
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: 1RLU5UNfE9pUBg/h97hp3D7ZJ0HX7O5Yyh8w/UNafi4=
Subject key identifier: 37:20:E2:DB:D0:52:21:9D:02:46:4D:2C:2C:FE:71:8E:8A:ED:EF:77
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0CEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 157F
Signing time: Tue 24 Mar 2026 18:01:03 +0000
Manifest this update: Tue 24 Mar 2026 18:01:02 +0000
Manifest next update: Tue 31 Mar 2026 18:01:02 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: 8LjxUzisFez3WcMeILb6dr/plYcFpE6333e11T1fQlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Validity
Not Before: Mar 24 18:01:02 2026 GMT
Not After : Mar 31 18:01:02 2026 GMT
Subject: CN=69c2d15e-73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:f1:f8:bc:e5:9f:fc:a0:dc:fe:d5:8a:68:
9a:bd:41:98:b4:0a:29:ff:0a:76:9e:22:c2:a7:15:
2f:3b:48:7a:72:48:81:49:8c:11:2f:16:ce:ee:c4:
72:4c:9b:11:91:46:c0:d7:ec:bd:3a:19:db:4a:59:
6a:3a:6b:e2:d8:2d:b8:b8:31:52:a0:0b:95:01:22:
ba:fb:44:d5:b4:3c:df:85:1c:93:ee:ff:91:86:73:
0f:eb:7c:8d:18:47:bf:f6:20:2f:3c:94:6d:ad:ab:
ed:a5:e0:74:b5:be:62:b7:0f:3a:8a:e2:31:40:73:
27:9d:4c:7c:28:5c:c7:da:10:4e:52:50:a6:f6:f5:
de:f4:8f:47:2e:05:5d:7e:69:85:60:28:e2:21:3d:
a0:b3:03:64:e2:bb:f5:fb:0c:30:38:5f:2e:70:72:
5c:06:08:24:6c:5a:c0:95:8d:c1:a5:71:0f:74:63:
ec:3a:34:55:69:9b:ec:2d:01:9d:38:c3:3a:8e:3e:
e2:bb:26:6d:4e:d7:d1:c5:31:fa:55:7f:60:e1:1d:
12:9a:1e:34:14:a8:b2:59:9e:51:d0:0b:77:fc:09:
cd:3b:9e:38:4a:bd:9a:f1:30:32:c1:f5:b8:b7:70:
5c:c7:63:3a:94:1b:e1:ed:ec:eb:5f:a1:4c:a9:3e:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:E2:DB:D0:52:21:9D:02:46:4D:2C:2C:FE:71:8E:8A:ED:EF:77
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:9b:8d:26:be:36:6b:a3:86:f7:c7:5d:da:f7:79:8b:c0:
34:56:a1:57:71:6e:83:cd:98:4b:ea:71:52:82:c8:86:b0:25:
fc:92:58:f4:c9:f7:12:4d:9c:14:de:2b:aa:e2:61:f2:0d:b8:
22:6e:f0:6a:6c:bd:3e:0e:af:fd:14:57:09:dc:ea:90:7f:d3:
f5:a2:91:3d:75:17:a5:e1:f8:66:cb:9b:13:77:6c:f4:0f:ca:
db:3b:90:7d:9c:a5:40:77:95:e4:55:b0:f5:78:3e:e8:63:44:
5c:ba:97:80:96:03:77:31:d6:72:8e:62:53:1d:64:6b:fd:75:
27:30:b6:ae:69:4e:86:e8:c5:07:77:56:21:ef:1f:c2:b9:a8:
9a:d8:43:e7:a9:3c:7b:89:79:33:34:8f:31:d7:84:88:27:8e:
4e:ab:35:2e:8c:a9:0e:c8:22:2e:d2:59:19:ba:81:53:6e:86:
d1:d8:d8:c6:e1:d0:df:32:fd:bd:e0:73:c3:dc:ba:2f:26:a5:
1b:92:31:83:fb:23:f3:5c:ae:c7:ae:1d:a3:1a:3b:43:a9:3a:
79:64:de:be:eb:68:2c:f4:5f:96:29:40:a9:0a:89:60:c8:d8:
88:d6:80:cc:da:cf:cd:af:92:ca:1f:9b:70:ee:53:3c:a9:dd:
9a:7c:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:23 2026 by rpki-client