
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json)
Hash identifier: Vgz13V+KjVipEW21MoQMPH2LM301k57hMHtgx158YpE=
Subject key identifier: EA:1F:16:AD:C0:19:45:55:45:F6:B5:51:F3:52:D5:97:98:55:0C:F5
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial: 06A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
Manifest number: 068D
Signing time: Tue 24 Mar 2026 22:16:55 +0000
Manifest this update: Tue 24 Mar 2026 22:16:55 +0000
Manifest next update: Tue 31 Mar 2026 22:16:55 +0000
Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: KJ6TQkn4bnddB0GSRsqF04qYXuczT0RvHFZTuIn5u1E=)
2: 26E44986BE8311F0B427BB65C4F9AE02.roa (hash: Dx5tcISPNh0RjY9tKVBv7tMDgBX0/Dr23CkV9FuyXMs=)
3: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: JuznK0Navb/TYRQG52xqAUxKffqGcodmGZgqr5yACw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Validity
Not Before: Mar 24 22:16:55 2026 GMT
Not After : Mar 31 22:16:55 2026 GMT
Subject: CN=69c30d57-f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:d1:a3:64:4a:18:a6:c6:b3:e8:17:7a:71:
5f:a1:c0:ae:19:50:50:b9:93:10:b3:95:35:fc:c2:
6a:d1:c5:06:82:3d:ad:57:06:30:41:ce:ee:cf:d7:
98:9b:57:e1:48:46:1b:c5:42:42:e7:dc:22:55:5f:
a4:59:3e:0d:ff:fd:39:24:3a:86:5f:34:3a:c1:51:
83:86:62:50:69:74:26:1a:e1:6e:50:a3:49:4e:ae:
13:3d:46:de:42:7c:cb:bf:19:23:e8:12:6d:8e:b4:
6b:26:e8:c4:e9:8e:2a:d7:88:66:ae:62:3d:3f:50:
3b:e2:aa:d2:4a:05:e4:67:a1:60:15:b0:a0:1a:2e:
bf:53:98:df:24:e2:3e:81:01:1d:7f:eb:5e:5b:22:
fd:0c:da:96:bd:f1:af:37:51:c8:37:16:ea:84:ce:
d3:69:cd:28:ac:cf:4c:c1:bb:1b:05:89:c3:87:05:
61:28:eb:d0:a5:2c:05:dd:55:8a:da:46:dc:82:d8:
25:15:37:03:58:b6:09:0e:6c:aa:de:ff:db:d2:70:
42:e0:34:15:dc:44:ed:bd:7f:8d:82:93:f5:64:f0:
f0:d3:2d:12:97:da:12:79:08:56:7b:87:5c:b9:46:
0f:66:67:3f:20:61:f5:97:f5:27:8f:df:b8:3f:c1:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:16:AD:C0:19:45:55:45:F6:B5:51:F3:52:D5:97:98:55:0C:F5
X509v3 Authority Key Identifier:
keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:8d:44:3a:26:21:00:d9:35:3b:b8:0f:02:32:0e:0e:69:
63:42:45:f2:36:2d:74:f6:00:3c:c4:46:cc:98:11:9f:de:05:
02:83:a8:9d:aa:98:7d:89:36:68:ad:14:98:dc:6b:10:d3:25:
78:33:cd:b0:99:d4:16:d5:00:74:e4:1b:ed:b4:67:f2:05:35:
bd:2a:62:2f:20:fe:20:2d:ed:76:b5:02:54:fd:9b:af:4d:60:
7d:1c:f1:6f:5a:cc:a9:cf:88:ae:7c:39:74:25:1d:97:e4:6c:
9e:c0:ac:ba:d9:0d:6e:14:ed:34:48:d8:57:66:98:a9:2c:6d:
58:df:e4:8f:fc:c7:63:91:14:f8:7e:63:44:ed:1c:9b:80:89:
12:5a:2f:c8:7e:a9:07:b8:8c:b7:3f:a4:dc:69:47:45:76:54:
fa:1c:2b:43:78:36:27:a7:ef:4a:13:d1:ba:3b:f3:0b:ca:b6:
4a:e4:9f:fe:b7:9e:1e:6a:79:4b:09:90:bd:47:eb:4c:db:7f:
de:ec:03:b1:4b:3e:fb:99:e8:af:3c:36:23:aa:61:7f:d2:d6:
2c:73:5c:53:a9:85:37:6e:4b:76:da:03:b4:59:4c:27:2f:02:
51:a9:9a:c9:46:07:79:ca:a8:78:0f:c5:13:b3:a6:4e:5d:6f:
80:1e:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:28 2026 by rpki-client