
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier: gVceTdsiAiVDI1Vy1h6H6ScYYTeDnwwMS3QmBr6pH74=
Subject key identifier: ED:9B:E2:20:E6:6E:C8:B8:17:CB:FB:87:5E:A6:51:7B:B0:26:E6:31
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer: /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number: 2A
Signing time: Fri 27 Mar 2026 08:23:32 +0000
Manifest this update: Fri 27 Mar 2026 08:23:31 +0000
Manifest next update: Fri 03 Apr 2026 08:23:31 +0000
Files and hashes: 1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: rbFUBLffqvZU009HDX6INP6HlhxXlGm9ua7F0I5lNic=)
2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Validity
Not Before: Mar 27 08:23:31 2026 GMT
Not After : Apr 3 08:23:31 2026 GMT
Subject: CN=69c63e84-af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:61:4c:59:e0:ed:21:62:0d:ae:5a:3d:ec:
5d:c4:f4:d6:1c:46:07:0d:60:e3:76:69:da:ad:72:
4a:94:cf:f3:d7:bf:da:25:7f:a9:7f:f4:e8:22:98:
0c:29:0f:dc:17:cd:2c:97:b6:86:b9:35:db:72:cf:
73:bf:10:53:ab:4c:76:53:42:ce:5b:08:21:c2:5a:
64:69:00:34:d5:98:66:e2:47:77:f0:cc:4c:43:9e:
56:11:b5:ce:06:a7:2c:bf:12:7a:23:40:df:bf:3c:
5b:9e:99:49:aa:91:7b:b3:9f:0f:8f:e7:c1:1e:61:
b1:5f:df:c2:8c:11:0a:74:99:1c:b3:c1:b8:dc:c6:
f7:83:b8:5b:43:19:a3:31:73:ec:6e:ff:34:25:72:
84:19:7f:5a:c7:af:7d:66:fd:43:81:cf:58:9c:f5:
31:bf:3e:42:c1:36:13:5e:27:c7:6e:c1:0b:3d:b3:
78:c4:b9:33:39:03:06:56:79:05:c2:90:30:49:ad:
30:7e:0c:05:48:8f:c0:05:fb:69:bb:8d:bc:41:9e:
2a:2a:47:da:c6:47:9f:99:67:95:31:17:b9:14:21:
b3:54:1e:c8:84:11:40:1f:5f:6d:7d:f4:12:d7:e6:
c6:ab:9f:d0:63:74:71:f8:59:cb:fd:55:91:90:c6:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:E2:20:E6:6E:C8:B8:17:CB:FB:87:5E:A6:51:7B:B0:26:E6:31
X509v3 Authority Key Identifier:
keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:81:df:48:bd:8e:be:42:ec:05:29:5e:aa:37:78:0b:bb:3f:
6e:3f:dd:4d:73:90:42:bc:7d:02:17:f8:2d:5a:1f:64:72:13:
73:d4:91:34:0b:9f:49:8b:90:0f:9d:fd:e8:c8:ec:c6:78:d1:
04:73:c0:9d:c6:85:1e:f0:a4:3a:98:39:ea:6b:af:e9:8a:b6:
23:39:5c:81:97:9b:d7:83:fd:3c:db:eb:17:45:ed:b4:b6:ef:
c4:5f:b0:12:f6:28:b4:9c:0e:3a:40:b9:e0:f3:b1:d3:de:19:
73:11:6e:f0:09:5e:10:ef:9d:92:5f:6c:13:16:58:e8:a8:10:
b7:88:b5:f3:23:b3:3c:6f:b8:69:01:92:70:f3:8f:6d:31:b8:
19:13:6a:d7:35:d4:f9:ee:cb:15:b0:5e:49:ad:50:d0:45:b8:
58:98:13:b1:22:1a:62:15:cd:a0:1c:3a:38:e0:18:4b:29:6b:
a9:90:1e:2c:e3:18:a4:1b:37:78:5c:f2:58:7a:95:73:47:41:
bd:64:a3:ae:1b:16:70:f9:dc:cd:31:2e:c4:00:db:20:ba:92:
01:b6:7d:3a:6f:13:2b:b9:49:03:76:58:c6:b7:de:29:35:50:
a7:88:8b:c9:63:c8:ac:d6:63:8d:9e:01:5b:b1:b0:55:19:92:
c7:09:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:52 2026 by rpki-client