
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier: grtdsQ7GSOUtrBR+X6x/ZOjIEJ97mIIx6XAb07w2jNI=
Subject key identifier: 2B:D2:02:0A:D2:57:87:8E:55:EA:31:64:C3:D9:EE:0F:03:A3:F7:3C
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial: 3520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number: 3520
Signing time: Thu 26 Mar 2026 14:38:25 +0000
Manifest this update: Thu 26 Mar 2026 14:38:25 +0000
Manifest next update: Thu 02 Apr 2026 14:38:25 +0000
Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: lvYSFCAJCUGpQ9pwt2qSqu2D+UyBrwNpfPLTY/SFHnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13600 (0x3520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Validity
Not Before: Mar 26 14:38:25 2026 GMT
Not After : Apr 2 14:38:25 2026 GMT
Subject: CN=69c544e1-3257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:06:33:0a:5c:18:09:ec:aa:d3:d5:04:8c:
a9:04:47:21:0b:31:4f:d8:28:3e:01:39:78:2c:9f:
0c:49:fa:0c:1d:36:8d:75:d3:e2:01:94:0a:24:07:
b0:5e:12:09:be:de:87:a9:52:4f:4f:a5:6e:63:ce:
47:01:81:af:2b:a1:83:23:2d:b5:88:67:cd:6e:2c:
c5:fb:23:21:03:bc:fe:10:18:c2:0a:38:04:15:e1:
e7:69:63:93:b9:5e:31:41:ef:19:41:3a:87:3e:c6:
dd:1c:c0:8d:b4:fc:a7:38:0e:0f:e8:e3:10:8f:41:
de:0b:86:59:f9:88:b3:c2:38:ea:98:89:cc:f0:af:
0b:10:3d:27:a3:ea:76:e9:bf:3f:b3:50:c2:8a:b5:
c9:c4:81:8c:d9:44:07:76:68:61:b2:f6:36:3c:44:
79:9c:05:9f:63:eb:21:68:d6:0c:1c:a3:a8:3b:f9:
a0:ee:17:6e:2c:ed:34:98:c6:70:60:55:b5:de:ee:
e1:7e:49:a3:c1:0b:13:d6:b8:36:f4:e9:3c:5d:13:
e6:a4:ad:5b:b6:58:72:66:62:aa:29:70:49:df:d8:
7f:fd:b9:b5:26:53:21:65:ed:d8:d3:24:02:20:e1:
a5:27:0a:84:b8:47:8c:98:9e:ab:47:db:a9:d4:b6:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:02:0A:D2:57:87:8E:55:EA:31:64:C3:D9:EE:0F:03:A3:F7:3C
X509v3 Authority Key Identifier:
keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:c5:2f:d3:5c:62:53:a8:df:a0:ff:0c:cd:8d:30:55:b6:d2:
a1:be:e4:32:a5:24:06:53:13:fe:0e:c8:5c:6e:da:cc:94:b0:
36:b2:d6:de:79:d6:7b:07:ba:00:19:bb:09:8c:57:ef:51:9e:
ed:e0:5c:1e:9e:fc:86:b6:6e:a8:53:c1:44:e9:da:05:2b:2b:
0e:89:f6:86:48:e1:93:ef:f8:7c:4c:44:b3:cc:b1:14:23:98:
dc:3b:f5:0c:31:7b:bc:2e:33:56:ca:8d:b6:55:99:1f:1a:64:
6c:3b:e9:12:49:da:cc:40:09:80:ca:dc:17:64:4b:12:b6:78:
90:cb:d4:e9:2f:5e:08:0a:bd:62:de:1f:51:84:4b:28:6b:15:
49:4b:73:e8:c0:41:fd:a4:c6:cc:f6:ed:58:15:b5:d4:35:b2:
98:6f:8a:b3:e8:63:c3:62:ec:70:86:4f:4b:38:ba:b0:9e:57:
ed:56:33:89:9f:6b:9a:4f:63:db:9e:19:fa:26:10:f3:f8:ba:
02:d9:64:bf:79:ed:94:de:f2:c5:fa:df:aa:ab:41:12:30:30:
fd:cd:24:82:1b:3d:4f:54:84:2b:c7:1b:25:57:74:c4:27:82:
d2:cf:e5:7d:e5:89:f0:46:68:90:14:92:f8:61:f8:2d:92:00:
16:6e:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:23 2026 by rpki-client