
$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier: DzdUXBOXMKpgYpqnlsf0l/lTGDjQs+w+G2i9Q7E2FKc=
Subject key identifier: 38:9E:BE:73:C4:D3:37:9C:88:F2:8A:C1:F4:88:55:3C:FA:D3:A8:42
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number: 0508
Signing time: Thu 26 Mar 2026 23:29:23 +0000
Manifest this update: Thu 26 Mar 2026 23:29:23 +0000
Manifest next update: Thu 02 Apr 2026 23:29:23 +0000
Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: PXmV4z2GbWNxi8Tums2DEMI15BsS7DmTJFj0n8TZsYM=)
2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: PZZSaZ/jY/+Q5rYNb4tAqwzAZjO5/D1Dz+zXHEh3vC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Validity
Not Before: Mar 26 23:29:23 2026 GMT
Not After : Apr 2 23:29:23 2026 GMT
Subject: CN=69c5c153-a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:59:22:d7:0a:79:6a:74:89:74:56:45:00:
3f:d7:d3:c4:a2:25:88:56:42:b9:72:f4:86:73:d3:
e9:6e:4e:6e:aa:0a:b6:93:97:27:29:61:77:4c:e7:
b7:82:51:32:56:31:86:d0:fb:a0:ce:83:96:59:23:
21:d4:01:82:fb:dd:c3:49:52:bb:ee:24:15:60:ec:
43:c9:2b:9c:11:e9:58:d7:c4:1b:4b:2a:10:69:51:
4f:d0:85:c7:83:6b:ab:c8:61:c4:dd:92:08:98:7e:
97:59:9e:59:5d:dc:9c:4d:d5:a7:37:7f:67:6f:1f:
26:cd:bb:7f:83:60:27:72:ab:ed:c5:13:d2:20:70:
16:93:36:ec:32:37:e6:b9:57:65:6e:8c:aa:a3:94:
af:d8:5b:1c:f0:87:0c:6a:85:cd:21:34:bc:53:0b:
2e:c1:ad:c4:ea:37:9f:af:c0:3f:d2:8e:79:88:df:
e5:b8:3e:5b:e7:5d:23:84:4d:19:c1:5f:b8:e1:73:
7d:6e:89:9b:e5:0a:1d:60:52:ae:7f:18:44:15:69:
55:4b:bc:62:7e:af:5f:25:4d:77:e8:f6:aa:fe:d3:
c2:d1:fa:c4:eb:40:f7:94:bd:ed:51:49:27:9a:70:
95:02:ee:66:d0:58:07:3f:ae:c5:ca:a0:a1:7f:47:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:BE:73:C4:D3:37:9C:88:F2:8A:C1:F4:88:55:3C:FA:D3:A8:42
X509v3 Authority Key Identifier:
keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a4:8e:19:ec:d6:b7:3c:4d:be:c6:8f:b4:72:df:02:f4:36:
5f:f9:c3:b6:e7:27:6b:a4:6e:10:eb:73:ba:5f:f0:bc:56:fe:
b3:96:dc:eb:40:6a:29:6c:ba:4c:02:7b:96:8a:e2:ca:ce:5a:
b6:ec:0e:d7:c7:11:bf:e3:c6:c8:f0:12:b9:64:a9:ce:fc:67:
bf:44:86:16:c4:68:1f:2d:82:d8:5f:b4:e4:b5:da:06:f1:3c:
a5:ae:20:a3:e2:53:53:cd:28:4c:b0:d6:4a:09:f7:8c:f0:b8:
f4:d7:3a:93:07:37:2f:05:cf:0f:e0:52:51:1b:ec:a7:32:22:
37:c7:f9:71:2d:08:2e:e2:b9:68:b1:a2:a5:8f:f5:96:82:a5:
58:e6:0d:57:c9:7d:2f:80:72:71:78:18:d7:7e:1b:77:fc:08:
08:bd:bd:fe:be:6b:ec:3c:e2:bc:fc:43:4d:96:e7:f0:57:c2:
e5:2e:34:e4:72:4a:e4:05:11:89:13:89:ab:e8:3b:32:47:40:
7e:69:b4:85:d6:05:1e:bb:52:e8:19:53:60:4a:d4:16:40:c8:
af:27:ee:1d:c9:7e:91:46:95:25:83:19:25:30:65:54:9c:28:
cc:be:71:5e:65:a0:12:8c:48:41:69:e0:54:8c:4f:35:ec:ef:
91:42:55:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3
REJCN0ZDMjUwHhcNMjYwMzI2MjMyOTIzWhcNMjYwNDAyMjMyOTIzWjAYMRYwFAYD
VQQDEw02OWM1YzE1My1hODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtn9ZItcKeWp0iXRWRQA/19PEoiWIVkK5cvSGc9Ppbk5uqgq2k5cnKWF3TOe3
glEyVjGG0PugzoOWWSMh1AGC+93DSVK77iQVYOxDySucEelY18QbSyoQaVFP0IXH
g2uryGHE3ZIImH6XWZ5ZXdycTdWnN39nbx8mzbt/g2AncqvtxRPSIHAWkzbsMjfm
uVdlboyqo5Sv2Fsc8IcMaoXNITS8Uwsuwa3E6jefr8A/0o55iN/luD5b510jhE0Z
wV+44XN9bomb5QodYFKufxhEFWlVS7xifq9fJU136Paq/tPC0frE60D3lL3tUUkn
mnCVAu5m0FgHP67FyqChf0c5ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDievnPE
0zeciPKKwfSIVTz606hCMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx
NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf
Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p
bU5QTm45SUVFMVo5dTNfQ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIqSOGezWtzxNvsaPtHLfAvQ2X/nDtucna6RuEOtzul/wvFb+s5bc60BqKWy6
TAJ7loriys5atuwO18cRv+PGyPASuWSpzvxnv0SGFsRoHy2C2F+05LXaBvE8pa4g
o+JTU80oTLDWSgn3jPC49Nc6kwc3LwXPD+BSURvspzIiN8f5cS0ILuK5aLGipY/1
loKlWOYNV8l9L4BycXgY134bd/wICL29/r5r7DzivPxDTZbn8FfC5S405HJK5AUR
iROJq+g7MkdAfmm0hdYFHrtS6BlTYErUFkDIryfuHcl+kUaVJYMZJTBlVJwozL5x
XmWgEoxIQWngVIxPNezvkUJVDw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:10 2026 by rpki-client