
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json)
Hash identifier: ssEVHT+3+VnvmAbDPHt0r5jlFInj3xZhU3t2fB2eLDA=
Subject key identifier: CA:45:48:45:BE:36:08:94:34:1A:03:E6:C4:68:5B:19:B8:1E:CB:14
Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Certificate serial: 0BF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
Manifest number: 0BEF
Signing time: Tue 24 Mar 2026 18:41:32 +0000
Manifest this update: Tue 24 Mar 2026 18:41:31 +0000
Manifest next update: Tue 31 Mar 2026 18:41:31 +0000
Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: VDQOvpFIVMtUXCxJNnqPYNYYctgPpVHFHZM/j/rtuN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Validity
Not Before: Mar 24 18:41:31 2026 GMT
Not After : Mar 31 18:41:31 2026 GMT
Subject: CN=69c2dadb-31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:ae:28:6f:a3:53:30:20:70:ca:28:42:f3:
ac:45:23:a2:08:1c:bf:00:19:91:39:6f:40:a7:a5:
1f:d3:81:39:b6:ee:e4:58:4a:6d:01:4a:3d:d7:a7:
5c:a8:cc:72:4d:5f:8e:8a:c9:22:e7:11:bb:dd:b3:
9b:91:3b:6c:d6:08:79:5a:9e:88:68:54:05:a7:78:
fc:94:08:21:36:d3:28:ca:4b:61:65:17:e9:fb:4b:
31:7a:7f:db:aa:71:09:a6:69:5a:53:44:8f:62:47:
2a:51:78:a7:e8:35:37:4c:e4:3d:aa:92:a2:eb:df:
dd:2f:3b:e6:99:aa:31:b3:69:cc:61:f8:86:06:cf:
b9:bf:e4:0a:ea:eb:95:8c:21:ca:66:b5:79:2b:5a:
46:f1:04:04:2d:79:a8:bf:e9:2b:8a:e4:5f:c5:35:
bf:7d:46:d8:60:dd:9d:0c:cb:83:da:55:52:b5:4f:
0b:30:20:90:96:cb:54:16:e4:3a:89:7a:a6:cc:56:
6d:1b:45:a8:c8:8a:3b:de:a3:2b:0a:4d:9e:b8:b3:
a8:05:5f:06:d2:6e:6f:e5:b2:e6:90:30:b1:f8:5d:
96:6c:b6:f9:eb:f0:81:c8:ed:87:51:82:87:13:b3:
43:b7:78:eb:78:a5:4c:84:ad:be:41:e9:06:53:da:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:48:45:BE:36:08:94:34:1A:03:E6:C4:68:5B:19:B8:1E:CB:14
X509v3 Authority Key Identifier:
keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:a2:7a:48:0b:97:c1:83:68:d0:2c:73:0a:6c:9d:c6:65:3c:
db:7f:de:d1:ce:a3:c7:f3:2c:ee:7b:5a:65:b7:76:51:2e:81:
4e:b2:4c:f4:65:aa:ef:ed:55:13:6a:75:f9:95:c4:db:c7:6d:
54:0e:85:33:16:4f:d2:d5:6d:87:a7:bb:22:fc:0d:12:22:93:
13:46:0d:35:5c:d5:47:71:83:c3:03:4c:10:f5:d7:e6:88:24:
d0:92:94:04:5e:af:eb:e0:71:92:2b:91:2e:a6:f5:77:0f:e2:
5c:26:a6:cd:85:d5:e6:0f:15:f8:5d:96:5c:d0:b5:8d:22:8e:
cc:0f:c1:3e:54:0f:11:14:1c:08:de:e7:57:ff:1a:71:33:64:
e9:30:72:16:69:22:e0:0a:8d:85:ce:fc:ae:34:6f:4b:c8:bd:
b3:b5:3e:b7:7b:fa:08:38:a5:15:fc:46:c3:ef:55:7d:9e:f0:
90:f2:23:6e:3e:08:83:06:e7:95:0e:45:ed:17:dc:19:cf:01:
c2:ef:a8:51:6c:5a:84:48:39:74:44:f7:e5:51:78:ab:66:28:
6c:2d:23:b9:f2:bb:7e:1e:35:1b:a3:0e:b1:2b:6c:38:db:24:
d1:7f:a5:63:fe:3a:28:0b:91:ba:00:6e:21:95:8e:ac:57:d5:
5c:5f:c8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:36 2026 by rpki-client