
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier: Y+5tUXCDwt0U+aWuqKM7BgzWaglWuGYi0uWUG6sE8aQ=
Subject key identifier: 81:BF:40:31:CF:7B:5C:02:83:93:2E:52:29:83:F1:62:A3:8A:78:B9
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial: 3527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number: 3527
Signing time: Tue 24 Mar 2026 15:09:18 +0000
Manifest this update: Tue 24 Mar 2026 15:09:17 +0000
Manifest next update: Tue 31 Mar 2026 15:09:17 +0000
Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: oyG8IsylPKGfvIaDfKV4ITw7pWdmbUu4pMgv9Q2cA44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607 (0x3527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Validity
Not Before: Mar 24 15:09:17 2026 GMT
Not After : Mar 31 15:09:17 2026 GMT
Subject: CN=69c2a91e-23d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:69:0a:06:d8:09:b6:11:24:a2:26:ed:69:
14:bb:09:30:b1:99:36:b0:f0:43:f7:94:3b:c9:c2:
a9:6d:60:05:c1:38:e8:4a:9d:f0:1b:0e:39:b3:18:
ba:7e:d9:50:95:59:0b:99:e1:9f:a8:b0:4c:de:ee:
82:8e:7e:e6:d1:fe:02:b2:fc:d8:c2:3b:db:b3:1e:
ca:f2:e6:be:01:89:e6:6c:84:88:d9:cf:2f:9f:99:
05:ac:dc:3f:9a:c2:a8:f0:59:2c:2c:47:d2:96:3c:
9a:c3:ff:a1:e1:3c:85:35:b1:8f:56:2c:08:09:e2:
85:04:81:95:46:68:c8:e5:aa:6f:8b:94:c5:87:d7:
93:27:17:b6:de:ba:c3:1e:a0:32:8e:01:24:0d:c6:
40:b1:34:58:98:c1:6d:0d:61:34:16:ff:1b:3c:79:
ec:1b:fe:ec:21:61:76:b6:a0:42:25:92:9e:44:5f:
81:3b:9e:cd:3d:c5:69:bf:aa:29:f9:19:11:4a:25:
b6:74:8c:38:7f:d6:26:22:22:68:7b:9a:fa:1f:a4:
f3:c2:d8:b8:d6:25:e8:f0:cf:59:c7:64:54:77:ed:
1b:ed:61:1a:d3:29:48:81:18:6a:2a:c5:fd:c9:54:
d6:2b:37:0e:12:8c:37:c0:6b:f8:1e:48:5a:43:28:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:40:31:CF:7B:5C:02:83:93:2E:52:29:83:F1:62:A3:8A:78:B9
X509v3 Authority Key Identifier:
keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:46:cc:cc:ba:ab:33:4a:eb:3b:db:8e:c8:e0:e3:38:44:35:
7e:11:aa:7a:f4:4e:13:f3:24:b5:99:c7:bf:0b:27:cf:ad:c6:
d0:fc:7d:46:17:87:b7:f9:ca:f9:8f:9a:c1:e7:8a:e3:bc:bf:
8e:3a:16:c1:de:f9:af:11:75:6e:b0:dc:cb:a9:b0:9c:dc:47:
66:62:de:ab:5c:3a:99:98:44:c2:f2:e8:77:dd:60:90:87:20:
6e:59:84:9d:55:5c:2b:13:90:ef:6c:14:70:95:24:78:ee:8e:
29:ef:c6:cc:bd:47:19:e9:f6:60:db:69:29:17:76:0c:cd:3b:
28:62:ba:96:71:bb:c7:6d:c0:fa:db:a4:38:e6:37:1d:83:00:
4c:d1:6a:4f:1d:da:d5:18:02:6e:0b:e6:b9:da:c5:96:e0:62:
f1:fb:0d:e1:c8:46:1a:2f:b2:45:00:4c:67:c8:51:11:bc:a0:
dd:92:45:a9:54:5a:d8:df:2a:47:bd:59:f8:f6:e8:f4:20:e4:
02:b4:12:16:db:11:19:31:ab:81:92:c8:89:89:1c:d4:04:ae:
60:96:d3:19:fd:15:41:09:82:09:8f:a9:cc:20:3a:d1:28:f9:
a7:8c:5b:73:bf:52:46:1a:b3:40:1a:f7:85:b4:1b:ef:e6:57:
b0:88:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:12 2026 by rpki-client