
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: b2U2FDSQGCIp6IwzTSZMhrD4GzRRb8X8tr54mKP/Xms=
Subject key identifier: DC:69:9F:0A:CA:74:2D:54:87:09:12:49:12:14:2E:66:95:64:BC:41
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0B2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0B23
Signing time: Thu 26 Mar 2026 19:12:05 +0000
Manifest this update: Thu 26 Mar 2026 19:12:05 +0000
Manifest next update: Thu 02 Apr 2026 19:12:05 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: PDfymeaQ5Y6gOzIsNKvcAr12Zv1oITCizqwQCy4vb7k=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: ZWPcFrTL/W8/hSHPoCLkwWIX68mMSRrbQ6m2PomlMlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: Mar 26 19:12:05 2026 GMT
Not After : Apr 2 19:12:05 2026 GMT
Subject: CN=69c58505-9834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:5a:fe:92:a5:08:bb:76:ae:03:52:f1:ca:
f2:57:19:2a:03:e3:2e:6e:0b:95:d8:18:e6:b1:88:
4a:8a:5a:29:3b:a2:a0:10:99:27:0f:31:98:3b:46:
8a:c9:1a:ef:3b:fb:aa:3d:49:59:d7:b8:d3:43:be:
04:5f:d7:d1:5c:30:fe:30:02:71:ac:a9:11:5b:76:
e8:82:b8:e1:8e:98:8b:6d:21:39:e2:7b:e0:85:61:
4e:57:50:92:a4:e8:6e:08:a4:ea:b4:db:24:53:6e:
df:b3:2f:db:38:84:ff:e7:02:a8:ae:28:57:69:ec:
22:88:e8:ce:36:53:0d:03:fc:88:b8:36:5b:0a:b9:
6c:d7:60:92:6f:a1:9f:1f:72:93:4f:66:13:f8:6b:
d2:f4:88:1c:44:06:77:66:66:3e:53:b6:84:c8:65:
12:14:0a:67:1c:e2:dc:e2:9d:33:09:7a:6e:df:2e:
21:11:a7:b5:a5:d2:8d:46:2f:4e:b2:7a:e1:ef:8e:
43:4f:50:10:ac:21:78:cf:ab:c5:41:6c:27:54:a3:
68:cc:83:0a:32:f3:82:6e:07:f5:46:c6:41:71:c0:
d4:e5:3f:60:3b:c5:25:d6:9a:22:c0:12:33:43:de:
78:04:b5:73:b8:2b:09:c5:9f:43:7c:12:0a:d9:2e:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:9F:0A:CA:74:2D:54:87:09:12:49:12:14:2E:66:95:64:BC:41
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:df:f0:7d:de:62:95:35:37:47:a3:b7:01:c8:1c:69:26:
4b:64:ad:85:ac:c1:9c:2c:c3:50:fe:e0:90:04:2d:ca:96:6e:
3b:37:2f:74:02:ca:87:5c:a4:36:4d:fd:c9:f4:36:48:80:0a:
77:94:e8:ae:26:20:04:e2:68:ca:f4:b8:68:0b:ff:56:d1:bd:
64:6e:3a:cb:77:ee:4f:7c:2a:ff:2f:d4:fd:5d:83:f5:b0:9a:
40:cc:20:d4:40:cb:c5:04:b2:11:62:ce:e2:70:93:21:8d:d7:
de:d6:3a:c1:18:07:53:a9:2e:8f:b9:db:0d:74:26:4f:aa:42:
13:dc:41:09:86:5c:70:43:f7:4e:55:59:22:00:1b:1f:83:fb:
99:14:56:2a:a7:be:e3:ae:e9:a9:03:5e:01:81:4e:7b:69:32:
1c:de:54:e0:73:19:51:e5:46:cb:29:4f:d1:1d:3d:c5:fc:88:
ae:f8:f4:55:36:a3:37:58:81:91:46:15:c3:bb:5f:20:4f:e1:
05:24:dc:3c:a7:05:ad:9f:fb:52:ef:76:44:0b:c9:21:7c:82:
ae:bf:c7:94:81:51:28:70:b4:a9:54:97:ef:13:08:73:d9:cb:
a1:e6:5a:7e:5c:5e:01:f0:29:e1:42:92:94:c9:c2:f2:c7:77:
f8:1d:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:02 2026 by rpki-client