
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier: jGP97QV+syL6aigZYj59RaFgejf3u/tdNurbyEmwX+s=
Subject key identifier: 53:BD:D2:66:A1:A1:3F:35:82:7B:65:A1:A1:80:37:A0:11:1A:AE:3B
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial: 33A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number: 3D3C
Signing time: Tue 24 Mar 2026 15:17:44 +0000
Manifest this update: Tue 24 Mar 2026 15:17:44 +0000
Manifest next update: Tue 31 Mar 2026 15:17:44 +0000
Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: bbn1IH+UIP6ObqVOFSS2jdK52F0Zge8U4RhWZjqnjlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13216 (0x33a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Validity
Not Before: Mar 24 15:17:44 2026 GMT
Not After : Mar 31 15:17:44 2026 GMT
Subject: CN=69c2ab18-463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:91:f6:0f:61:d6:2a:7d:9f:41:a9:b4:8f:
a1:c3:85:45:4e:b2:73:ba:e1:9c:fe:36:86:9b:91:
2c:df:9d:46:cd:da:0d:a4:19:13:55:9c:7a:66:71:
85:98:b9:50:84:84:48:f2:d1:13:54:cf:f8:cc:fd:
fe:cb:67:97:64:98:6f:a4:8c:89:73:0d:6d:d3:75:
4a:cf:5a:b8:de:eb:77:04:a2:ee:41:7c:fa:53:32:
59:aa:d2:cc:57:47:8f:a0:29:ce:e3:d6:7c:83:c7:
3f:ba:f0:e0:6f:65:39:f9:29:e3:ab:78:af:8f:d7:
90:22:a6:05:5c:71:87:d8:68:f4:00:41:03:e5:c4:
96:44:85:fd:7e:70:e8:72:40:d5:9a:b5:d5:b0:4b:
dd:0a:04:33:3f:f8:41:0f:e5:47:c0:aa:53:1c:86:
e1:ae:8c:1b:2a:72:a8:1c:5e:fe:b5:26:01:c9:5e:
1b:98:5e:05:3f:91:5b:a3:73:4e:24:66:a9:85:a0:
5f:c2:b5:8d:d7:b3:1d:fd:04:30:8e:ec:03:5d:57:
af:4e:8c:9d:23:92:f3:25:d3:de:e9:68:00:a9:c0:
41:f7:8f:a4:4c:35:9c:83:e0:66:13:1c:4a:bb:a3:
0b:00:7e:e5:3f:76:a9:d9:75:70:75:8f:b2:47:4c:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BD:D2:66:A1:A1:3F:35:82:7B:65:A1:A1:80:37:A0:11:1A:AE:3B
X509v3 Authority Key Identifier:
keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:ea:86:c7:4e:17:07:50:dd:23:36:f4:de:20:15:3b:9c:
2d:1d:2a:7f:55:fa:09:39:13:75:cd:05:0d:45:dc:db:5c:40:
ca:fa:ad:5a:9e:64:4f:2d:ed:56:1c:f7:62:d9:d2:92:1c:61:
3b:9a:dd:83:75:46:db:88:0d:0d:28:40:91:04:75:c8:13:24:
a8:f3:27:cd:45:20:6e:57:df:65:46:b6:d7:ef:6c:f5:3d:4b:
92:3f:dd:2b:dc:76:ea:df:da:c8:f6:3d:e7:92:28:7f:be:e9:
b1:9d:e2:af:16:90:a1:27:c3:9d:48:e7:8f:6c:0c:45:28:e8:
47:b1:1a:7a:44:d8:d0:88:0d:b4:af:12:f6:58:a2:7e:23:75:
8b:7f:61:f5:4d:72:90:4c:c6:8c:aa:ad:2b:ae:1a:82:3d:ce:
8c:4f:94:11:9f:22:3c:ee:a9:e4:0f:97:fc:9e:e7:c0:55:80:
a0:b5:46:8b:3d:b0:ed:8f:65:6d:3a:d7:a2:24:55:ca:6a:6c:
76:d3:d2:eb:6e:26:f1:68:9e:11:a7:84:7a:a5:65:80:c5:68:
5d:0b:57:e4:4d:45:1b:67:d1:bc:1d:1e:48:89:66:4b:26:e4:
7d:cc:85:9c:24:3b:82:f8:55:4a:50:e3:eb:83:53:4e:99:1b:
24:bc:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:41 2026 by rpki-client