
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier: 42tpWsCc9mkb4+PWoLHieCLhy9lTlJ3IJJn/XER2siE=
Subject key identifier: 8C:A6:98:51:D7:C4:FC:4B:47:9E:62:93:BE:36:0B:F3:79:E7:2D:0C
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial: 0A39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number: 0A31
Signing time: Tue 24 Mar 2026 19:31:50 +0000
Manifest this update: Tue 24 Mar 2026 19:31:50 +0000
Manifest next update: Tue 31 Mar 2026 19:31:50 +0000
Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: besn3LluBbPfTp0VCAlurZamFfsGpRcJ4kN0DzmmOoE=)
2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: 0VT5Qaia6m9lZiwgE5nQayNqKU8C2FZbz9qJZgerMEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2617 (0xa39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Validity
Not Before: Mar 24 19:31:50 2026 GMT
Not After : Mar 31 19:31:50 2026 GMT
Subject: CN=69c2e6a6-2e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:4a:ec:9b:41:e2:00:dc:91:0e:99:fb:52:
ab:01:35:74:fd:7e:33:4c:be:25:ba:9a:05:3a:75:
50:27:86:2d:d5:e9:f3:8c:ad:a9:dd:3a:cc:e5:74:
8a:f6:4a:4a:2e:96:d8:f8:5c:76:06:51:33:31:26:
94:6b:d3:cc:53:b5:b7:b5:b0:99:d5:eb:be:e6:07:
08:76:38:c6:60:e0:71:14:ef:17:8e:ae:33:a4:64:
a3:0e:4b:97:af:ce:73:33:17:20:1c:7d:b6:25:1c:
73:99:59:f2:5d:a1:3a:b0:92:6b:3a:33:47:81:a6:
17:04:be:93:48:3b:9a:57:db:ec:f8:1d:a8:a2:fd:
24:02:ab:e4:b2:e1:75:01:e4:61:7c:03:8f:70:4b:
0b:bb:38:58:15:98:ad:23:57:f9:18:91:20:9c:39:
e9:a9:81:62:8d:06:ef:85:f1:42:aa:b4:56:e1:d6:
3e:69:9f:65:2b:4e:24:d3:ca:b5:c7:07:7e:15:e6:
43:f8:fc:d5:bf:9c:9f:f5:be:32:e5:1e:d2:99:70:
95:36:e3:26:c8:a9:b5:f4:24:5e:63:75:11:6c:26:
dc:83:a0:98:34:1b:bb:37:4d:2e:e4:2d:eb:23:8c:
39:6c:7a:f0:cc:31:91:67:ef:69:cd:74:34:2b:dc:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:98:51:D7:C4:FC:4B:47:9E:62:93:BE:36:0B:F3:79:E7:2D:0C
X509v3 Authority Key Identifier:
keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:bc:4f:68:9a:d2:78:57:02:d4:03:b0:48:2c:4f:37:c4:c4:
b7:1e:a9:51:f9:ec:ad:e4:a4:08:ab:e7:ec:90:f5:0f:90:50:
b6:30:da:e8:97:48:c7:15:3e:45:67:b8:27:11:8e:fb:0e:1b:
09:6d:e4:70:da:3c:0f:1b:3c:53:14:b8:e5:8a:0b:03:93:08:
41:20:08:22:72:00:bf:c4:fe:a4:0d:18:bd:53:09:79:3c:d8:
46:e2:a6:93:e3:19:ac:9c:7d:d2:2d:2b:8a:86:d2:46:ec:68:
2e:f1:38:23:ef:e1:99:54:6f:c4:de:83:d6:47:a5:6a:d6:20:
a3:25:2f:fb:1e:85:1f:18:96:46:fc:a4:94:78:d4:80:9d:12:
a9:7f:94:eb:46:00:92:27:68:1e:cb:91:0e:28:97:cd:1b:46:
1d:4f:ac:2c:39:ba:f4:b4:d9:9d:c3:5b:45:1c:ac:70:43:8d:
a7:c1:c9:bb:38:ff:95:d3:3b:b9:26:4c:ba:cf:a2:be:ee:6f:
ce:8d:78:34:65:f0:b1:d1:92:1c:df:8d:0b:15:21:c3:e6:cf:
7c:18:8d:4e:a2:b6:33:6c:d6:08:5a:32:c3:40:71:c6:2f:9d:
9e:06:04:53:51:2f:6f:9b:bd:68:cd:2e:02:be:bb:e3:a8:b9:
90:52:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:41 2026 by rpki-client