
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier: ghlMQBFTmlHmIxE5KuBlk9fGcXr84rWSICbONGarl6c=
Subject key identifier: 56:11:81:AF:98:F0:99:9C:90:EB:CC:2A:22:92:E3:CC:A8:F1:8B:B4
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number: 62
Signing time: Fri 27 Mar 2026 07:34:14 +0000
Manifest this update: Fri 27 Mar 2026 07:34:13 +0000
Manifest next update: Fri 03 Apr 2026 07:34:13 +0000
Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: iip7ni1Dx9KM8hNGnk2Fv+DFzaYN8N/pwqXcEHEd5YM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Validity
Not Before: Mar 27 07:34:13 2026 GMT
Not After : Apr 3 07:34:13 2026 GMT
Subject: CN=69c632f5-6343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:e9:9e:5e:f0:5b:dc:29:f7:da:ca:df:17:
56:9a:b0:c2:d7:00:62:14:c9:b7:63:b1:95:5c:d9:
85:c2:95:9a:57:33:07:25:eb:12:31:d3:a2:6c:c2:
d3:1f:de:84:30:e6:fa:22:14:9b:91:d6:b8:d2:05:
99:ae:6c:f6:45:35:98:4a:92:ba:44:df:77:35:eb:
ad:b7:c4:db:da:a6:05:a2:b4:58:b1:a5:3e:f9:55:
53:81:ae:1b:95:48:3a:a7:bc:52:d2:ad:41:de:2a:
36:89:4d:6e:bf:09:94:0c:84:82:18:be:24:ef:01:
44:7e:be:6d:88:86:5a:f3:73:37:76:1d:3f:16:94:
82:3d:d9:ff:ab:21:da:47:be:30:c8:3f:58:8b:eb:
83:1c:ce:d0:e2:16:b3:ea:82:d4:25:e1:91:48:a3:
6b:61:83:53:12:b2:cc:4c:81:62:2f:9a:13:a6:57:
2d:72:cc:06:45:4b:bb:0e:a0:06:44:d4:9f:79:8f:
0a:8d:74:46:28:7a:03:ee:5b:63:2e:7c:6b:35:7e:
6d:2f:a8:26:98:66:1b:a4:20:14:7e:d1:ae:9a:96:
d8:73:c1:6d:60:0a:e4:fc:a3:9e:c0:72:fd:db:1a:
0e:a9:45:49:22:dd:92:bb:3d:de:8d:a9:0a:ad:cd:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:81:AF:98:F0:99:9C:90:EB:CC:2A:22:92:E3:CC:A8:F1:8B:B4
X509v3 Authority Key Identifier:
keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f4:bc:07:5b:56:ee:ac:27:39:3d:9f:81:8f:c9:46:be:4b:fb:
4c:d8:c8:3a:03:68:02:a3:37:16:77:a1:9d:77:b3:fe:1d:cd:
73:58:e5:1a:7a:9b:cf:fd:92:15:1e:be:97:fe:38:cb:df:99:
c7:3e:df:16:b8:cd:de:35:47:0e:52:ab:6a:b1:dc:16:db:7b:
83:39:63:5c:af:ea:18:36:cc:9e:4a:de:55:e8:42:c1:6a:69:
97:b6:6e:0b:19:5c:d5:82:e0:bb:89:fe:ca:80:32:57:a1:e0:
e4:0b:56:9e:9f:f2:08:53:9d:5c:3c:01:40:5f:f9:d1:73:cb:
6c:1b:d9:7a:0b:62:57:41:25:8d:4a:9c:ab:f7:fd:8b:9b:64:
a1:37:ba:ec:ee:e3:1a:11:d8:b1:44:da:ec:58:94:eb:56:53:
56:8e:1a:99:f4:83:1e:d0:10:21:ed:04:fe:0e:ed:a0:af:3a:
6f:56:2b:b9:44:78:8f:ed:7d:35:c5:ca:3c:69:29:16:31:16:
98:bc:15:1d:fc:c3:e6:42:e3:3a:1a:fe:d3:6c:fb:de:30:4c:
1b:2b:0e:d6:0d:9c:cd:b2:8b:b5:8d:d2:21:94:26:3a:47:5b:
3d:cf:42:ec:0b:60:51:85:ec:3b:c0:4f:a5:1a:e1:b9:a5:c3:
9c:c9:7f:a9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5
NDZEOUU5MjAeFw0yNjAzMjcwNzM0MTNaFw0yNjA0MDMwNzM0MTNaMBgxFjAUBgNV
BAMTDTY5YzYzMmY1LTYzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+++meXvBb3Cn32srfF1aasMLXAGIUybdjsZVc2YXClZpXMwcl6xIx06JswtMf
3oQw5voiFJuR1rjSBZmubPZFNZhKkrpE33c16623xNvapgWitFixpT75VVOBrhuV
SDqnvFLSrUHeKjaJTW6/CZQMhIIYviTvAUR+vm2Ihlrzczd2HT8WlII92f+rIdpH
vjDIP1iL64McztDiFrPqgtQl4ZFIo2thg1MSssxMgWIvmhOmVy1yzAZFS7sOoAZE
1J95jwqNdEYoegPuW2MufGs1fm0vqCaYZhukIBR+0a6althzwW1gCuT8o57Acv3b
Gg6pRUki3ZK7Pd6NqQqtzalTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVhGBr5jw
mZyQ68wqIpLjzKjxi7QwHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx
ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG
NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5
WkU3TFZDY0hYc3BSdG5wSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQD0vAdbVu6sJzk9n4GPyUa+S/tM2Mg6A2gCozcWd6Gdd7P+Hc1zWOUaepvP/ZIV
Hr6X/jjL35nHPt8WuM3eNUcOUqtqsdwW23uDOWNcr+oYNsyeSt5V6ELBammXtm4L
GVzVguC7if7KgDJXoeDkC1aen/IIU51cPAFAX/nRc8tsG9l6C2JXQSWNSpyr9/2L
m2ShN7rs7uMaEdixRNrsWJTrVlNWjhqZ9IMe0BAh7QT+Du2grzpvViu5RHiP7X01
xco8aSkWMRaYvBUd/MPmQuM6Gv7TbPveMEwbKw7WDZzNsou1jdIhlCY6R1s9z0Ls
C2BRhew7wE+lGuG5pcOcyX+p
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:35 2026 by rpki-client