
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier: W7bl3nPDMMnDO5Pct+aIlwMUAB3MOiqW/u1C6YNKEOg=
Subject key identifier: F2:25:5E:64:60:EC:06:E1:54:76:14:E6:14:AB:88:68:BE:CA:EC:99
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number: AB
Signing time: Wed 25 Mar 2026 06:27:51 +0000
Manifest this update: Wed 25 Mar 2026 06:27:50 +0000
Manifest next update: Wed 01 Apr 2026 06:27:50 +0000
Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: IpghltxKKCGK739Z6jWZkIKI0vcsq+1UIvX7SPHDZ0I=)
2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Validity
Not Before: Mar 25 06:27:50 2026 GMT
Not After : Apr 1 06:27:50 2026 GMT
Subject: CN=69c38066-728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:21:f2:ab:86:6d:3e:07:cd:4e:5e:a0:5d:
5c:8d:ab:1c:29:0a:5d:8a:3c:60:69:61:65:42:5a:
d8:83:a6:68:61:ef:52:88:e8:30:e2:1e:e8:d6:02:
83:34:68:52:bb:79:5f:c9:61:8d:57:d9:61:57:09:
ac:bd:55:cd:56:a8:f7:d0:f2:dc:fe:47:86:14:be:
fa:49:7c:2d:db:20:93:b7:c8:dc:9d:0d:5e:dc:81:
fe:5a:87:d3:16:5b:69:aa:27:cb:3a:03:0b:6c:96:
fe:95:21:17:08:90:d6:6c:b9:16:e2:49:f0:2d:62:
b4:23:17:98:ed:95:f5:75:5c:95:7f:a6:ed:53:90:
24:e4:4a:12:a3:b5:39:fb:a8:8e:eb:e6:2e:22:f6:
5e:a6:b1:33:e8:85:77:9c:50:09:05:28:62:fb:95:
67:b6:33:4b:9f:64:f7:16:b0:b4:71:8e:41:6c:ba:
9a:9f:c8:ba:ff:fb:ec:9b:27:10:08:55:45:91:1b:
57:e9:7c:27:da:3d:a0:f2:e5:8a:df:11:5a:43:29:
94:79:7f:b0:40:4b:a2:62:7d:03:5d:d2:59:e6:88:
d9:91:a2:10:3f:5f:66:c8:cf:b3:91:7f:b7:80:5b:
9b:3a:06:65:d2:21:5a:d9:5b:c8:86:40:1e:30:ac:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:5E:64:60:EC:06:E1:54:76:14:E6:14:AB:88:68:BE:CA:EC:99
X509v3 Authority Key Identifier:
keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:56:bd:d9:26:ce:d9:23:33:dc:5b:cc:99:36:58:be:26:
d5:f8:7c:49:53:37:ef:b6:ae:29:8d:27:9e:7e:00:e3:50:73:
fd:2f:c6:f1:cb:c0:be:01:15:e2:f5:34:2d:e1:b3:f9:2f:80:
3e:c6:cd:36:08:b4:93:d7:f4:cf:7c:5b:bc:31:aa:c6:40:3d:
6a:28:58:d5:1b:8b:4d:fb:0e:f1:b9:82:0f:21:5e:00:26:86:
de:ab:46:ac:d2:58:7f:53:eb:e5:84:fd:4f:3e:e2:41:b9:5e:
c8:8f:1e:70:25:36:cc:0b:7a:a8:5d:b1:7e:5e:53:37:d8:0a:
d6:fe:84:8e:f3:5d:18:a2:e9:5b:18:cf:73:1d:5b:ef:6e:8e:
9a:9c:36:0f:3d:52:11:cb:ac:66:2e:51:33:1a:d8:8c:8f:9d:
03:e1:2f:4a:7e:b5:ee:5c:af:00:3a:15:41:ae:dd:f1:e4:fc:
7b:8f:ea:fb:94:27:e7:53:43:ad:c7:e5:09:f6:3d:d5:12:0d:
7c:f4:0a:0e:19:e3:90:78:a1:d7:f9:73:6d:eb:87:f4:09:51:
83:a3:7c:7c:5c:c5:cd:77:b0:89:03:f5:1a:62:e0:81:ea:a7:
0b:96:84:01:f3:84:fe:88:ef:73:6b:3d:27:c9:33:ac:37:aa:
2f:28:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:01 2026 by rpki-client