
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
File: C7u50Awy3Cf2uMqAHgDtKYM59qM.mft (raw, json)
Hash identifier: tVF8Qj62c5eCYEmG2b3zh+dIgHqD0/sI7LtaSjnuVk0=
Subject key identifier: E4:C2:8C:35:57:E1:F4:72:6D:BA:C8:7A:39:D5:83:2B:47:85:2E:F1
Authority key identifier: 0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
Certificate issuer: /CN=A913CFCF/serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
Manifest number: 1D
Signing time: Wed 25 Mar 2026 08:08:06 +0000
Manifest this update: Wed 25 Mar 2026 08:08:06 +0000
Manifest next update: Wed 01 Apr 2026 08:08:06 +0000
Files and hashes: 1: C7u50Awy3Cf2uMqAHgDtKYM59qM.crl (hash: SYtTZUHqPcAt3R9JI4aROMNvD1zaSfMVGr9SN7iLo9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:08:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CFCF, serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Validity
Not Before: Mar 25 08:08:06 2026 GMT
Not After : Apr 1 08:08:06 2026 GMT
Subject: CN=69c397e6-c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:c3:a5:8b:6d:ab:e7:69:fc:0e:02:04:2c:
92:f4:5d:27:d2:9f:9a:e7:f3:d3:94:45:71:cd:07:
ea:24:29:70:25:df:98:0f:73:01:8b:2c:cc:ab:9d:
fb:8d:ab:a9:2e:b8:e0:8d:e7:02:70:e2:19:2b:43:
62:50:33:08:87:ba:39:8b:ae:2b:5f:e1:c7:dc:cf:
aa:82:3c:c3:89:00:bb:38:a1:07:2a:8a:00:8c:34:
d1:8c:da:c6:02:fa:81:60:3c:5f:9e:76:2e:18:1c:
be:f2:55:aa:2d:e9:2a:f4:22:11:81:e8:1d:c3:22:
78:de:fc:7c:1f:28:ef:ad:65:3c:8a:a0:ea:0d:0e:
d7:b3:84:0d:9d:b5:54:7b:d0:8d:9e:d8:67:ce:d7:
38:25:12:8c:af:dc:0e:8d:65:0e:17:83:fd:02:8f:
80:33:1a:66:84:78:5c:92:ed:17:ef:5f:03:e1:71:
77:74:6b:37:10:0c:6d:18:3f:8e:87:e0:14:9a:88:
1e:85:d0:5f:e0:c7:8b:cb:72:7d:9b:4a:64:1f:89:
43:6d:01:b6:a2:c7:df:c9:a3:68:17:e2:b1:fd:27:
a8:a2:73:a4:e9:d0:ac:71:1b:7e:54:b7:c0:4a:9a:
e2:fd:a4:44:f7:f2:b6:4f:a6:76:3c:3a:df:61:00:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:8C:35:57:E1:F4:72:6D:BA:C8:7A:39:D5:83:2B:47:85:2E:F1
X509v3 Authority Key Identifier:
keyid:0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:4d:f4:38:90:da:a7:b6:e0:19:e9:39:8e:00:61:e0:f1:
f9:c1:2d:5a:50:51:f0:d7:f7:9c:c9:9a:90:64:02:7a:f8:4d:
00:b0:78:23:47:d5:13:fd:ed:99:90:c4:bc:2d:d1:ef:b3:0e:
dc:72:b1:da:8f:86:dd:8b:23:be:d1:93:0c:37:bf:4a:54:ff:
d2:ab:af:90:bc:25:d0:1f:ea:68:67:0f:cb:98:fa:72:fb:ad:
eb:a8:e3:ba:ba:33:49:dc:03:60:b0:c7:9a:65:7b:95:96:e1:
ee:a8:b3:3a:fe:fd:38:8b:7f:80:23:0b:45:c2:7a:d8:b4:ac:
4f:f5:59:9b:19:e0:91:83:f0:07:b1:ec:4d:66:2d:d8:cb:c8:
63:6e:f3:8c:82:ba:61:5e:73:ff:d9:27:85:75:51:61:3c:94:
07:99:ef:5f:50:fd:ff:db:2b:1b:66:9b:b3:60:46:d4:da:23:
47:84:73:7d:da:fa:77:b2:df:5a:c6:65:d7:ca:fd:02:52:1d:
b6:4f:d9:e8:9d:6c:1f:71:e5:79:03:64:cd:21:ef:cb:5c:91:
f8:57:3c:49:91:e7:0d:24:26:1f:a1:63:54:9b:54:ce:97:f0:
b8:5f:72:73:35:22:94:9e:44:55:28:ee:f7:4b:7a:16:25:ad:
6a:73:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:24 2026 by rpki-client