgxFjAUBgNV
BAMTDTY5ZDIwYWE5LTI1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCOQCG32x23xSkTkvqfqxhCIBPhprwjX4+/I5Z+7yuvtjxY69jAYaaFpV/AwBoU
3IxiMpQ5U7c3l76teEYVNhYO6vANnll0CrlknMXUnvInx4XMHEx8xxyirWWyRTaO
2FrLLtN8TeA4IKeIscFB40aB4Lihd3+QRiTCybLJv/Yqwizh1WCmIc39hKPIYKSC
Rx4Ls8yji0VKNZVFGs1KfYiHOvU4Wji6HM/3o7qI/uKG1SzFeFcGGT363rwLnDeN
jxt+s0vLqs5BUtVDG499p8tCUwfkL//VHskmyBioNue7/K2QbW7VdXAKN4nMPPX0
LG2g8QvuZFMAzoMnpEuhtjJBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgFV4Iyb0
rrdmMXNUrm+SYVzhw38wHwYDVR0jBBgwFoAUK7fm9k6JPZEwSosliGA1DWdQVK0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEQ5LzBGRDZBQjUyODE3
MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZL
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSzdmbTlrNkpQWkV3U29zbGlHQTFEV2RRVkswLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
OEQ5LzBGRDZBQjUyODE3MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpF
d1Nvc2xpR0ExRFdkUVZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAcffpdF9oPHp4kZu3mrJ/DDMhWT1lryWZ6Zpaz2rI3W8NPQjJx4ILpPP0liqBU
19ntlCS8RCPJByjrm5f8wUBimUCKTcTTkEVEfm/WzSS7rzW6/iwiWH4bmM3l83/o
t6xCQhJotsLHcd0sk12Bkrc/Evqj2DhzKiZTD02+9T3e2WOArpePojhtlGdfGbxk
unrS6nPjUWCOj5Uf73mkyjR2KyjKunKkEo+ZWKAxlEZPjY4BiYuoVWlS1Mz+onz1
bws0tH7wpmJ70s2iIMWZHdN/lukR49jHrDKcocr+X4xBLGQOyxo5a8KX5p5e4Xlt
cy0fCWzwSb9HrfmWEJkWhFcP
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:52 2026 by rpki-client