
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: zHKpqnSjzsXGXg4WRDJPtlpjSsQr3F6mr6iYOE7QVjY=
Subject key identifier: F0:85:C8:33:8D:40:2F:9A:E9:82:FF:5E:CF:28:7A:AF:A5:9F:70:7A
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 016D
Signing time: Fri 27 Mar 2026 04:17:50 +0000
Manifest this update: Fri 27 Mar 2026 04:17:50 +0000
Manifest next update: Fri 03 Apr 2026 04:17:50 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: mb9V2m8wDCFYu7eMJDLGPaPr70APHNXTNFUL8KB7ULg=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: hsvg83rgR4LLPwkP5NM04Dace/cP92iXdlcSROFWaew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Mar 27 04:17:50 2026 GMT
Not After : Apr 3 04:17:50 2026 GMT
Subject: CN=69c604ee-fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:fc:3a:69:79:87:0a:ca:e9:7f:0e:81:a3:
02:38:41:2e:ea:9d:fe:97:df:d9:a1:37:52:e2:91:
55:d9:01:ae:0f:da:00:88:ca:21:b0:c0:fd:6f:2a:
36:21:df:f6:41:69:50:4a:1a:74:e4:5a:87:7b:cb:
4b:d9:45:fa:9d:24:82:1b:97:5b:a4:8f:b6:16:99:
3e:f1:b2:be:f2:cc:b3:ca:f3:7a:cb:5a:10:4f:39:
a2:6f:6b:ba:a5:64:75:be:ea:b3:30:7a:a4:88:b8:
fb:24:50:a7:bb:cb:dd:ed:29:00:4c:ce:1b:be:68:
38:d4:ef:59:b7:14:c2:e4:9d:80:0a:a3:4a:7a:60:
eb:bd:1a:f4:69:3e:07:59:f5:d5:77:80:16:57:fa:
bb:bc:c6:18:b5:67:14:7a:46:3b:d6:49:2c:ca:32:
66:f2:87:73:57:5b:45:71:95:60:dd:07:af:d3:3a:
0c:67:0b:44:4e:cd:8f:61:3c:ee:b1:38:e5:52:3a:
64:da:cf:76:8d:b9:58:e8:35:ee:4a:a5:7a:c0:cf:
5a:97:e8:d3:2d:8d:40:d8:42:29:b1:35:61:19:75:
b8:34:c5:0b:b5:12:89:41:35:d3:f7:c7:24:74:a8:
b5:98:4d:6d:93:ad:f8:bb:d5:4f:a7:f5:e7:7d:1c:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:C8:33:8D:40:2F:9A:E9:82:FF:5E:CF:28:7A:AF:A5:9F:70:7A
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:16:62:40:a3:d0:77:e0:41:5a:44:ae:b6:0e:a5:ef:cf:
b4:b6:41:ef:46:97:7f:88:67:02:4a:d4:4e:76:a4:46:a6:7d:
46:a2:12:3b:4d:2f:49:ab:b2:58:f4:25:31:bf:0b:1f:a0:40:
bd:99:51:12:23:e9:c9:52:d7:60:73:46:c0:9d:b8:99:c4:b6:
60:ea:24:14:6d:dd:59:0f:5b:41:97:b3:02:48:d0:3d:a3:c8:
46:8d:de:a2:89:9a:c7:0b:8b:ea:5d:a5:13:48:89:2f:61:fa:
c9:3e:45:da:7d:bf:48:5e:6d:79:31:4c:06:8a:d6:6e:13:91:
1b:a5:16:bd:ad:05:ae:24:c4:ff:1b:41:b7:34:5a:0c:ca:c4:
f7:32:d8:16:5a:c4:05:cf:26:50:11:50:5a:01:d9:a9:63:27:
b7:09:e5:54:8e:c4:d8:78:74:25:63:76:ba:55:d0:03:8d:d1:
e8:84:53:05:94:50:11:5b:10:ee:28:9c:57:d1:57:d6:f9:c1:
b4:a0:78:ba:13:c7:61:7a:04:ca:3a:3b:c1:80:e7:8b:bd:60:
c1:24:09:4f:38:eb:6d:54:1a:0b:66:96:58:f3:0a:49:20:67:
b9:03:07:cd:98:26:ce:3d:2f:52:af:c9:52:ad:83:ee:2d:61:
41:76:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:58 2026 by rpki-client