
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier: ezC/PoZs4yHbrfb0Uwgb+CZvbeEjXniKY5Oc4dooDfI=
Subject key identifier: 43:2F:5C:94:9E:25:4C:3F:24:6F:2A:84:8B:5C:92:31:34:0B:67:0E
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number: 44
Signing time: Wed 25 Mar 2026 07:34:47 +0000
Manifest this update: Wed 25 Mar 2026 07:34:47 +0000
Manifest next update: Wed 01 Apr 2026 07:34:47 +0000
Files and hashes: 1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: 8uvWdcXmKn1hJDD9kPGHqGCZf0t7TJC9o05JHZOZbwM=)
2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Validity
Not Before: Mar 25 07:34:47 2026 GMT
Not After : Apr 1 07:34:47 2026 GMT
Subject: CN=69c39017-9182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:7a:fb:b7:82:6f:c9:31:f1:62:6d:c4:ab:
d5:c0:27:c5:58:f3:14:96:cc:43:4e:ff:ba:04:f7:
c8:61:bd:83:fc:ba:15:c7:bc:42:04:31:9d:1e:bb:
68:1d:2e:07:2c:74:bd:ca:52:1b:4b:d9:b4:84:0d:
bf:99:cc:24:41:0a:c0:3b:cc:0d:04:db:af:df:f1:
c1:80:bd:34:60:39:94:36:12:f6:61:ef:86:86:32:
8c:04:b6:64:0d:ce:de:3a:7a:f0:34:a6:8a:be:4d:
1d:47:9b:58:77:47:55:16:07:90:29:fb:ad:8c:07:
2b:84:93:ab:b2:ec:57:6f:7f:2b:26:d9:2e:45:50:
b5:0b:27:47:74:07:19:3d:f8:03:90:12:61:b5:ab:
87:bf:8e:b6:2d:8a:50:c9:62:a1:e9:27:a0:bd:89:
8f:d0:a4:cb:de:82:df:2b:5e:21:35:a9:b4:2f:ca:
04:a1:8d:05:e3:96:02:0f:d5:1c:02:f4:68:0d:44:
f4:ca:b5:ba:74:c1:ff:49:34:02:cd:02:9a:4c:d7:
d4:af:37:ce:4f:eb:4b:5e:c6:4b:b1:c1:f4:71:05:
7b:e6:e8:59:7d:e0:59:f2:e1:5a:e2:e9:56:dd:66:
c2:ed:d2:c2:a5:62:63:72:9f:ec:be:ec:01:5c:4a:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:5C:94:9E:25:4C:3F:24:6F:2A:84:8B:5C:92:31:34:0B:67:0E
X509v3 Authority Key Identifier:
keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:72:9b:d7:6a:f4:18:d2:d6:a5:a6:e0:63:93:90:8b:27:67:
20:b3:22:db:41:58:f2:9f:d9:9c:39:42:16:20:0b:10:d3:e9:
a6:9f:f8:59:cd:bc:ce:76:c9:22:99:5e:4e:d0:28:41:c4:f1:
ba:29:7a:46:94:53:9a:68:79:04:64:28:45:71:42:93:3a:84:
54:09:aa:bc:45:6b:b8:51:84:11:0f:e3:57:a7:e3:e6:96:a8:
de:ee:6d:79:55:82:3e:09:ad:5f:94:85:19:c1:49:04:a2:f4:
0a:75:7b:ed:a2:e3:06:72:74:34:fe:1c:1f:c0:6f:c2:0e:2c:
a2:6d:5c:c2:3c:e2:cd:da:53:66:ba:e0:85:b3:57:46:e5:ee:
ca:35:04:34:d8:7c:ac:00:44:3a:67:b4:66:42:4f:39:d0:d4:
6f:d9:41:69:85:c1:f9:d3:ac:08:af:86:73:e1:2e:f6:d6:46:
4a:fb:13:bc:d4:09:b6:b4:4f:39:ef:d6:62:7c:c2:32:08:8e:
da:66:72:b0:e6:ca:20:ad:b6:f1:d4:9b:e7:35:8b:a6:a8:3c:
4a:59:15:45:78:14:ad:28:a9:6c:10:6f:a6:16:e5:34:8e:f3:
82:5c:40:10:9a:1f:1f:05:91:0d:d2:e7:0a:1c:aa:7b:45:23:
31:9d:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:35 2026 by rpki-client