
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: vNJ+lE5i2/tel2Vlwl0ruOKg05aCKXaf8h4KQqUNaCc=
Subject key identifier: 0D:9D:AC:DA:50:C0:56:AC:56:79:D6:77:38:03:F6:15:5B:71:9F:42
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 0250
Signing time: Wed 25 Mar 2026 01:46:42 +0000
Manifest this update: Wed 25 Mar 2026 01:46:42 +0000
Manifest next update: Wed 01 Apr 2026 01:46:42 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: RWF5cufsK1p1uoAuDPVf2UA7I+VSdkMJFJEKnL+XgUc=)
2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: jRvafP6NvF0333PZOi2JG/WbiklUoPDz6/v/1RBF/LE=)
3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: qY2oWQ6O24uLiBQ0TycUS4IgcjTJHFLS3QInlmGLA34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Mar 25 01:46:42 2026 GMT
Not After : Apr 1 01:46:42 2026 GMT
Subject: CN=69c33e82-cc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:6c:a2:6c:91:a9:a6:c8:c1:4b:21:54:c0:
22:3d:1a:34:41:9a:4e:a2:e2:32:fa:65:b2:aa:aa:
ed:c6:34:b5:9b:3c:d1:d6:b0:da:cd:6f:3f:51:b1:
03:d2:54:18:9f:d4:3b:60:55:07:86:4c:51:c7:5a:
ef:55:30:60:51:27:44:bd:4e:ad:22:bf:d3:df:b5:
a4:99:5d:1b:b7:59:0f:02:e9:c3:46:f8:ed:5e:81:
bd:e4:06:be:a6:9b:e6:7f:18:a2:61:fd:0a:2a:15:
3c:71:c1:94:31:b3:e6:6a:08:50:48:23:f5:70:cb:
ce:48:7e:77:74:88:b2:53:50:a4:51:05:1b:e7:6a:
f1:9e:13:ee:49:09:52:28:71:bc:43:ca:8b:86:c1:
23:1c:3b:cf:db:e5:7e:6a:58:d5:fb:18:ec:08:58:
86:6f:b3:72:d3:e8:c0:3c:f6:16:ff:44:72:ae:17:
10:96:c8:45:db:14:15:08:08:e7:7a:d0:97:72:ce:
cc:d0:bc:d4:e9:60:25:c7:b8:25:b7:02:08:90:a8:
ee:4d:7d:1b:88:5b:66:06:20:56:53:ac:f5:83:b3:
e0:71:a6:85:3b:52:a8:14:83:00:89:30:a1:81:3f:
62:99:98:54:df:b6:13:69:d4:27:6e:35:36:0f:9c:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:AC:DA:50:C0:56:AC:56:79:D6:77:38:03:F6:15:5B:71:9F:42
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8b:e8:6f:8c:63:33:60:8c:39:10:19:b5:dc:30:c6:c7:04:
d8:11:0a:37:c3:91:20:85:d8:d9:fa:6b:22:da:1d:6f:63:ac:
1c:8b:12:31:7b:c1:01:c6:49:63:58:20:6d:15:01:c5:2e:e0:
8c:57:39:79:eb:82:8c:f6:80:f9:14:6d:57:7f:da:f2:2e:20:
dd:e8:e0:d6:93:a0:75:cd:b5:14:95:3e:5f:6d:e6:24:b6:9a:
2a:85:1b:68:cd:dd:f6:98:93:d3:11:44:57:97:44:46:51:f1:
ec:a9:04:c5:1e:cd:c2:ae:d4:31:f9:37:a3:ff:50:35:40:99:
12:bf:a5:2e:0c:18:5d:21:70:98:bc:ea:f0:4e:30:f9:62:48:
dd:8d:d7:8e:10:ef:71:76:40:1e:ad:a6:94:68:f3:5d:47:67:
9e:e6:68:7c:26:7f:54:92:29:2f:47:db:79:1b:5b:5a:c3:e5:
d2:46:21:c1:06:5e:d5:3e:9d:60:5f:0f:61:5e:90:04:72:50:
57:1b:9a:5a:a1:60:b9:ec:45:5e:14:09:c0:a8:bb:85:ba:22:
04:26:9e:49:28:60:c1:01:45:54:bb:67:d7:bd:3c:81:43:74:
75:44:6c:18:0a:91:1c:ea:69:94:6d:67:35:17:f2:14:ec:b1:
67:86:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:54 2026 by rpki-client