
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier: ZZhiJvh+ngxYSAfu2YefzVHfNlEcyFF9hFw0bh5LkDo=
Subject key identifier: D7:36:B2:15:B2:C2:AC:A6:B9:1C:69:A7:4B:DE:5C:41:D6:CB:C5:16
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number: 71
Signing time: Wed 25 Mar 2026 07:03:14 +0000
Manifest this update: Wed 25 Mar 2026 07:03:13 +0000
Manifest next update: Wed 01 Apr 2026 07:03:13 +0000
Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: 3avZ2SdCjMGCiumEurHANxmiZ1nTuA9t6ZeVIsEwEY4=)
2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: b8E22OnaIEiCrA4yJOZi7F0AFzWqNO6MaNrnTrS8sIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Validity
Not Before: Mar 25 07:03:13 2026 GMT
Not After : Apr 1 07:03:13 2026 GMT
Subject: CN=69c388b1-0e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:8a:97:0e:e2:79:d7:ef:55:0e:07:98:74:
fa:61:81:81:f3:fb:47:b7:49:5e:83:6e:fe:66:67:
52:58:c5:d5:14:09:9c:1f:aa:ea:1c:c3:8a:79:62:
2b:9d:35:81:56:e4:d6:d8:14:1c:eb:40:f2:87:56:
d7:c5:fa:e0:3a:06:0b:1a:46:23:96:7f:e2:0e:65:
d1:8f:c0:8c:fc:d2:ba:0a:45:05:4d:0b:74:21:b8:
99:95:12:22:d2:0c:33:cb:ab:48:62:23:a7:ff:94:
b8:30:67:88:30:6d:03:48:1d:02:1b:61:05:ea:20:
84:13:c1:22:ac:0b:88:4d:ee:d8:5e:35:3a:07:e5:
d1:c3:e9:e8:0b:71:70:3d:0d:23:da:e2:f3:ad:f4:
d8:f5:33:65:17:70:60:91:9a:d9:d1:41:e6:11:fe:
5a:8a:35:f4:0b:6c:10:bc:4f:a0:fd:93:28:3a:b7:
8e:6a:e5:cf:df:6d:af:1d:5f:4f:75:37:78:ae:22:
6e:b1:c3:83:90:38:39:62:15:7e:b5:a5:37:e8:9c:
35:92:30:96:21:63:1e:93:62:97:c1:cb:63:88:c5:
ea:d8:06:b5:17:23:68:91:c8:9d:58:45:0f:f7:63:
6d:17:55:1d:c8:17:80:e8:a2:c8:68:9d:cb:1b:20:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:B2:15:B2:C2:AC:A6:B9:1C:69:A7:4B:DE:5C:41:D6:CB:C5:16
X509v3 Authority Key Identifier:
keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c7:1d:f4:2b:2d:34:34:65:65:a2:d6:f6:81:c7:e1:d6:5b:
7b:5b:3a:c5:d1:b0:6f:16:5f:41:9b:58:b8:22:80:68:69:9d:
1d:88:ac:a2:84:e6:29:91:4f:94:95:27:b3:d3:40:09:d3:0e:
ec:91:15:e7:71:e8:34:00:23:9b:e0:cd:17:bc:90:d2:aa:f9:
7c:7d:a8:39:7f:23:98:cd:88:4b:e8:89:6d:83:4c:95:6d:79:
88:6a:4d:95:45:68:99:c2:90:45:31:c6:76:9a:a2:db:f9:1a:
e1:52:cf:fc:0a:b4:1f:b5:ef:d6:ce:37:87:d5:ff:a0:ab:23:
ed:85:45:b6:eb:4c:69:15:5f:68:c0:45:88:f2:3a:43:d5:e4:
96:6c:49:62:4a:e8:7c:5f:ca:5d:32:aa:04:52:e4:6d:7d:81:
11:53:37:6a:ad:b5:88:b2:42:ee:2a:9c:c6:33:94:e1:8c:99:
f9:38:b1:f9:c6:06:e6:a6:d7:4b:11:94:3e:b6:b7:bb:cf:d6:
1b:e2:41:ae:92:0c:52:d2:63:b6:b6:8e:45:16:9e:e7:e9:f9:
64:72:99:75:93:5b:49:01:4d:6d:40:21:30:d3:2d:4e:5b:74:
97:04:0e:08:4b:32:66:69:7d:88:0c:07:61:cc:55:b7:2e:5d:
df:87:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:03 2026 by rpki-client