
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier: 8Tsdz+Ndax8de1m/9NYFV7og8b6GsENVYLVJekLR85Y=
Subject key identifier: 8D:1B:77:6B:9C:35:7D:F9:3C:72:9F:FB:7A:CC:97:01:6D:1E:9F:0B
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number: 06E7
Signing time: Tue 24 Mar 2026 21:51:54 +0000
Manifest this update: Tue 24 Mar 2026 21:51:53 +0000
Manifest next update: Tue 31 Mar 2026 21:51:53 +0000
Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: ha/jIyYMwkyGhz/dXEJ5p/j3hhSzuf7VjxqFBf4UUvs=)
2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 4BP9RA5edvRIYEOJDfl9qmd/eccUjRwBS2/hmKl9/us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: Mar 24 21:51:53 2026 GMT
Not After : Mar 31 21:51:53 2026 GMT
Subject: CN=69c3077a-fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:1f:c2:3a:3e:f6:49:cf:50:23:1d:0e:dc:
8c:9a:0f:d2:ff:e2:53:3c:f4:0e:82:cd:2d:a2:e7:
f7:ae:69:97:67:68:ef:f7:89:29:9c:ab:36:3c:f4:
fe:69:75:5e:60:1f:64:93:54:88:80:cf:ec:4a:5d:
be:38:62:de:27:81:fa:23:cd:c2:19:0f:58:9d:c6:
58:2e:0c:a2:21:fc:52:0f:dd:45:fd:4b:12:ff:4b:
53:57:82:2e:9c:69:48:84:bb:85:f6:81:2c:3d:19:
7a:d6:ac:f5:e3:7f:2b:c3:37:5c:84:53:eb:f1:1f:
08:33:c0:3c:21:71:1d:50:c2:c8:f3:21:06:c1:a4:
c0:2e:c9:4f:e0:3d:57:d8:25:f0:77:73:4c:7a:31:
97:0e:67:85:85:8c:c5:d7:ad:a9:88:98:6e:6b:7e:
a1:8e:2d:fa:01:c6:f1:02:8f:74:91:ab:7d:96:c0:
70:d4:f7:dd:9a:e1:36:a3:84:fd:2c:6e:e8:98:f9:
a8:5b:7a:2a:39:b9:02:3e:09:3c:6f:dd:4e:ac:c1:
70:86:f7:d7:9c:3b:64:ad:be:7a:ea:90:1b:cc:c2:
34:2e:92:9d:34:9a:b7:1e:f3:7c:88:7d:58:0f:bf:
de:a4:6f:74:86:78:3f:a6:48:42:15:06:42:90:1d:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:77:6B:9C:35:7D:F9:3C:72:9F:FB:7A:CC:97:01:6D:1E:9F:0B
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:2d:6c:ec:38:bb:c9:22:d7:9d:fb:b0:3b:7f:41:ee:20:
e8:5c:77:4c:c1:7b:9f:f4:1f:ba:4b:5d:8f:46:d3:a4:39:86:
78:6d:6d:25:07:83:09:b2:d3:64:85:2e:72:7d:76:be:72:75:
e9:26:18:4a:bc:cd:60:18:1d:c8:59:38:e5:b6:8c:e0:c9:4b:
01:86:fe:b4:5f:bf:8c:35:6b:02:d6:cc:58:9c:f7:dd:25:c2:
59:d3:9f:5b:95:8f:19:7d:4d:9c:0f:e9:18:4f:fa:5c:92:6b:
a5:ea:85:54:a9:02:0a:d8:46:bd:b7:68:2c:2f:66:62:2c:0e:
77:ee:15:59:4f:7b:8f:54:ea:e9:fe:4d:9d:d9:05:af:f9:ec:
b0:a9:5a:3f:fc:ee:8f:b3:16:e8:c5:a9:b9:92:1d:e0:5d:e8:
0c:f3:8e:71:82:e2:cb:7f:10:80:9c:5a:ee:00:84:d3:6c:d2:
c9:63:ff:8b:a1:7e:7c:a2:08:a4:9e:81:d4:91:59:45:dd:dd:
b0:c3:3f:f7:b5:4d:e1:16:41:a4:30:bb:15:81:9a:9e:8e:13:
1d:24:1d:57:c2:12:0e:71:6c:6b:17:85:37:9d:96:2a:cb:fa:
7e:11:31:ab:bc:48:92:ed:e0:f6:c8:e4:68:bc:29:93:7e:ff:
48:79:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:36 2026 by rpki-client