
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: rBPZkiRjHakMKFtLZFaW+EVcQMTdSfaJ5BEbFDRUTXc=
Subject key identifier: 0B:DD:65:05:90:31:D0:A9:1F:81:E5:87:5C:C7:1C:21:FF:B2:CB:71
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0B44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0B3B
Signing time: Tue 12 May 2026 19:18:39 +0000
Manifest this update: Tue 12 May 2026 19:18:38 +0000
Manifest next update: Tue 19 May 2026 19:18:38 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: m26zmUsahV73CbXKRK/xaXkwFWw/V1QjDN3G33La8MU=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: ZWPcFrTL/W8/hSHPoCLkwWIX68mMSRrbQ6m2PomlMlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: May 12 19:18:38 2026 GMT
Not After : May 19 19:18:38 2026 GMT
Subject: CN=6a037d0f-527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:08:9b:ed:4e:21:44:60:70:c2:20:66:2d:
85:77:57:48:ac:cd:9b:2e:dd:cc:8c:8f:0e:e5:8e:
c0:5e:8f:8f:a0:b8:b1:75:1c:fa:14:e7:f8:9a:55:
1f:50:eb:ad:04:3c:2a:c2:2b:2b:e5:c1:7d:e1:06:
39:2b:b1:8e:65:36:75:ce:eb:3d:28:0a:9d:2a:98:
d4:ec:6a:b9:c8:31:9b:4b:6b:c2:a5:55:a7:e6:b7:
08:3b:d8:6c:23:42:e0:2f:f8:14:fe:bd:d6:6a:13:
43:8c:0f:c6:7c:54:4a:7b:f5:7b:2d:73:01:19:20:
07:0d:8e:18:56:34:50:08:4f:12:40:11:d3:01:2f:
85:a8:fc:33:c8:09:0e:9b:a5:3a:67:24:95:08:d0:
1c:d0:0a:68:43:89:47:e4:d8:f3:7d:48:ac:7d:16:
5e:2c:61:32:5a:16:4d:b3:a5:7d:27:2d:57:21:34:
6d:7a:19:a1:3c:10:37:17:b0:ff:27:24:f6:25:90:
d4:20:d9:52:bb:a8:8d:68:76:94:58:39:7a:c0:6d:
20:de:cf:15:b7:0d:a2:e1:3f:4d:fc:fa:bb:2b:f1:
36:bb:0c:43:cd:e0:a4:6b:a8:c6:3c:05:fb:28:64:
35:9a:c5:42:82:d1:ff:49:42:70:32:b4:ed:4d:a9:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:65:05:90:31:D0:A9:1F:81:E5:87:5C:C7:1C:21:FF:B2:CB:71
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:dd:e6:dc:26:6f:02:8e:e9:61:b4:ca:23:81:5c:b9:40:b6:
d7:ed:d0:f2:66:15:7f:11:fc:39:68:fe:a9:31:b8:cf:b1:60:
f1:0d:de:5f:df:99:21:0e:36:ab:13:ab:c6:3c:99:19:3a:e1:
35:b6:69:bb:d9:e3:39:32:07:77:d7:d2:b4:2b:4d:9f:09:6e:
69:c3:fe:9c:60:b0:06:9f:a1:ec:5b:67:af:d0:72:57:dd:97:
94:08:b8:24:38:f8:eb:d2:f2:71:6e:72:5c:a7:8a:5e:53:2e:
aa:a3:e5:bf:a8:7a:76:1f:cb:6b:dc:c4:13:94:b9:6f:e5:0f:
ec:63:d9:86:7c:25:e0:bc:dc:db:4c:42:f4:d6:06:4d:48:4c:
d9:e5:88:af:1e:eb:e9:61:66:6d:86:74:18:06:e2:05:d7:c8:
07:51:4e:27:49:f4:c8:ab:29:a3:6c:72:6d:dc:91:73:f4:1f:
46:55:a4:29:d2:55:02:6b:ff:38:d1:66:3b:82:8a:b0:5c:e2:
85:86:8d:02:a5:fd:b7:0a:ba:30:36:98:1d:e6:0a:03:73:24:
21:aa:55:2f:50:58:64:fa:42:88:3c:ca:0e:86:37:a7:27:ae:
65:bc:99:bd:79:29:a5:25:42:4c:f6:93:16:e0:5f:82:db:a2:
22:c7:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:36 2026 by rpki-client