
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier: s38C+SNGQWuuvRcHdUedG7QBimslDxd187OXFNxHy/A=
Subject key identifier: 36:FA:89:03:95:76:77:F4:EA:06:FC:DF:7C:D8:AC:A0:87:DB:56:34
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number: 0270
Signing time: Wed 25 Mar 2026 01:32:50 +0000
Manifest this update: Wed 25 Mar 2026 01:32:49 +0000
Manifest next update: Wed 01 Apr 2026 01:32:49 +0000
Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: E4IimLP3tM6d5WyDXTKejDNVMX4sqhjReG8sUwapJbk=)
2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: 05qrx5y7Td7SV3Ez+kyc5rGnUR1hyfqb/ezkRc89p2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Validity
Not Before: Mar 25 01:32:49 2026 GMT
Not After : Apr 1 01:32:49 2026 GMT
Subject: CN=69c33b41-ecb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:f7:c2:01:d7:62:b4:fc:b8:d7:4a:26:81:
c7:58:2d:07:5a:c9:99:8f:a2:d4:02:9c:6b:3a:f7:
ad:55:6e:b1:36:b1:94:a3:a0:78:4b:ee:b2:5e:1a:
f0:fa:cc:56:35:64:dd:36:f5:9a:1d:b6:37:72:f8:
25:34:ce:af:09:14:e2:66:f3:d0:55:46:0f:c9:37:
71:0d:39:02:94:c1:13:1b:89:48:ba:52:1c:d4:61:
34:b8:90:c4:b3:27:68:a6:9d:32:5c:82:8e:67:c7:
08:90:34:ea:a6:f5:92:c0:40:55:c9:37:e6:c0:ff:
d0:a4:e6:0f:9e:e6:64:0d:67:6b:f6:0b:1f:e2:4f:
d5:d8:23:e9:27:25:49:ea:0d:f8:4b:55:8b:20:2d:
15:d3:e9:08:59:82:20:7e:41:59:6b:e2:bd:dd:7b:
32:ed:b5:fc:a2:e6:b4:13:cf:e2:c5:e6:2d:9b:ec:
00:90:93:2f:c0:5e:14:60:fd:f7:1b:a3:8d:c5:a8:
f0:61:86:77:7c:13:5d:d5:7e:80:fb:ac:4a:ff:a3:
fb:07:79:bb:ef:ba:6b:3f:32:3b:de:60:ef:c4:47:
1a:85:8c:b0:e6:47:f0:7a:05:3e:5e:be:10:b5:76:
7e:e6:16:4a:6c:1f:c9:62:4a:05:83:89:f6:81:55:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:89:03:95:76:77:F4:EA:06:FC:DF:7C:D8:AC:A0:87:DB:56:34
X509v3 Authority Key Identifier:
keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:ce:d9:90:61:97:dd:83:76:be:af:40:c7:4e:87:fe:65:
66:ea:cd:4b:72:99:ab:f7:96:5f:e5:2c:ff:41:ea:9e:a9:2b:
f6:d4:a5:d2:06:20:99:a0:c6:36:5a:7a:15:3e:0a:dd:82:2c:
fc:c4:c2:66:16:c0:b0:f8:ca:ff:a6:ec:94:df:f9:48:6c:2f:
41:f6:29:c9:4c:11:27:2e:c8:7d:9f:07:4d:96:e3:86:3e:40:
4c:7f:89:cb:61:db:fd:65:f2:5b:96:8c:64:f8:ea:7e:fe:fb:
09:46:10:68:0d:7f:32:ff:36:87:79:25:69:e8:4e:84:3a:4d:
4c:3f:7a:a8:27:34:e8:f4:87:60:b6:21:f8:7f:85:e8:26:4f:
6e:c3:ae:57:c0:e6:36:ef:5b:49:06:68:98:e5:41:0c:a4:03:
fa:d8:27:d7:12:df:ce:0b:64:3d:bd:29:a4:63:82:98:a9:4c:
75:19:a8:6b:a4:90:a0:cf:de:ad:27:43:3d:ee:27:ca:d0:7b:
6f:e6:ab:1d:52:ee:d6:80:f5:c0:1f:81:7c:cf:fa:19:32:52:
85:65:bc:78:79:36:d1:15:89:59:c9:9e:c7:e5:7a:6d:01:00:
16:52:7b:0c:20:f0:af:33:23:d4:18:43:eb:0d:70:d0:b7:9d:
ba:6d:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:06 2026 by rpki-client