
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json)
Hash identifier: QZ0gihEjG0o1kMmMcqwUuHOlh2No6oo7SmpRlnRNMJ8=
Subject key identifier: E7:5B:AE:29:C2:61:24:96:65:B1:DD:03:65:34:49:3A:BF:C6:B9:11
Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41
Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
Manifest number: 073C
Signing time: Tue 24 Mar 2026 21:29:10 +0000
Manifest this update: Tue 24 Mar 2026 21:29:09 +0000
Manifest next update: Tue 31 Mar 2026 21:29:09 +0000
Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: qRTp0FJWV9QqOvl2/dxXmze9NCNL4oSWlGv0HcThpXc=)
2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: j9gI0YuOlNLMFqeyvr/nJ9hL4WV9jhQUtzj3HCuyTu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl
rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
Validity
Not Before: Mar 24 21:29:09 2026 GMT
Not After : Mar 31 21:29:09 2026 GMT
Subject: CN=69c30225-5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:0f:61:a9:6e:7f:24:ac:f3:d3:70:f5:76:
8f:1c:22:10:fb:05:1b:8f:65:f8:ae:dd:9b:ea:75:
81:55:ae:fe:03:41:ae:1e:11:0a:27:42:ff:96:8a:
34:c9:cd:f0:20:fe:a9:ca:37:c9:13:71:a6:2b:d0:
b3:c9:88:6a:42:48:c4:d7:9e:56:89:76:7b:63:72:
09:b9:30:bd:03:ef:3e:67:1d:f3:6b:e2:9d:29:3c:
76:ba:d9:63:31:9c:6d:8c:ce:73:db:8c:1a:b6:00:
1a:bb:c0:6e:14:e9:a4:f9:74:ad:ca:b6:7f:b9:d9:
76:d3:95:6f:f9:91:fb:e0:ee:46:6f:86:69:f6:ce:
fe:c5:25:38:e0:62:d6:29:e8:f5:34:ee:63:f8:f4:
31:91:48:fa:4a:37:37:0b:72:a1:bd:66:2d:fe:89:
eb:1f:84:e7:bd:08:fd:ce:8b:ee:cc:ae:b8:e2:18:
b8:b1:53:98:bc:95:c3:a7:38:0d:f7:11:ac:2f:ed:
fb:11:2e:4b:e6:52:32:f6:ac:b2:41:6e:4a:40:b7:
24:4a:5d:3e:40:fc:a1:cf:e1:ce:cf:a1:40:42:84:
90:1b:2b:6c:6f:b4:2a:16:69:70:86:89:62:f2:35:
f0:5e:09:fa:ac:52:48:ee:6d:45:2b:0f:bd:88:5e:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:AE:29:C2:61:24:96:65:B1:DD:03:65:34:49:3A:BF:C6:B9:11
X509v3 Authority Key Identifier:
keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:06:57:e7:25:8c:27:98:07:c6:66:93:3a:f8:51:ac:24:c8:
04:eb:f0:24:68:ea:c1:75:b9:0a:34:23:7f:71:3f:2b:69:ec:
b1:6f:b3:4f:1c:94:68:75:19:ea:e5:e2:ab:64:ab:ec:a2:0e:
ca:37:95:d0:f6:4f:60:ee:68:22:a5:7d:f0:75:92:da:91:5a:
fa:14:4d:c6:ce:4c:28:ea:df:13:18:5d:67:ea:11:7e:ac:35:
61:a7:20:3c:54:0c:60:d4:e9:27:75:33:31:b2:4f:b4:8e:50:
4d:2c:03:3e:f2:57:34:57:0b:b0:b1:54:51:cc:99:27:92:18:
47:00:f1:e6:a0:28:77:3a:3a:1a:1b:5c:b2:3b:dd:33:32:e5:
78:eb:d8:4a:86:24:9a:ab:38:ed:b3:b2:5f:b2:f1:77:82:55:
3c:e2:5d:47:ba:c7:2b:65:03:36:91:ac:7b:de:14:d5:4c:39:
fd:54:00:c3:ef:b2:b0:91:b0:77:ee:2f:eb:fc:23:d4:c7:8c:
64:2d:49:01:3c:81:ea:ce:16:43:00:c6:24:25:37:2b:85:a2:
dd:a4:06:b5:28:07:2b:79:23:bf:5f:b2:e1:cb:20:3f:68:42:
37:3c:29:91:d9:ab:9f:4f:d8:c0:73:48:d8:70:23:3c:4e:99:
0f:df:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:28 2026 by rpki-client