
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json)
Hash identifier: 5oPsmELI/+QM7Hi4wHU4gWH05rtB1rdqztgkpcDf90g=
Subject key identifier: A6:9E:15:F3:96:5A:FB:AE:00:DB:29:67:53:74:D6:13:C5:EF:77:AC
Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
Manifest number: 15
Signing time: Fri 27 Mar 2026 08:37:07 +0000
Manifest this update: Fri 27 Mar 2026 08:37:06 +0000
Manifest next update: Fri 03 Apr 2026 08:37:06 +0000
Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: 8Jrg/OJEnC4aC/v1bSYgenOgCpIljbY4b/BojuV9kWM=)
2: 964C388611F511F1B1F03794113D8C67.roa (hash: aDJ1T/8negVg13w36W/uf7MN9f6atZcUX+4QUHdvnVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Validity
Not Before: Mar 27 08:37:06 2026 GMT
Not After : Apr 3 08:37:06 2026 GMT
Subject: CN=69c641b3-cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:28:a2:b2:bb:05:2a:7a:47:6c:07:23:04:
02:ec:d1:fd:9e:0b:69:75:a1:12:90:93:e4:21:c9:
98:a1:30:6d:bd:6e:f1:10:56:b3:64:4f:fc:06:cf:
6f:5c:fe:b6:fb:2e:e3:30:05:97:b2:99:37:41:87:
59:60:25:3c:22:40:de:74:e3:f2:da:24:69:86:ca:
97:63:e5:8b:b6:d3:ff:74:7e:70:82:37:6e:93:4c:
04:cf:1b:9b:0c:39:af:15:1f:b1:b2:5b:46:60:fc:
16:b3:24:8f:8d:aa:27:a2:57:a9:40:05:50:37:f4:
0a:3c:3f:3b:9c:22:7d:40:fd:44:7f:20:37:0e:d6:
4c:8c:40:8a:cb:bc:b2:f7:74:84:90:c9:29:2a:3e:
f8:59:6d:ab:56:0e:04:19:76:2a:2d:18:ec:60:52:
a7:3d:68:31:2e:8e:81:9c:21:4a:26:30:aa:72:4c:
a8:fd:6a:f8:b4:35:bb:0b:8e:a3:d7:38:96:c3:3b:
8a:cd:33:b6:c7:ea:4a:ea:16:43:81:d2:b2:59:23:
33:1b:35:3c:9d:bc:87:9c:c2:7b:61:ca:3e:49:3f:
dd:02:8f:5e:b5:97:14:70:2d:90:50:bf:70:ed:4d:
df:6e:16:f2:5f:53:e4:52:12:51:12:d2:91:a8:1e:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:15:F3:96:5A:FB:AE:00:DB:29:67:53:74:D6:13:C5:EF:77:AC
X509v3 Authority Key Identifier:
keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:dc:cb:19:63:ea:2c:c4:6c:2a:46:22:df:c6:f0:b8:34:
0f:c7:c0:de:d6:7e:ec:a6:39:73:c1:09:fe:31:dd:ed:4b:38:
37:1c:42:df:e7:ad:da:af:be:5f:3d:0e:ec:45:4c:20:89:45:
f6:0e:26:4b:56:6b:ef:8c:47:b3:73:af:34:48:82:b4:90:ed:
ab:7c:fd:fa:0c:c8:e8:59:be:0a:63:7a:4b:3a:a2:10:cf:e6:
04:b2:93:34:92:1b:63:86:5d:76:4f:2f:e1:84:c3:20:74:63:
49:36:8a:63:13:c2:3c:61:f1:2e:7c:90:6f:be:1a:1f:46:9b:
0e:2c:54:4a:06:57:9b:97:d6:8e:75:d9:85:f3:0e:ad:de:ce:
fa:f2:6e:9b:81:7c:8f:10:10:08:fd:f9:60:7b:6d:07:98:9f:
2a:85:47:66:00:1b:e9:dc:fe:93:55:d1:16:ac:7a:d7:1e:52:
3a:9b:5b:a5:d8:e1:e8:4c:2b:93:a8:f3:e7:d5:ac:9e:78:4f:
62:69:3f:cd:07:58:ca:a0:f1:c8:b9:d4:39:2b:fa:14:b6:32:
18:3e:3d:bb:7f:11:36:7b:f3:67:cc:92:31:b2:e8:11:5e:aa:
e3:ae:fd:5e:dc:f8:7c:c2:95:25:2e:0f:b9:a6:18:5c:78:f1:
0a:00:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:41 2026 by rpki-client